Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2d3f338a-5bd8-4cc7-b46a-bd44c429b0ec.roa
File: 2d3f338a-5bd8-4cc7-b46a-bd44c429b0ec.roa (raw, json)
Hash identifier: U/T8qRJs6vBMlxcmnVrRP3rUYBe8G4cCnCnR+t0qPBQ=
Subject key identifier: AF:3F:65:28:FE:3C:1F:6A:7F:3A:83:08:42:57:68:CD:C3:F4:1F:09
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 57F5BE62DE6595E56D7D7C8C96C02D2EA965BE65
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2d3f338a-5bd8-4cc7-b46a-bd44c429b0ec.roa
Signing time: Wed 28 Aug 2024 00:00:00 +0000
ROA not before: Wed 28 Aug 2024 00:00:00 +0000
ROA not after: Wed 02 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Aug 2024 15:43:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:f5:be:62:de:65:95:e5:6d:7d:7c:8c:96:c0:2d:2e:a9:65:be:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 28 00:00:00 2024 GMT
Not After : Oct 2 23:59:59 2024 GMT
Subject: serialNumber=196e28f35b09ea4632a30d4a59ceef64e48e660654862e975038f0ce44ebdcf4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:fe:c8:18:9f:77:e3:f3:bf:b9:ab:fb:d3:
00:bb:49:84:00:87:b9:53:41:62:3f:3d:a5:23:de:
d7:df:4e:8e:4a:6a:20:a7:51:33:df:1b:c4:bc:bd:
64:a6:2d:8f:69:fa:94:1b:f7:4b:9e:7b:7b:76:4d:
72:1d:f7:ca:df:94:8f:a1:27:d5:cc:b5:7d:85:49:
4c:79:5e:f5:de:27:b0:85:b6:28:65:b9:5a:c8:ac:
ea:57:c9:d3:93:81:15:31:2d:49:4d:22:94:17:12:
5e:fb:ad:a4:02:2b:49:1b:ef:26:a0:f6:74:88:a1:
b7:9b:ee:f6:7c:72:aa:1d:e5:86:87:df:e0:20:a6:
4d:d6:41:56:2b:29:88:df:47:e7:6a:d2:15:c1:a1:
8f:cf:48:dc:0c:20:2b:e7:27:1a:4d:14:f8:c2:21:
45:7f:94:39:60:2e:5d:70:fb:af:c0:92:f5:64:d4:
41:3f:8d:d4:39:12:ea:d4:e3:a3:ab:40:92:c4:3c:
ba:f3:b3:4a:aa:fe:af:22:69:ad:06:f8:38:bb:bb:
cf:87:75:17:d4:91:5d:43:b0:7b:f4:27:73:5f:ec:
bd:02:ca:1d:10:f4:40:1e:ef:66:9e:7d:d3:f1:de:
f4:99:2a:74:d5:26:37:7c:64:90:aa:e5:e1:44:54:
3b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3F:65:28:FE:3C:1F:6A:7F:3A:83:08:42:57:68:CD:C3:F4:1F:09
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2d3f338a-5bd8-4cc7-b46a-bd44c429b0ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:05:b2:de:29:ec:db:4f:17:74:74:0f:16:5b:a5:e0:35:9a:
65:76:56:6a:fc:50:67:c8:b6:fe:89:49:a3:81:01:bd:d9:71:
c4:82:3f:eb:5a:6d:78:a3:09:11:05:ba:06:99:76:5d:a8:a5:
21:80:cc:fc:de:fd:7e:fd:3b:56:e8:3e:23:fb:8a:72:e3:2b:
76:3f:80:b6:cc:b2:03:96:e8:8f:71:f8:11:75:29:14:6e:8d:
6e:27:ad:05:0f:50:29:36:18:33:aa:31:cd:19:bb:68:62:53:
49:97:94:5f:f9:98:8e:9e:9a:dd:22:17:45:d8:51:ab:29:e5:
9d:09:7c:31:46:b6:4c:60:a3:d5:0a:fb:00:78:2e:33:ab:8a:
4b:45:21:c6:4d:ae:dd:92:a5:03:b5:3a:6b:25:0d:d5:66:73:
ce:53:15:7c:62:07:3f:70:e6:09:c4:28:7b:de:45:a2:19:e8:
00:e0:5c:d4:2c:c3:e8:09:7f:60:4d:e3:eb:c7:a4:44:e2:d4:
16:65:8b:02:b7:b0:91:82:5e:0e:c7:2a:4f:d0:c1:d7:52:3d:
55:47:8f:05:b6:4d:1e:82:d4:59:f1:b7:8f:1e:2a:df:33:db:
41:59:49:f5:e7:2f:0b:95:81:da:b1:ee:0b:b6:c5:55:5b:f4:
a6:39:a7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 19:49:08 2024 by rpki-client on console-ams.rpki-client.org