Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fe14a2e3-57d8-4882-8c8c-108d532533bd.roa
File: fe14a2e3-57d8-4882-8c8c-108d532533bd.roa (raw, json)
Hash identifier: PIPtfoT5tzIpiVnIFh7xKEps4rGkdIwdF6oK29/a9MI=
Subject key identifier: 59:30:78:40:9E:A5:03:2C:DF:E7:5A:97:CE:34:D5:EA:D9:C8:AE:0A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 73B17BD17B3238AD7C9BADE4D84B460C57086ECE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fe14a2e3-57d8-4882-8c8c-108d532533bd.roa
Signing time: Tue 05 Dec 2023 00:00:00 +0000
ROA not before: Tue 05 Dec 2023 00:00:00 +0000
ROA not after: Tue 09 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:b1:7b:d1:7b:32:38:ad:7c:9b:ad:e4:d8:4b:46:0c:57:08:6e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 5 00:00:00 2023 GMT
Not After : Jan 9 23:59:59 2024 GMT
Subject: serialNumber=43b4d4a6dbda828bdaf51c2264c7f547122ced26d800796b4a5d8c0d6e9548d2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:26:5a:72:e6:37:29:92:de:1a:0a:ee:08:e4:
d8:eb:4a:e6:86:c9:d2:a6:84:e1:ea:33:ed:18:a5:
aa:45:ac:cf:70:6f:f8:ef:18:5b:32:ae:b3:8f:8e:
87:ac:a4:06:95:35:2a:b5:5e:07:73:a5:53:cc:8d:
e5:29:75:80:4d:e7:fa:81:6e:14:46:fb:17:2c:2c:
d1:4e:e4:2e:40:18:56:01:6a:49:f6:cd:9c:c5:78:
a4:59:a1:f4:53:bc:81:5c:32:35:69:d1:6f:6c:b1:
69:1a:40:dc:41:28:3c:36:38:28:85:d8:88:09:39:
00:17:74:64:0e:ad:8a:79:61:71:65:f3:7d:88:ad:
99:af:25:2a:e0:b2:10:d0:2c:df:ba:88:15:cd:0d:
8c:bd:5f:bb:52:60:e6:86:89:e0:c7:35:32:e1:60:
58:92:00:01:95:e8:15:af:bb:62:f4:84:3e:79:c6:
f0:59:d1:54:b1:d5:2d:1f:27:1d:92:86:98:b8:9c:
c0:f9:cd:c1:12:3e:e4:0b:2c:1e:ef:87:d8:89:ab:
62:f4:55:3d:82:b5:1b:a4:22:de:a0:fc:9b:22:bd:
fa:72:9c:59:e9:79:bf:e8:2c:68:11:73:ac:b5:d5:
e7:0d:5a:f4:a6:a8:9b:7d:8e:0d:62:6e:a0:fc:ae:
66:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:30:78:40:9E:A5:03:2C:DF:E7:5A:97:CE:34:D5:EA:D9:C8:AE:0A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fe14a2e3-57d8-4882-8c8c-108d532533bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:be:ab:f3:5e:a6:bb:72:d5:97:07:c3:0c:c9:48:fe:56:50:
40:7c:72:a3:b6:d5:77:9d:8d:0b:4b:7c:a9:03:1c:27:75:06:
f9:25:81:00:de:65:72:18:f3:0c:b2:6a:c3:4f:0a:cf:58:29:
80:64:5d:8e:7b:97:60:56:dd:1e:aa:59:3b:e2:4b:30:1f:fa:
f6:dc:e8:cc:c9:78:55:c1:fd:a2:bb:82:c5:6b:0a:0d:83:bb:
2c:6b:1d:a3:5c:d8:42:9e:f0:a8:a6:21:51:30:b9:83:24:29:
9b:c0:6b:bc:a6:da:c9:4d:76:53:3e:4c:0a:80:4c:df:29:0d:
51:6f:19:65:a8:9e:0c:53:58:7d:b0:95:8b:aa:55:f5:90:50:
87:92:92:48:7d:a0:33:5e:88:3a:11:a8:34:a3:24:e6:23:d4:
c7:54:99:2b:eb:5e:ee:bf:7d:a7:14:dd:18:e6:06:b1:83:bc:
63:25:03:79:52:8f:01:63:4a:e7:db:db:cb:11:22:b9:f6:31:
f4:df:27:91:b7:f0:be:0a:1c:da:c1:ab:b3:59:fb:e7:1c:4d:
91:13:2f:aa:48:e1:cd:09:b8:59:8f:8b:31:7d:14:cf:39:2f:
d5:71:0e:29:8e:4a:11:68:b4:09:d0:ac:57:a1:dd:80:43:05:
00:62:32:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:18 2023 by rpki-client on console.sobornost.net