Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/26947319-2635-4aa3-90c7-4c34ec7b2fb0.roa
File: 26947319-2635-4aa3-90c7-4c34ec7b2fb0.roa (raw, json)
Hash identifier: KHJ8E7zaMAkb13qtNfMaZyssZT9IeOByzR8PQk2Fu9k=
Subject key identifier: 95:EB:74:17:07:70:C3:E3:C6:D9:61:34:FB:81:E4:CC:F5:1A:7F:DA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5AD0CD39B0EFC799500FE900CAB6BF8CFD6595B5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/26947319-2635-4aa3-90c7-4c34ec7b2fb0.roa
Signing time: Tue 01 Oct 2024 00:00:00 +0000
ROA not before: Tue 01 Oct 2024 00:00:00 +0000
ROA not after: Tue 05 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Oct 2024 08:24:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:d0:cd:39:b0:ef:c7:99:50:0f:e9:00:ca:b6:bf:8c:fd:65:95:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 1 00:00:00 2024 GMT
Not After : Nov 5 23:59:59 2024 GMT
Subject: serialNumber=d1360e893c4258ef84c1921bd4d62135088d95ac55591f6033b8c90eeda9115e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:78:aa:7e:5d:72:cf:c7:7c:59:ec:2e:77:
e8:60:c0:84:d9:ad:62:29:a8:ae:0a:a3:43:b3:37:
7f:14:2a:73:24:39:f2:27:9f:41:73:65:5b:c0:31:
5e:ff:2b:52:4c:1d:8c:6a:13:ce:e1:d2:4c:b4:96:
ff:28:b0:56:7f:f2:24:83:51:66:0b:50:4f:32:65:
bd:2b:2e:87:2d:91:e5:31:d7:9a:4b:58:9c:60:8a:
2a:a3:2e:42:45:78:dc:57:cd:e7:b7:1c:06:af:5d:
35:98:60:65:fd:e5:27:02:72:c4:9e:7e:76:e2:e6:
53:8a:fe:6f:19:62:bc:14:53:43:80:c5:31:8b:a8:
37:b5:5d:11:ec:17:71:aa:2e:4e:3f:55:ba:9f:af:
be:f8:10:f2:2c:81:94:36:d6:e8:94:e1:6d:3c:bd:
1c:7e:c7:17:ab:6e:c2:d4:f8:40:1a:35:b2:c9:a9:
b5:97:86:65:30:b8:c7:0c:25:8b:5e:f3:28:ab:51:
99:01:7e:fa:77:e7:e8:09:65:2e:1d:fb:73:16:f7:
b2:62:ba:43:ad:25:1e:25:c9:09:d7:c5:87:d4:ba:
1b:bb:fa:c8:9a:0d:85:69:49:df:1a:22:a5:f2:e6:
00:9e:50:9a:f4:a9:86:d9:6d:ed:c9:ca:e8:38:fa:
60:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EB:74:17:07:70:C3:E3:C6:D9:61:34:FB:81:E4:CC:F5:1A:7F:DA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/26947319-2635-4aa3-90c7-4c34ec7b2fb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
87:c0:19:0a:e4:fa:63:36:28:53:90:05:68:f0:61:d4:c3:74:
76:75:d6:76:43:9e:e5:29:cd:c1:51:25:83:5c:24:4a:c1:36:
9c:36:5a:7b:f0:41:15:2b:1c:1f:1e:54:08:a3:5c:50:3b:24:
60:d9:23:28:dd:fc:91:9b:bc:be:6e:d6:c1:9d:63:dd:ec:6d:
f0:a2:e0:ca:79:90:7e:e4:3e:bc:31:ae:b2:bd:f2:13:d8:1f:
81:21:2c:c5:72:ea:21:87:35:de:55:37:c4:01:42:54:04:e0:
41:9b:c2:08:ae:e3:f6:10:97:a0:d6:40:36:2c:e5:28:75:b7:
b2:a4:71:41:7e:a0:eb:4d:fb:1c:bd:fc:63:ca:21:f1:61:6c:
31:00:15:1a:aa:dc:87:24:be:d4:92:8e:fe:95:54:03:36:df:
16:ca:21:4e:c5:f3:5d:37:16:8e:cd:59:0b:de:f9:54:c3:ee:
f3:e6:17:4f:aa:2d:34:8f:8b:bf:89:c7:e6:a5:24:b2:1c:5d:
61:02:87:82:32:39:86:03:48:79:3b:7e:dc:8c:e4:c2:e3:c7:
06:48:0e:67:3e:f5:7e:67:8d:eb:e0:44:ce:90:23:40:56:31:
8d:7e:91:a8:4d:77:92:10:b2:a7:4f:c3:9d:87:e1:27:c5:16:
d4:ff:3a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 12:18:47 2024 by rpki-client on console-ams.rpki-client.org