Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4b8aea41-3103-41f5-91d3-8c2988778b10.roa
File: 4b8aea41-3103-41f5-91d3-8c2988778b10.roa (raw, json)
Hash identifier: Qfth1xYvNc9RkmF2kM5MQy7OKsPFV76idqKzShq3JUY=
Subject key identifier: C3:1D:52:4E:54:31:42:2F:03:C5:9D:EF:FE:1A:9A:AF:EF:5C:24:F1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 683CF765C1DB0579CF3D65E2A10DD4901598D51F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4b8aea41-3103-41f5-91d3-8c2988778b10.roa
Signing time: Tue 22 Oct 2024 00:00:00 +0000
ROA not before: Tue 22 Oct 2024 00:00:00 +0000
ROA not after: Tue 26 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 01:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:3c:f7:65:c1:db:05:79:cf:3d:65:e2:a1:0d:d4:90:15:98:d5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 22 00:00:00 2024 GMT
Not After : Nov 26 23:59:59 2024 GMT
Subject: serialNumber=aa75ff14860205d79ff1eb67faaaba0d45507a5ac34286507dff242f1ab400ae, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1a:02:be:72:b4:3f:a8:75:8a:87:38:bc:59:
33:01:56:12:03:cd:eb:42:3d:bd:37:a7:89:75:30:
77:cb:61:14:32:c1:69:ba:81:bf:95:07:b1:0c:02:
85:f8:65:ae:11:ad:9e:6f:13:dd:86:ee:66:cd:58:
41:17:5f:0f:94:96:d7:80:87:24:c6:0b:c4:8a:28:
43:e1:d1:d2:61:97:b5:dd:80:fd:05:b6:8f:4f:61:
fe:59:f1:0a:b7:87:08:b6:33:3b:4d:82:31:f4:30:
40:12:2a:7f:b3:e4:f5:e0:29:d7:1a:0c:0d:cb:5a:
23:ee:5c:e9:43:de:68:fd:22:c3:27:75:5a:e1:2f:
ad:a8:f6:11:f3:48:99:6e:46:43:91:d7:68:fc:1f:
57:32:45:20:4e:84:05:61:85:c8:d3:10:83:9b:d2:
37:f0:8b:1c:ba:57:39:ef:9b:32:92:dd:c2:ca:e6:
bd:ab:22:1a:55:9d:7a:45:1f:e3:7c:75:71:27:5e:
ca:15:dd:df:45:15:c7:e7:ab:6c:d8:5c:ee:61:57:
da:e6:a4:8c:7f:61:91:25:0e:c3:dd:47:76:ac:08:
79:12:e5:97:44:f6:d2:30:28:ea:90:9c:cb:31:3e:
72:17:9f:5a:3a:06:a5:c7:68:c5:d3:0d:d0:4f:93:
7a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1D:52:4E:54:31:42:2F:03:C5:9D:EF:FE:1A:9A:AF:EF:5C:24:F1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4b8aea41-3103-41f5-91d3-8c2988778b10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:d0:c6:a8:3e:63:b9:f8:32:77:b9:42:de:b8:61:9e:e0:5a:
9a:d4:7d:a2:4f:d6:45:fb:71:3f:30:cf:66:2f:65:a2:30:59:
9d:0f:11:5f:65:b9:23:8d:bc:c3:df:6e:0a:ee:3a:7d:57:af:
f5:fa:a1:1e:2f:d2:fd:17:4c:05:44:7b:cb:84:94:ba:07:de:
c2:e2:e8:ce:1b:df:2c:f1:af:06:18:5c:22:f1:a5:0d:c2:bb:
97:f7:3d:22:a4:d3:28:87:05:e5:03:d0:60:92:08:a1:a4:d3:
04:e4:77:6a:a2:89:af:5a:00:98:c3:57:17:00:31:59:aa:dd:
1a:af:dd:48:bd:40:04:5b:ae:a8:48:3f:94:e4:a9:fd:ac:f4:
35:f8:f0:98:92:11:03:45:66:be:63:08:1c:98:8d:18:ea:c5:
6d:8d:bd:66:ba:6b:7d:aa:64:f7:71:37:b2:1c:d7:3b:b8:18:
d7:6b:3f:24:fb:a1:58:91:8c:33:b7:0e:26:43:d7:d5:fb:57:
fc:97:5f:e7:f7:7b:7e:e4:37:16:a1:f6:0e:57:ac:7b:b0:12:
dd:ba:b3:26:30:73:aa:da:bb:5a:65:45:35:ee:8a:72:3e:af:
d9:4b:51:fa:4b:dd:17:f1:9f:53:2e:74:2f:53:a8:bd:94:bf:
9c:17:e4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 04:53:18 2024 by rpki-client on console-ams.rpki-client.org