Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/02d20934-c64b-49ee-81d4-d3ba23738989.roa
File: 02d20934-c64b-49ee-81d4-d3ba23738989.roa (raw, json)
Hash identifier: iCpamPd3e/gxZSvhe1Bl3yZinjEogQKd/lNGVFvwzlM=
Subject key identifier: D7:9A:49:F9:12:6F:83:0E:FE:58:76:8C:66:C4:54:A1:B6:12:39:6F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6442C699E908C481DFF485736A23E1572BF0783E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/02d20934-c64b-49ee-81d4-d3ba23738989.roa
Signing time: Fri 30 Aug 2024 00:00:00 +0000
ROA not before: Fri 30 Aug 2024 00:00:00 +0000
ROA not after: Fri 04 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Aug 2024 04:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:42:c6:99:e9:08:c4:81:df:f4:85:73:6a:23:e1:57:2b:f0:78:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 30 00:00:00 2024 GMT
Not After : Oct 4 23:59:59 2024 GMT
Subject: serialNumber=2847785bf9585ebf31c99b9efd20cf0ba9ac4ce89bd38449ea80e88e26c6a1e5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:74:9c:fa:97:45:a9:ed:57:0b:ff:4c:98:ec:
1f:f9:d8:a5:63:29:82:30:0e:29:aa:4e:78:ba:42:
5e:16:9e:a3:b4:25:60:51:c9:1a:a4:1f:4d:f1:a5:
f6:e9:3b:15:e3:4c:22:8a:43:02:97:a3:17:a4:38:
64:a6:d7:b7:e0:02:79:e5:0e:53:4c:b9:35:7d:1d:
93:c2:2e:a8:30:eb:9a:e1:9a:a2:17:55:c0:24:51:
92:71:55:0b:c9:06:1d:16:b7:c1:01:c0:d1:e8:37:
79:2c:f2:16:be:c2:49:0d:d2:3d:75:fd:9e:45:c5:
02:d5:e1:24:37:b4:78:ed:06:4e:9a:ff:2f:ed:95:
ad:81:02:fb:a9:0d:27:5e:6c:25:f8:18:79:46:7b:
60:4e:cc:de:a4:50:5a:ed:41:1b:18:45:d8:1b:d7:
b5:97:16:d4:94:fe:ca:af:34:04:05:44:4c:3f:cd:
af:e4:b2:7b:ca:75:ed:00:9f:df:37:0c:89:cf:c1:
43:2e:98:f6:00:78:58:47:2c:5a:71:09:36:f8:89:
26:a3:48:3c:27:b5:11:69:0c:06:5a:69:6b:53:49:
fe:94:73:4f:b2:49:08:cb:d1:ff:18:71:70:ab:af:
59:12:a7:de:fb:dc:00:8b:8e:bf:1f:09:d5:f6:b1:
0d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9A:49:F9:12:6F:83:0E:FE:58:76:8C:66:C4:54:A1:B6:12:39:6F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/02d20934-c64b-49ee-81d4-d3ba23738989.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
05:9c:25:d4:ef:8f:d1:39:9a:a4:41:fc:88:7b:d6:14:ca:e1:
56:f8:e4:38:32:b2:11:5a:66:b8:7c:d9:90:42:be:b8:52:b7:
a2:07:ad:20:20:d5:d0:aa:1b:78:ed:ef:42:07:54:d7:41:24:
80:28:73:24:77:7b:e1:9e:44:ec:f3:48:09:0d:84:18:3d:a4:
c7:43:9e:a8:df:be:10:7c:f7:eb:69:bc:b3:3b:ab:4d:7f:71:
53:56:ee:d2:53:ae:0f:6c:b7:e2:56:2d:c9:f6:48:c4:45:81:
27:40:1a:92:11:af:97:7a:f4:dc:cb:86:18:a1:75:2d:9d:82:
b6:c7:1f:39:e0:c7:fe:c0:ea:43:73:97:49:14:c1:fa:18:2c:
b8:a5:af:48:ae:61:04:34:a0:d7:e6:a7:7e:b1:36:10:e4:91:
46:d5:57:34:81:f8:2c:c8:8c:7b:d5:8a:1e:e5:c1:03:ba:dd:
ec:74:51:31:41:67:e4:62:1f:18:95:cc:d1:7b:f7:67:0c:30:
0e:0b:12:0e:49:59:79:40:a6:e3:b2:04:3a:51:e5:31:6d:c5:
c6:7d:16:18:18:1f:97:3d:b6:ef:02:5e:da:02:74:be:72:89:
a7:09:47:53:32:f5:22:52:98:51:4f:66:7b:50:99:ce:44:d2:
4a:26:de:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 06:02:33 2024 by rpki-client on console-fra.rpki-client.org