Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3acba083-71ca-4098-9143-3ee687a2ec9c.roa
File: 3acba083-71ca-4098-9143-3ee687a2ec9c.roa (raw, json)
Hash identifier: Cf/HRgU9Gn+PUn6QsE8uzv9sOGecrzsHSlm02FCwasQ=
Subject key identifier: 4B:B4:BD:DF:59:19:2C:E0:86:3B:3B:EB:AB:77:65:E5:88:D4:43:54
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3DC2F65F9301654FD7B2FB10D4210C9025717EE5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3acba083-71ca-4098-9143-3ee687a2ec9c.roa
Signing time: Tue 03 Sep 2024 00:00:00 +0000
ROA not before: Tue 03 Sep 2024 00:00:00 +0000
ROA not after: Tue 08 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 22:44:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:c2:f6:5f:93:01:65:4f:d7:b2:fb:10:d4:21:0c:90:25:71:7e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 3 00:00:00 2024 GMT
Not After : Oct 8 23:59:59 2024 GMT
Subject: serialNumber=420883674d1caa548241a5a67115147d3ce577ad79a7a864ee92529bc72cd1ac, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:18:71:c4:ef:9b:d0:fc:ca:ed:46:8c:0d:
c9:35:a7:0e:51:44:9f:60:c5:f5:7f:76:a2:ba:38:
f3:53:e4:d1:52:36:44:7d:30:9e:2a:b7:e1:56:47:
8d:fa:9b:b0:c9:56:9f:ba:7b:ae:55:80:02:27:3c:
cb:eb:01:7b:43:eb:37:50:66:5e:80:8f:e4:3f:24:
29:a6:4e:78:5b:f0:3d:1e:ba:d8:4e:60:84:3f:e6:
49:b4:58:7d:d0:4a:9b:41:89:f5:80:4e:de:9f:f5:
de:43:14:30:ec:cf:f0:e7:2a:3d:4f:5a:98:bb:2f:
3d:86:f9:83:7b:0e:bb:f5:8c:44:8e:27:89:21:1e:
d4:58:6f:f9:28:18:88:90:3d:bf:cf:ed:80:c3:e8:
a3:7e:86:5b:8f:eb:34:69:50:84:b9:64:32:b1:cf:
4d:a1:65:7d:2a:5e:bc:aa:27:a0:e0:ab:24:2c:fc:
c4:08:af:84:70:b9:39:a9:9b:30:71:d3:91:03:79:
a4:ab:03:cf:6d:65:c7:b3:4f:51:4e:31:79:c6:13:
4b:1c:f0:b6:95:69:1a:78:ac:e4:87:b3:44:90:d2:
43:de:33:0e:aa:e5:20:da:f9:5c:30:da:bf:81:b6:
ef:e2:c6:4e:73:d2:7f:04:6a:ab:e0:e8:be:35:a0:
c3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B4:BD:DF:59:19:2C:E0:86:3B:3B:EB:AB:77:65:E5:88:D4:43:54
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3acba083-71ca-4098-9143-3ee687a2ec9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
97:7b:37:c9:50:7b:51:45:53:51:bf:0d:86:08:97:7d:14:a4:
41:1d:19:16:72:7e:83:00:e1:1a:b7:4c:4f:98:4a:25:b3:9f:
db:83:6f:3c:5a:02:28:52:b8:36:2e:d1:bb:11:1c:03:39:c0:
c4:06:bb:7f:44:59:0a:68:ed:0f:c3:ee:62:c5:14:67:ef:f3:
6c:ec:13:1b:3b:e5:71:4e:53:96:e0:fa:63:57:91:c4:77:ec:
d7:4f:d0:fd:56:8f:b4:65:ab:44:d0:fe:36:70:ec:0c:70:0e:
80:68:84:da:d7:65:89:65:80:96:51:50:9a:3f:8a:ea:f9:35:
28:ca:ae:05:6f:b7:14:2f:c4:f5:d8:60:24:43:1b:2f:bd:f6:
ae:fc:45:2f:77:9c:72:56:51:38:d1:e2:0b:89:b4:39:ef:07:
dd:e6:68:5d:4e:55:78:2a:8a:74:23:0c:20:ad:bd:29:b4:1c:
13:9a:e3:98:0a:ca:d4:33:88:34:24:b1:a7:4c:1f:74:88:08:
76:dd:31:3b:77:f3:9a:98:ba:b4:96:ba:7a:4d:97:d4:24:09:
c9:f6:3d:ec:25:6f:e6:82:01:40:d6:bd:31:7e:33:13:b3:99:
b1:de:29:94:63:a1:b8:66:19:01:2e:59:91:dc:07:c6:48:5f:
61:4f:4c:08
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPcL2X5MBZU/XsvsQ1CEMkCVxfuUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwOTAzMDAwMDAwWhcNMjQxMDA4MjM1OTU5
WjB6MUkwRwYDVQQFE0A0MjA4ODM2NzRkMWNhYTU0ODI0MWE1YTY3MTE1MTQ3ZDNj
ZTU3N2FkNzlhN2E4NjRlZTkyNTI5YmM3MmNkMWFjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCylhhxxO+b0PzK7UaMDck1pw5RRJ9gxfV/dqK6OPNT5NFS
NkR9MJ4qt+FWR436m7DJVp+6e65VgAInPMvrAXtD6zdQZl6Aj+Q/JCmmTnhb8D0e
uthOYIQ/5km0WH3QSptBifWATt6f9d5DFDDsz/DnKj1PWpi7Lz2G+YN7Drv1jESO
J4khHtRYb/koGIiQPb/P7YDD6KN+hluP6zRpUIS5ZDKxz02hZX0qXryqJ6DgqyQs
/MQIr4RwuTmpmzBx05EDeaSrA89tZcezT1FOMXnGE0sc8LaVaRp4rOSHs0SQ0kPe
Mw6q5SDa+Vww2r+Btu/ixk5z0n8Eaqvg6L41oMNJAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUS7S931kZLOCGOzvrq3dl5YjUQ1QwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzNhY2JhMDgzLTcxY2EtNDA5OC05MTQzLTNlZTY4N2EyZWM5Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJd7N8lQe1FFU1G/DYYIl30UpEEd
GRZyfoMA4Rq3TE+YSiWzn9uDbzxaAihSuDYu0bsRHAM5wMQGu39EWQpo7Q/D7mLF
FGfv82zsExs75XFOU5bg+mNXkcR37NdP0P1Wj7Rlq0TQ/jZw7AxwDoBohNrXZYll
gJZRUJo/iur5NSjKrgVvtxQvxPXYYCRDGy+99q78RS93nHJWUTjR4guJtDnvB93m
aF1OVXgqinQjDCCtvSm0HBOa45gKytQziDQksadMH3SICHbdMTt385qYurSWunpN
l9QkCcn2Pewlb+aCAUDWvTF+MxOzmbHeKZRjobhmGQEuWZHcB8ZIX2FPTAg=
-----END CERTIFICATE-----
Generated at Wed Sep 4 01:40:25 2024 by rpki-client on console-ams.rpki-client.org