Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fb5487a1-6392-4e3d-b02d-90f476f608b3.roa
File: fb5487a1-6392-4e3d-b02d-90f476f608b3.roa (raw, json)
Hash identifier: Q9j27iqN74vHKm4oHzD2n3LL71Vu3HDlyliMI9SOWyk=
Subject key identifier: 54:C4:61:DA:8E:A9:86:90:29:30:16:20:47:43:ED:D0:23:6A:F5:B6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 36998FCFBAB1992A52485B6457A09615C1879DBF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fb5487a1-6392-4e3d-b02d-90f476f608b3.roa
Signing time: Wed 06 Dec 2023 00:00:00 +0000
ROA not before: Wed 06 Dec 2023 00:00:00 +0000
ROA not after: Wed 10 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:99:8f:cf:ba:b1:99:2a:52:48:5b:64:57:a0:96:15:c1:87:9d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 6 00:00:00 2023 GMT
Not After : Jan 10 23:59:59 2024 GMT
Subject: serialNumber=9616b4c3df59192f8b20bc89a81da8733b541c9c3fddf277c92cc70b799ee7eb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:74:59:39:78:3e:3c:5a:16:3e:54:00:07:c1:
a6:0a:ec:19:89:f8:d3:8a:dd:d3:eb:17:79:ec:67:
a0:5a:41:1f:41:05:5f:b9:fe:ea:15:3a:c8:a0:25:
9f:3b:d7:a2:57:2d:57:cc:1e:66:a0:9a:0c:3e:8f:
c2:e0:5e:e2:1d:45:0e:a6:5c:c5:ea:19:7e:22:1d:
29:68:8f:de:ef:dc:ad:c5:63:5e:ca:58:4d:ec:14:
8c:9e:a3:0e:60:95:56:00:df:2c:3a:68:99:30:79:
f4:ec:1d:65:31:6a:42:dc:67:2b:bd:dd:de:20:26:
4c:01:d8:1f:41:7a:ed:38:07:10:5c:09:47:0b:d3:
36:46:12:ef:ee:05:1c:02:46:38:b9:9d:2c:af:17:
11:44:14:78:0c:05:d2:c6:4b:66:97:44:96:f0:09:
d8:63:a4:83:dc:0e:09:81:55:29:47:e5:08:1e:89:
5c:a1:78:c7:9a:b9:7e:82:fb:c3:35:0b:ee:89:15:
38:aa:a4:b4:17:a6:50:4a:45:fd:bc:c6:56:03:29:
b1:2a:78:98:7e:66:91:9d:f8:87:78:ec:eb:19:67:
65:f6:44:d4:11:10:21:5e:7e:ca:ee:00:d4:c8:28:
8e:ce:29:87:cb:23:61:fc:f6:2b:5a:dc:a0:4e:9c:
0e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C4:61:DA:8E:A9:86:90:29:30:16:20:47:43:ED:D0:23:6A:F5:B6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fb5487a1-6392-4e3d-b02d-90f476f608b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
21:f3:d9:fa:19:b3:ca:a5:c1:31:93:25:c3:ab:80:8a:5f:90:
da:b1:c2:4c:a1:af:21:69:06:38:3f:fe:40:cb:84:4c:fd:ca:
3f:ff:16:0a:25:1f:1d:7e:09:6d:e8:c0:1c:83:74:14:41:78:
3e:5e:84:07:6b:6c:2d:0f:e8:ca:c0:c2:65:74:f4:8e:e5:33:
33:11:c9:84:6b:e1:af:0f:61:fb:20:7c:41:b5:54:95:70:26:
74:b3:97:3b:9f:29:36:97:09:ca:02:ff:8a:3f:8b:c0:50:ac:
6a:14:b1:1a:93:01:ab:c5:23:de:12:80:45:c3:0f:d8:d5:84:
0d:98:e7:1c:96:28:ed:cb:28:78:ba:be:e4:be:c3:96:97:62:
1d:93:1a:98:c1:68:f9:48:9d:09:5e:9d:ca:0c:6c:22:a9:c7:
48:9e:9b:a1:3d:40:3b:7d:2b:80:99:52:68:1a:cb:54:f5:c7:
ea:b1:16:d1:10:a0:c2:de:9f:08:b8:28:0d:08:9a:8f:27:8e:
4d:8e:3b:60:6a:13:e3:9e:2e:e8:f3:e0:9c:e3:d4:ab:94:7c:
a1:70:f0:58:73:b6:09:6f:b8:79:f5:d9:d0:90:e9:5b:5d:53:
98:de:25:3e:e4:dc:1a:6f:08:94:aa:72:54:e3:ff:c8:3c:72:
53:fc:24:07
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNpmPz7qxmSpSSFtkV6CWFcGHnb8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjA2MDAwMDAwWhcNMjQwMTEwMjM1OTU5
WjB6MUkwRwYDVQQFE0A5NjE2YjRjM2RmNTkxOTJmOGIyMGJjODlhODFkYTg3MzNi
NTQxYzljM2ZkZGYyNzdjOTJjYzcwYjc5OWVlN2ViMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDodFk5eD48WhY+VAAHwaYK7BmJ+NOK3dPrF3nsZ6BaQR9B
BV+5/uoVOsigJZ8716JXLVfMHmagmgw+j8LgXuIdRQ6mXMXqGX4iHSloj97v3K3F
Y17KWE3sFIyeow5glVYA3yw6aJkwefTsHWUxakLcZyu93d4gJkwB2B9Beu04BxBc
CUcL0zZGEu/uBRwCRji5nSyvFxFEFHgMBdLGS2aXRJbwCdhjpIPcDgmBVSlH5Qge
iVyheMeauX6C+8M1C+6JFTiqpLQXplBKRf28xlYDKbEqeJh+ZpGd+Id47OsZZ2X2
RNQRECFefsruANTIKI7OKYfLI2H89ita3KBOnA6FAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUVMRh2o6phpApMBYgR0Pt0CNq9bYwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2ZiNTQ4N2ExLTYzOTItNGUzZC1iMDJkLTkwZjQ3NmY2MDhiMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACHz2foZs8qlwTGTJcOrgIpfkNqx
wkyhryFpBjg//kDLhEz9yj//FgolHx1+CW3owByDdBRBeD5ehAdrbC0P6MrAwmV0
9I7lMzMRyYRr4a8PYfsgfEG1VJVwJnSzlzufKTaXCcoC/4o/i8BQrGoUsRqTAavF
I94SgEXDD9jVhA2Y5xyWKO3LKHi6vuS+w5aXYh2TGpjBaPlInQlencoMbCKpx0ie
m6E9QDt9K4CZUmgay1T1x+qxFtEQoMLenwi4KA0Imo8njk2OO2BqE+OeLujz4Jzj
1KuUfKFw8FhztglvuHn12dCQ6VtdU5jeJT7k3BpvCJSqclTj/8g8clP8JAc=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:18 2023 by rpki-client on console.sobornost.net