Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/199a667e-85fa-4351-9830-8de3bacfd320.roa
File: 199a667e-85fa-4351-9830-8de3bacfd320.roa (raw, json)
Hash identifier: CrLrJM6WE7/CvI0LklIbZdIoUqarAz2ckrPIcVFjnX8=
Subject key identifier: 73:04:23:A4:BA:CB:7D:D0:9E:A5:09:46:97:1C:3A:D8:A6:FA:FA:17
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0FA5F639AE1BE82AAEC715A480F9C77DC081E89E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/199a667e-85fa-4351-9830-8de3bacfd320.roa
Signing time: Sat 02 Nov 2024 00:00:00 +0000
ROA not before: Sat 02 Nov 2024 00:00:00 +0000
ROA not after: Sat 07 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Nov 2024 06:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:a5:f6:39:ae:1b:e8:2a:ae:c7:15:a4:80:f9:c7:7d:c0:81:e8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 2 00:00:00 2024 GMT
Not After : Dec 7 23:59:59 2024 GMT
Subject: serialNumber=6968a6ab023e085054b627ae4560f2e1c3bf287ea07cd6bc7b694ec3ab395985, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:60:21:7f:15:bd:ed:4b:ba:dc:b7:71:bd:62:
d6:cd:ec:c7:dc:12:3c:74:81:9b:34:da:52:a3:9d:
39:87:48:ef:51:d0:0f:88:99:40:60:84:1d:e0:1e:
3d:d1:1a:a3:2f:d3:f5:59:0d:47:32:88:16:ac:21:
a0:f8:0e:a5:7d:12:1c:fd:8a:a7:42:82:95:b0:82:
dc:a0:bc:dc:55:a6:19:2a:c3:c8:8c:51:96:56:88:
86:53:b5:3f:b2:6a:3f:04:96:0f:49:73:b5:7a:3d:
8e:40:de:0a:dc:b1:1c:ef:96:32:64:52:8f:4f:7d:
31:06:e4:30:77:3e:9b:20:00:4c:e9:d3:67:4a:35:
20:41:5a:e0:e1:34:13:28:f6:a6:19:32:81:9a:48:
36:f1:41:58:7a:7a:bc:94:fa:2f:13:f8:46:a7:29:
fe:e9:1d:b6:11:12:ee:96:bb:f4:6b:f2:04:31:51:
ba:e5:e4:9b:b5:e3:a9:54:b7:8a:a2:83:81:b6:fd:
3e:93:f2:7e:cb:23:3e:0c:fa:86:47:f8:aa:96:02:
ea:68:35:73:82:39:57:0e:94:a5:4c:39:96:b2:83:
12:9d:7f:ea:4f:65:3e:c8:7c:f6:95:e3:85:0e:6c:
7f:e6:de:3f:31:1f:f2:a9:40:77:44:2e:f1:e2:9f:
0b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:04:23:A4:BA:CB:7D:D0:9E:A5:09:46:97:1C:3A:D8:A6:FA:FA:17
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/199a667e-85fa-4351-9830-8de3bacfd320.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
68:fd:8b:33:41:f3:49:59:f6:df:91:da:56:7a:8e:eb:b8:0f:
d7:20:d9:81:76:66:ed:32:c9:54:e5:ee:82:e2:81:65:a3:98:
8c:61:c5:72:bf:0d:02:72:9e:c5:ae:dd:9b:3e:8a:27:da:8e:
c6:b1:42:bf:7b:89:e5:bf:ea:bb:01:6f:56:80:13:0d:0c:23:
74:26:26:d9:bc:a8:de:cc:a4:f7:7b:76:93:fd:4b:4e:96:a4:
53:2e:c6:75:d2:0c:5c:8f:b6:b2:15:b1:5c:22:8d:8e:bc:7f:
1c:88:fc:c1:a4:b7:fb:30:90:ca:3d:e4:d2:87:b6:b4:83:36:
fb:a3:73:5f:78:e6:da:7b:6a:0d:ae:24:f4:4f:06:74:5c:f0:
7d:2e:45:31:60:ed:44:2b:19:d3:08:fd:5b:11:39:ad:b8:12:
8c:bf:93:5e:6d:7b:f5:15:74:97:3e:67:71:42:db:ca:81:89:
6d:d8:2a:32:44:4a:5b:dd:7e:8c:d7:d4:f3:87:f6:ea:79:31:
20:47:60:da:7e:cf:23:33:51:4a:03:0d:23:b7:a4:2f:04:38:
dc:3a:e9:7e:ac:d9:37:b3:e9:6d:01:03:92:a9:c9:2f:76:f7:
8b:41:e5:e9:a8:e7:f9:48:55:16:b2:9f:c4:4c:07:86:3f:fd:
71:e1:40:e1
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUD6X2Oa4b6CquxxWkgPnHfcCB6J4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMTAyMDAwMDAwWhcNMjQxMjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A2OTY4YTZhYjAyM2UwODUwNTRiNjI3YWU0NTYwZjJlMWMz
YmYyODdlYTA3Y2Q2YmM3YjY5NGVjM2FiMzk1OTg1MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvYCF/Fb3tS7rct3G9YtbN7MfcEjx0gZs02lKjnTmHSO9R
0A+ImUBghB3gHj3RGqMv0/VZDUcyiBasIaD4DqV9Ehz9iqdCgpWwgtygvNxVphkq
w8iMUZZWiIZTtT+yaj8Elg9Jc7V6PY5A3grcsRzvljJkUo9PfTEG5DB3PpsgAEzp
02dKNSBBWuDhNBMo9qYZMoGaSDbxQVh6eryU+i8T+EanKf7pHbYREu6Wu/Rr8gQx
Ubrl5Ju146lUt4qig4G2/T6T8n7LIz4M+oZH+KqWAupoNXOCOVcOlKVMOZaygxKd
f+pPZT7IfPaV44UObH/m3j8xH/KpQHdELvHinwshAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUcwQjpLrLfdCepQlGlxw62Kb6+hcwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzE5OWE2NjdlLTg1ZmEtNDM1MS05ODMwLThkZTNiYWNmZDMyMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGj9izNB80lZ9t+R2lZ6juu4D9cg
2YF2Zu0yyVTl7oLigWWjmIxhxXK/DQJynsWu3Zs+iifajsaxQr97ieW/6rsBb1aA
Ew0MI3QmJtm8qN7MpPd7dpP9S06WpFMuxnXSDFyPtrIVsVwijY68fxyI/MGkt/sw
kMo95NKHtrSDNvujc1945tp7ag2uJPRPBnRc8H0uRTFg7UQrGdMI/VsROa24Eoy/
k15te/UVdJc+Z3FC28qBiW3YKjJESlvdfozX1POH9up5MSBHYNp+zyMzUUoDDSO3
pC8EONw66X6s2Tez6W0BA5KpyS9294tB5emo5/lIVRayn8RMB4Y//XHhQOE=
-----END CERTIFICATE-----
Generated at Sat Nov 2 08:39:23 2024 by rpki-client on console-fra.rpki-client.org