Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ee74491e-4240-473a-92d1-a758e513acdd.roa
File:                     ee74491e-4240-473a-92d1-a758e513acdd.roa (raw, json)
Hash identifier:          TBylejpaKrxmBqkeGMYBHL84H0+h4lmkDT0W4MhLK8Y=
Subject key identifier:   E9:64:91:60:18:2E:F3:9F:A5:60:2B:A0:CE:F7:9E:63:27:79:DB:01
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6D1E686BAC748969E26A5958358C3CE843D72327
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ee74491e-4240-473a-92d1-a758e513acdd.roa
Signing time:             Wed 05 Jun 2024 00:00:00 +0000
ROA not before:           Wed 05 Jun 2024 00:00:00 +0000
ROA not after:            Wed 10 Jul 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 00:33:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:1e:68:6b:ac:74:89:69:e2:6a:59:58:35:8c:3c:e8:43:d7:23:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun  5 00:00:00 2024 GMT
            Not After : Jul 10 23:59:59 2024 GMT
        Subject: serialNumber=1eb105d3d02dae1f0c6c6990e85674365d3607ca0ae7abab3c376a9c89f5dd05, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:9d:8c:4d:a1:13:9a:95:b7:68:a5:e8:90:0b:
                    8b:5f:c0:f4:bb:8a:c7:bd:57:35:96:b1:15:3a:61:
                    8c:a2:a5:57:2f:09:21:5b:13:a1:a6:78:be:37:df:
                    a3:e8:e2:1c:6e:75:dc:50:cd:2d:4d:35:cb:b0:31:
                    3e:a2:46:18:83:15:11:e5:67:ae:20:8c:db:df:8a:
                    6f:ea:2b:cd:dc:ca:06:b8:46:41:7e:f4:90:e7:a6:
                    95:cd:06:60:02:11:50:94:3f:f8:9e:49:af:08:60:
                    c1:6b:cd:92:55:d8:1c:8e:96:5d:48:5b:d0:35:a2:
                    44:80:56:7c:9c:38:c4:6e:5a:a8:73:a7:6f:4d:e8:
                    06:7c:5b:ae:d9:38:09:91:19:51:55:b8:c8:8b:61:
                    3e:93:b6:e4:d4:70:7d:45:13:6d:0f:92:01:2c:91:
                    42:b4:79:b9:0e:79:e0:75:10:91:2c:c9:f0:a9:30:
                    91:8f:c6:34:fd:51:6f:72:c2:b1:7d:2d:4f:1e:2f:
                    0a:4c:59:5b:95:e6:42:fd:4c:e9:d9:0e:a3:4c:77:
                    2e:c8:0f:fa:87:5e:ed:3b:75:05:48:36:63:9e:e3:
                    26:67:07:17:9c:9b:10:12:00:35:b7:27:a0:b3:d8:
                    8b:af:17:5d:4d:a5:98:8f:5a:2a:a6:2d:16:eb:e2:
                    ef:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:64:91:60:18:2E:F3:9F:A5:60:2B:A0:CE:F7:9E:63:27:79:DB:01
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ee74491e-4240-473a-92d1-a758e513acdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:4b:be:19:77:81:56:4b:49:a4:12:c8:e0:46:4b:a6:6b:0f:
         fe:48:c0:21:68:22:96:4c:0b:8a:75:b8:bf:3c:92:f4:7d:7f:
         03:ff:26:f7:5a:b8:b6:81:66:02:34:75:b4:9a:3e:9c:d7:77:
         a4:0c:2b:7e:97:af:47:fc:86:fe:3e:53:69:81:2f:68:96:98:
         3f:50:45:6f:da:58:31:c3:9e:52:47:6c:aa:5b:7e:30:a1:bb:
         15:a6:02:b3:0d:e2:11:27:bc:3a:29:94:a7:6a:d6:7a:b1:5a:
         77:26:c8:fa:ab:41:1d:da:9f:e4:40:a7:62:e9:d4:78:bf:83:
         b0:1c:92:c5:ed:52:3c:68:c9:d9:8b:3d:e7:46:36:a8:4c:11:
         0f:9c:0d:02:4d:33:2f:c7:4e:26:62:fb:6d:23:51:08:9c:5c:
         c6:5d:2a:61:7a:0e:f6:bd:03:74:28:c8:76:1c:47:32:bb:37:
         76:55:09:67:4f:e7:65:5e:39:60:2b:ea:92:74:ec:78:a1:f0:
         dd:95:ee:ea:dd:40:7a:68:50:67:bc:f1:50:76:95:3a:8c:7c:
         34:c5:fb:8d:2f:52:93:42:b7:f8:c6:c9:14:5c:eb:d9:59:e4:
         d9:de:2a:f0:f9:72:2e:54:6d:11:02:83:65:7c:b5:d7:93:7d:
         d9:df:17:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 5 04:39:27 2024 by rpki-client on console.sobornost.net