Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2e9b261a-f50c-4267-8d13-b7a03d6cae97.roa
File: 2e9b261a-f50c-4267-8d13-b7a03d6cae97.roa (raw, json)
Hash identifier: JOYbOAQ8ZwNwA/Vx73YMxnfN+7s4fPdPLSyzk/E5Jz4=
Subject key identifier: E5:9C:A7:A8:D4:7F:C2:EE:44:59:09:E7:E5:53:64:BF:95:3A:78:05
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0EFD735EC3CAD46F3BA62F08296602396AB3BEE3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2e9b261a-f50c-4267-8d13-b7a03d6cae97.roa
Signing time: Sun 30 Jun 2024 00:00:00 +0000
ROA not before: Sun 30 Jun 2024 00:00:00 +0000
ROA not after: Sun 04 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Jun 2024 10:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:fd:73:5e:c3:ca:d4:6f:3b:a6:2f:08:29:66:02:39:6a:b3:be:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 30 00:00:00 2024 GMT
Not After : Aug 4 23:59:59 2024 GMT
Subject: serialNumber=e37ddc430cb01d32bd37d98e8ccdce4e37b8dc07182e54d92711e1584727cfbf, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ed:a0:0d:0a:ba:7e:a4:fa:46:8b:54:10:4b:
e1:b5:f4:44:cf:86:bf:cb:d9:f5:5c:98:a2:c5:c5:
68:4b:65:d6:d1:b9:07:ec:be:9d:af:2d:a2:69:ba:
f2:29:52:15:d8:31:20:87:bb:4b:e2:29:f6:30:31:
e7:cd:c9:6a:2e:dc:17:f9:bb:89:b3:b9:bb:b3:5b:
9b:cc:03:66:4c:bd:37:6d:b2:8c:a3:2b:b4:58:e6:
9e:46:d8:4a:1f:01:69:a7:11:35:ec:7f:83:3b:69:
f7:8a:fd:d3:59:13:f3:8a:2e:6e:31:d5:7b:c0:a0:
20:0c:1b:62:03:0f:91:48:49:ea:1c:ba:2c:0f:6e:
d6:b3:97:8b:27:a1:6b:b9:b7:d9:0a:41:8f:d4:b2:
cc:e9:92:3e:57:59:66:ca:a1:44:04:cf:23:ef:74:
f1:11:cc:9f:2d:11:6e:ed:a6:44:2d:e7:3e:f9:80:
71:4a:a6:f5:c5:43:bf:66:67:07:91:3b:67:1c:28:
65:51:78:78:df:1c:0c:0c:2f:28:a5:7f:22:3f:f9:
63:34:bd:b0:20:fc:87:4b:0c:ea:e2:f8:39:ae:d9:
f8:37:94:e7:38:1e:a1:a2:0f:b4:a7:9e:85:44:1a:
c9:58:11:06:89:31:2f:d6:50:6d:99:d5:fe:95:ee:
6c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9C:A7:A8:D4:7F:C2:EE:44:59:09:E7:E5:53:64:BF:95:3A:78:05
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2e9b261a-f50c-4267-8d13-b7a03d6cae97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
67:a6:f0:cc:4c:0e:2c:01:72:65:4e:69:d3:7b:85:da:6d:b6:
6b:84:80:85:36:40:d8:e9:b6:1e:57:a5:9d:09:26:14:34:d9:
40:d1:d5:a6:94:c6:ba:6b:d6:38:bb:0e:17:c6:89:3b:ba:02:
62:76:ef:6d:74:fe:98:3d:1e:95:ee:86:19:95:74:cf:43:13:
79:fb:9f:fe:6c:d3:29:0c:7a:c2:be:66:dc:b1:89:92:93:9a:
56:f5:b1:2f:bc:66:72:62:10:a1:0a:dc:95:39:f1:ea:1b:7c:
07:0e:dd:27:25:6d:01:54:38:ae:35:5c:7b:36:d9:b2:e1:c2:
65:ec:f8:b1:2b:e2:ef:ad:28:3f:86:12:59:aa:73:1b:d0:f3:
c6:e8:5a:4b:27:c9:75:62:7a:1e:c4:f3:b9:ea:91:42:5d:a0:
60:05:aa:b3:98:70:d0:b4:48:b2:87:ba:c1:b1:ad:2c:ec:0c:
4d:40:55:5c:11:5d:98:31:83:52:b0:03:09:29:44:dd:81:76:
81:2a:d7:b4:37:63:10:bc:2a:66:cf:b4:9f:ce:a3:22:a3:f0:
3a:f2:c4:fa:cb:f6:11:0e:97:a6:76:c8:08:f4:2a:32:cd:9a:
18:44:45:f7:bb:6a:74:27:8c:c5:99:a4:33:07:5f:03:72:cc:
63:4c:1d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 14:50:07 2024 by rpki-client on console-ams.rpki-client.org