Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3e7c3e33-5a51-45ab-8d9e-ac186947e29f.roa
File: 3e7c3e33-5a51-45ab-8d9e-ac186947e29f.roa (raw, json)
Hash identifier: 9Czn9PxEIApnXrytsDytJnkX4vVdXt2vmIEVgSXxLNQ=
Subject key identifier: EB:CC:53:55:BC:AD:88:C6:60:24:FC:EB:02:71:28:DC:AC:1D:6C:CC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0326A2B5A0186BFDB8F941ADB50328D844F0D6E8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3e7c3e33-5a51-45ab-8d9e-ac186947e29f.roa
Signing time: Wed 10 Jul 2024 00:00:00 +0000
ROA not before: Wed 10 Jul 2024 00:00:00 +0000
ROA not after: Wed 14 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 05:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:26:a2:b5:a0:18:6b:fd:b8:f9:41:ad:b5:03:28:d8:44:f0:d6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 10 00:00:00 2024 GMT
Not After : Aug 14 23:59:59 2024 GMT
Subject: serialNumber=09b3eb137cc012f7f98a2b4f7bbf6a29ab416368eb5c6dc07efd41108eb452e1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f6:6b:13:25:fa:4f:71:1b:41:ab:4e:24:a4:
ea:b3:95:8e:0d:b3:78:9b:91:4a:76:13:13:4b:46:
35:7c:3b:32:68:11:1c:b0:e0:6d:79:87:dd:be:b5:
64:69:c2:af:08:8b:83:50:f3:06:69:95:73:8d:4d:
4f:a3:d9:75:3e:a9:63:86:86:09:3f:2f:f7:a5:22:
f3:a2:89:90:a5:38:d6:f6:03:e1:38:d3:ba:0c:a7:
c2:56:a0:f7:63:35:5c:13:8d:89:4a:af:bc:cf:cf:
48:e7:71:7b:fe:b6:57:1e:fb:3d:2e:aa:b7:e5:70:
c6:ca:ff:2d:e1:0b:54:e7:91:73:1d:61:c4:7b:db:
d9:6f:0c:1e:25:08:a1:fe:7d:1d:fa:dd:c1:f1:06:
7c:92:e8:f8:52:67:65:a0:76:76:e2:e4:6f:8d:3d:
6e:21:fd:66:f0:86:d9:8a:bc:26:5b:93:7b:1f:d0:
59:14:02:3f:e6:01:18:ac:97:20:15:a7:97:b4:52:
20:54:99:2d:da:12:21:bc:99:0d:b7:97:18:55:8b:
46:ba:cf:be:f6:a1:6e:91:f3:fa:5c:0b:a1:ee:02:
73:0c:a5:5f:7c:c4:80:14:48:b6:64:c6:b9:d3:01:
e9:6c:76:af:00:10:3f:d1:78:69:bf:c0:51:db:7c:
2c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CC:53:55:BC:AD:88:C6:60:24:FC:EB:02:71:28:DC:AC:1D:6C:CC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3e7c3e33-5a51-45ab-8d9e-ac186947e29f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
11:e2:54:3a:02:1a:db:0e:83:20:64:cc:9f:6d:fa:3e:e0:ee:
fe:2b:7c:52:ca:97:18:b6:33:ed:4f:2e:b1:19:e5:5a:1c:85:
28:64:cb:63:60:10:95:ca:d8:5c:37:65:5b:8e:22:76:18:25:
7a:99:70:74:c4:4d:db:ee:43:44:d3:b0:ce:ed:eb:75:10:1b:
22:d7:67:92:a0:4a:99:5c:f0:28:fa:95:c1:6c:66:1f:dd:f2:
1d:11:8b:fe:dd:b0:58:07:3d:e5:2d:5e:6d:76:14:72:00:a1:
87:fa:d4:8e:1e:b3:8c:71:06:80:4d:34:80:8b:40:07:61:06:
0a:63:de:65:e3:67:80:58:94:71:c6:ed:4f:a8:98:1c:f2:27:
37:d3:fb:37:1d:33:ab:08:e5:8c:87:b4:02:ad:da:ac:fb:46:
fb:73:49:0c:39:60:fb:ca:e3:44:3a:e3:55:01:ff:b5:e6:54:
27:5a:6e:48:bd:76:f4:d5:42:b3:fd:c2:db:16:f5:67:cc:ae:
4f:32:b6:27:d8:b6:15:e2:58:40:8d:32:4a:12:8b:d2:99:4d:
f6:3f:88:ef:6c:59:52:a8:77:f0:02:d1:3e:69:71:a2:2e:7d:
4e:05:13:2b:a4:83:fb:ac:20:59:d6:f2:b8:7c:87:e7:64:c9:
a5:f5:de:41
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUAyaitaAYa/24+UGttQMo2ETw1ugwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNzEwMDAwMDAwWhcNMjQwODE0MjM1OTU5
WjB6MUkwRwYDVQQFE0AwOWIzZWIxMzdjYzAxMmY3Zjk4YTJiNGY3YmJmNmEyOWFi
NDE2MzY4ZWI1YzZkYzA3ZWZkNDExMDhlYjQ1MmUxMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC29msTJfpPcRtBq04kpOqzlY4Ns3ibkUp2ExNLRjV8OzJo
ERyw4G15h92+tWRpwq8Ii4NQ8wZplXONTU+j2XU+qWOGhgk/L/elIvOiiZClONb2
A+E407oMp8JWoPdjNVwTjYlKr7zPz0jncXv+tlce+z0uqrflcMbK/y3hC1TnkXMd
YcR729lvDB4lCKH+fR363cHxBnyS6PhSZ2Wgdnbi5G+NPW4h/WbwhtmKvCZbk3sf
0FkUAj/mARislyAVp5e0UiBUmS3aEiG8mQ23lxhVi0a6z772oW6R8/pcC6HuAnMM
pV98xIAUSLZkxrnTAelsdq8AED/ReGm/wFHbfCxXAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU68xTVbytiMZgJPzrAnEo3KwdbMwwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzNlN2MzZTMzLTVhNTEtNDVhYi04ZDllLWFjMTg2OTQ3ZTI5Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABHiVDoCGtsOgyBkzJ9t+j7g7v4r
fFLKlxi2M+1PLrEZ5VochShky2NgEJXK2Fw3ZVuOInYYJXqZcHTETdvuQ0TTsM7t
63UQGyLXZ5KgSplc8Cj6lcFsZh/d8h0Ri/7dsFgHPeUtXm12FHIAoYf61I4es4xx
BoBNNICLQAdhBgpj3mXjZ4BYlHHG7U+omBzyJzfT+zcdM6sI5YyHtAKt2qz7Rvtz
SQw5YPvK40Q641UB/7XmVCdabki9dvTVQrP9wtsW9WfMrk8ytifYthXiWECNMkoS
i9KZTfY/iO9sWVKod/AC0T5pcaIufU4FEyukg/usIFnW8rh8h+dkyaX13kE=
-----END CERTIFICATE-----
Generated at Wed Jul 10 06:22:40 2024 by rpki-client on console-ams.rpki-client.org