Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1b4c4371-f63d-44ea-a90b-48e5f0d534a3.roa
File: 1b4c4371-f63d-44ea-a90b-48e5f0d534a3.roa (raw, json)
Hash identifier: dxvs321AyAvcD+uxzttDqE0zUglSmEZ8H9dr7ud4s7A=
Subject key identifier: 4C:BF:79:C7:B6:8D:34:92:68:F0:18:6C:05:99:1C:AD:23:68:84:15
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 03B3024F393B8E3C8AB76F0115A017068C6939B5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1b4c4371-f63d-44ea-a90b-48e5f0d534a3.roa
Signing time: Tue 07 May 2024 00:00:00 +0000
ROA not before: Tue 07 May 2024 00:00:00 +0000
ROA not after: Tue 11 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 May 2024 21:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:b3:02:4f:39:3b:8e:3c:8a:b7:6f:01:15:a0:17:06:8c:69:39:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 7 00:00:00 2024 GMT
Not After : Jun 11 23:59:59 2024 GMT
Subject: serialNumber=13492b9de27e6e4cc557c03e3fb00c1b87f7b8d721f7b7610fd0eabcdb604197, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:16:93:81:e2:86:5e:26:03:c8:99:e8:a2:
89:fb:43:39:3f:ff:55:db:5c:20:3b:db:1f:92:32:
65:cd:1f:08:e3:02:a8:1a:29:8a:d9:c9:59:b4:9f:
b1:14:4a:3a:54:04:47:f2:c0:c9:1a:7a:51:0f:b2:
34:30:47:a8:57:3f:1e:50:98:92:82:0a:35:82:12:
1e:9b:be:cf:ed:27:b7:b3:2b:36:00:3c:fa:7c:07:
50:48:b8:c8:d7:a1:cd:8c:94:a3:84:07:35:15:ab:
dc:81:02:a5:d8:1d:e0:85:7e:3e:f1:51:39:e2:82:
33:07:f8:de:dc:07:92:23:66:ed:15:8a:e1:4f:df:
da:6b:41:c3:eb:5c:61:a7:36:76:f2:a6:82:d9:c0:
ce:2b:b5:fe:05:42:fb:a0:2e:38:dc:1a:a7:44:0c:
c9:cd:54:00:bc:27:66:19:96:7d:38:f1:6f:5b:7a:
f5:20:94:bb:73:87:16:00:e4:e2:2f:9a:3f:15:93:
a4:94:24:f8:26:71:a5:fb:46:bd:f6:85:6a:67:ca:
6b:9e:d5:1c:e4:0f:3b:b5:a3:0b:3a:e6:dd:44:fe:
10:00:46:00:8e:ee:b5:8f:46:7e:a0:44:c0:17:86:
76:21:6b:2c:b9:b5:e9:af:57:3b:da:a8:2e:ef:47:
89:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BF:79:C7:B6:8D:34:92:68:F0:18:6C:05:99:1C:AD:23:68:84:15
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1b4c4371-f63d-44ea-a90b-48e5f0d534a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:34:cc:69:21:d1:e2:1b:f3:87:f0:f7:24:8f:2b:d6:24:14:
45:f8:e5:cc:65:8d:f0:d2:89:ad:b8:5c:79:eb:df:34:c9:80:
f3:94:41:2b:5d:99:57:54:fb:8b:99:73:e4:4a:85:ec:61:2a:
0d:ba:e2:72:74:12:2a:7e:cb:30:e4:d2:fc:49:c2:88:8a:df:
db:74:ad:c9:4e:bd:36:14:d2:0d:63:da:5a:50:1f:99:81:d3:
e8:49:97:ce:d9:99:de:c3:14:75:9f:2a:97:3b:1e:06:33:76:
8c:4d:1d:38:4f:10:75:58:cf:71:1c:8c:56:07:9d:18:21:cd:
7f:a5:12:77:13:f0:29:8f:98:dd:55:37:ba:f6:26:0e:93:99:
57:c1:26:3e:bc:94:b9:8a:7b:96:33:f5:77:91:cf:91:20:1f:
5d:23:d5:54:17:2a:eb:73:d6:f7:ad:d9:f4:5b:d5:a5:63:97:
03:e7:d6:f1:12:f9:3a:8e:bc:41:7f:bd:53:ea:a7:9e:26:44:
d7:78:6e:0f:5c:9a:36:f9:45:8d:fe:ac:27:a5:e8:e1:98:17:
7c:7d:6a:c9:e8:24:e0:87:67:f5:63:78:d8:56:f6:cc:3c:fd:
73:22:22:14:45:9e:fb:7f:da:8d:9e:5a:92:a7:4e:02:0e:cf:
bc:74:e6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:50 2024 by rpki-client on console-ams.rpki-client.org