Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4a751fff-c7ef-4784-8ed7-2f39e41355c5.roa
File: 4a751fff-c7ef-4784-8ed7-2f39e41355c5.roa (raw, json)
Hash identifier: NoY8pwWOqiJo6Ni5JSxyF/pSB5sqwc4Ds27nlbYraE0=
Subject key identifier: BA:06:AE:3D:30:4A:93:61:D2:A4:29:B9:EF:C6:40:30:84:CD:3E:D6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5A97A7F3650502A9222234C8B1EB9717A75FA3EC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4a751fff-c7ef-4784-8ed7-2f39e41355c5.roa
Signing time: Fri 27 Sep 2024 00:00:00 +0000
ROA not before: Fri 27 Sep 2024 00:00:00 +0000
ROA not after: Fri 01 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Sep 2024 03:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:97:a7:f3:65:05:02:a9:22:22:34:c8:b1:eb:97:17:a7:5f:a3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 27 00:00:00 2024 GMT
Not After : Nov 1 23:59:59 2024 GMT
Subject: serialNumber=8e2b47669c3b4c49e130b67e0ca94800fd184cea25823b55ceafb00f05ff8604, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7c:7a:a8:e4:1e:1f:5a:20:1f:69:34:b0:2d:
a2:d1:7a:6f:b6:23:80:d3:1c:7f:05:34:da:ec:3f:
e3:e7:75:72:52:ce:5c:09:d0:72:79:dd:6f:e8:ad:
a7:07:58:e4:d1:69:d6:1d:f1:03:5b:59:87:38:a6:
37:da:51:6b:40:8b:cb:24:3b:ad:6d:6f:9c:98:b9:
93:49:1b:1e:c1:79:6a:88:65:a0:59:73:19:63:13:
06:1d:f8:34:8a:2a:4b:d9:b4:8c:b3:34:ed:92:39:
f7:f3:94:4f:55:14:37:2c:98:ce:87:be:ef:2a:06:
d7:d4:b2:28:bd:94:cf:8b:b8:9c:d8:f1:3b:01:64:
dc:8a:9d:32:95:3f:a8:a0:c8:a5:1a:e9:7d:d3:36:
0c:f6:4d:56:1a:4f:b7:59:d7:cf:b4:05:db:da:d2:
f7:05:3a:4a:19:4d:7f:20:d8:bb:f3:42:d7:af:62:
b4:67:95:01:0a:a7:01:8f:f1:a4:e9:2f:01:f9:5b:
7d:1e:f5:45:42:cc:b0:ce:65:c0:7b:e4:37:43:65:
27:e8:76:eb:fc:87:e9:1e:5b:c6:2f:55:6a:6b:72:
f5:22:a7:b4:c4:23:f1:6b:ba:0b:dc:3a:3f:3d:88:
89:03:bf:36:db:0a:7f:0a:61:cb:71:6d:cc:55:fc:
68:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:06:AE:3D:30:4A:93:61:D2:A4:29:B9:EF:C6:40:30:84:CD:3E:D6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4a751fff-c7ef-4784-8ed7-2f39e41355c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
20:95:99:72:f5:32:2a:ce:cd:6f:a9:79:0b:22:3f:af:6f:cc:
50:4f:0e:79:66:f8:fc:6e:c0:56:e3:14:a8:b2:07:4e:8d:e3:
44:f7:5a:62:96:63:cd:0a:c6:7a:43:57:d4:d0:42:c0:6b:d2:
8b:f1:0c:2c:59:bd:ff:ac:c1:01:a7:84:0f:f7:3c:fe:76:cf:
9c:48:cd:07:5a:e5:4f:92:94:46:ba:9d:fa:d8:48:69:80:1e:
32:53:42:38:02:43:a9:33:73:0a:26:70:f0:d7:5a:d8:19:69:
aa:6a:0c:42:18:67:fb:a4:77:2f:58:e4:cb:67:f3:29:ac:3c:
0d:17:7c:70:f6:fd:41:1d:7f:a1:17:f9:94:f2:a1:b4:7d:4c:
bb:99:f2:87:11:b5:b9:01:38:f7:7b:fc:69:c8:21:40:d2:ba:
9d:d7:f2:6a:79:ff:b6:60:d1:81:9b:4e:92:57:41:f3:d2:9c:
8a:a5:fa:7f:08:57:19:d7:5a:cd:b4:97:65:4f:f1:f2:76:78:
1f:93:e3:a4:af:78:ee:d1:57:41:fd:25:b0:7e:88:fe:0d:db:
28:91:cb:cc:f7:88:f5:09:eb:37:df:62:12:95:23:2d:82:2b:
7e:7b:23:b2:a8:86:f6:e9:fa:a0:69:73:ab:b1:50:38:c7:0a:
21:be:3c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 07:01:10 2024 by rpki-client on console-ams.rpki-client.org