Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0029c2a2-f195-498e-a14f-3e7031112706.roa
File: 0029c2a2-f195-498e-a14f-3e7031112706.roa (raw, json)
Hash identifier: sVjl1RvALAy9gs1ssDYny4Is8l1xKB3bfkzEBJa/9oI=
Subject key identifier: C6:63:71:CE:A0:EF:C9:D9:55:AC:8E:18:8D:64:36:01:6C:2F:CB:4D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2061650F00E18F9145420A59B5592F664E7AB7F3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0029c2a2-f195-498e-a14f-3e7031112706.roa
Signing time: Sat 04 May 2024 00:00:00 +0000
ROA not before: Sat 04 May 2024 00:00:00 +0000
ROA not after: Sat 08 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 May 2024 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:61:65:0f:00:e1:8f:91:45:42:0a:59:b5:59:2f:66:4e:7a:b7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 4 00:00:00 2024 GMT
Not After : Jun 8 23:59:59 2024 GMT
Subject: serialNumber=201ebc95dcfad4f6b27774a15b208f71a73d2928ff5821958eee202514b24be8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:2a:1e:09:b0:5f:06:d6:39:c9:d3:f3:7a:
13:7c:c3:29:13:b6:c4:eb:49:6e:e8:b6:d2:42:da:
ea:cc:df:2d:ee:f6:1a:70:d3:76:a1:72:25:cf:39:
04:0e:3e:64:50:76:db:ec:c6:86:4a:1c:d9:7e:74:
15:e0:1f:26:b9:65:62:fa:2f:46:1b:da:7f:95:88:
b3:e7:ec:70:4c:b8:22:75:06:96:45:ce:d3:09:3e:
56:47:a1:7c:1f:20:62:90:f2:53:bb:b0:73:e5:36:
d6:10:ff:f5:dd:40:e4:55:01:54:bf:85:55:34:3b:
20:56:50:6c:33:67:ac:7a:97:10:87:d2:08:e0:53:
ca:36:0e:51:25:de:c1:ab:17:e1:38:30:05:1d:f8:
52:cc:57:c3:7c:b9:e8:eb:e1:1f:4f:9b:22:e4:41:
10:97:37:f8:ff:06:3d:c9:1a:29:ef:09:69:54:6c:
18:b6:c0:ba:da:c6:5a:7b:c9:2b:10:5f:c2:9a:b3:
5b:0a:b1:05:fb:a0:b2:3c:f4:bb:67:b1:cd:f1:be:
a3:61:9a:36:5c:d6:3f:a7:29:ef:2c:33:30:8e:94:
06:a7:31:38:ae:26:a2:fa:bb:d2:a7:a6:46:1d:ee:
04:db:53:2b:4f:96:58:c8:ad:c9:8e:84:f6:ee:36:
88:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:63:71:CE:A0:EF:C9:D9:55:AC:8E:18:8D:64:36:01:6C:2F:CB:4D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0029c2a2-f195-498e-a14f-3e7031112706.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
33:0e:d7:29:f4:aa:3f:c3:67:a7:46:25:87:da:1e:f7:ca:cc:
57:8c:53:97:3b:4b:f5:22:5d:3b:31:9d:6a:2f:3e:c3:e1:d9:
8d:60:47:1a:e0:e4:c5:25:4f:82:74:35:d8:53:bc:58:6b:12:
21:30:58:06:a1:4f:86:17:59:53:b6:51:37:84:0b:f8:e8:7a:
bc:56:f8:fe:3b:7c:20:ad:27:e2:e4:bd:bb:f5:a4:40:29:30:
6b:92:4f:1a:7b:8d:79:96:de:f1:fa:97:50:47:92:66:e0:51:
53:e9:64:bd:c3:1c:f0:2e:9f:f2:58:51:08:22:4f:82:e6:0a:
16:24:32:f1:11:cd:d5:7b:80:ad:b9:f0:9e:cd:96:bd:e4:01:
7e:b5:1c:6d:82:eb:c1:4f:5b:c2:88:7e:b8:ce:c0:8e:c1:40:
fe:bb:35:27:e1:41:9d:14:16:51:f9:68:83:7f:02:d9:18:1e:
e8:bc:f7:c1:64:35:49:36:73:18:95:a6:d5:b5:05:12:35:d2:
40:3d:02:3d:d2:da:86:34:5f:d8:67:b4:8f:bd:78:a5:fc:c0:
9b:18:d9:a3:f2:96:03:67:ac:68:4e:31:e0:46:ae:00:7d:57:
ab:38:99:1b:31:59:0f:95:8b:47:3f:a8:4b:60:51:d1:ff:7e:
0b:67:2a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:45 2024 by rpki-client on console-ams.rpki-client.org