Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4c70da5f-4450-4aa6-a59f-ee7890016761.roa
File: 4c70da5f-4450-4aa6-a59f-ee7890016761.roa (raw, json)
Hash identifier: GslPcEBqtYZlpf2ZW3qwULJqI2/OKg5YTMUzLFrgdKU=
Subject key identifier: C1:50:59:32:D5:3B:67:3C:56:7B:90:17:E0:8E:94:BF:59:8C:50:FD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6C8DA92FA85BB3BE7CAAB1F901CBB393DCD81F48
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4c70da5f-4450-4aa6-a59f-ee7890016761.roa
Signing time: Sat 05 Oct 2024 00:00:00 +0000
ROA not before: Sat 05 Oct 2024 00:00:00 +0000
ROA not after: Sat 09 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Oct 2024 21:14:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:8d:a9:2f:a8:5b:b3:be:7c:aa:b1:f9:01:cb:b3:93:dc:d8:1f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 5 00:00:00 2024 GMT
Not After : Nov 9 23:59:59 2024 GMT
Subject: serialNumber=f30fd91fa73db8fe7a0e8e04680eb9e18e9a2d5e218f3eb78923b0dc90229981, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ae:37:19:5b:c6:86:a5:27:b0:c4:b3:97:44:
07:ea:a8:26:18:bd:1c:36:21:25:de:0b:0b:e2:05:
4c:3b:03:e1:84:c5:c0:7b:a8:bd:91:50:fd:45:06:
88:35:16:0c:7c:6f:7f:25:d5:2f:c5:b1:4b:ec:fe:
fc:6a:65:32:e5:e5:60:02:cb:c5:7b:c2:de:d2:bb:
39:45:a3:22:82:6a:18:9e:5a:94:3d:1c:0d:81:37:
b4:87:35:8a:5f:7f:f8:81:29:ac:0f:3c:a8:dd:b1:
78:db:ee:d4:0b:4e:51:20:a7:8f:5e:30:4a:e8:ef:
9b:d8:c8:21:fc:3e:d3:81:65:f6:99:de:c4:1a:9d:
c8:d9:ea:88:2e:a0:09:1c:ba:b8:5e:aa:5f:eb:06:
1e:00:e2:9b:7b:14:52:c8:3d:6f:0f:b7:74:d4:32:
7c:34:6f:6b:03:24:83:79:e8:41:a2:ce:f5:f9:33:
34:b8:22:fb:08:8d:5e:83:e8:bf:92:1c:cc:46:90:
cb:9c:be:56:5b:8c:74:f6:d5:57:2a:29:3e:9c:2e:
1a:61:98:1f:3b:a5:3c:a5:03:19:41:3e:8a:ca:58:
2c:f6:95:18:70:41:98:86:cf:c7:96:da:1e:56:b7:
d6:f9:4b:81:5a:18:5a:a6:de:df:f1:fd:ea:f0:38:
63:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:50:59:32:D5:3B:67:3C:56:7B:90:17:E0:8E:94:BF:59:8C:50:FD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4c70da5f-4450-4aa6-a59f-ee7890016761.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
53:99:49:a4:d6:36:69:ad:95:38:62:5f:1f:3f:22:c6:9d:e7:
8a:c6:d9:5e:93:a2:51:22:17:a1:bc:77:0b:83:b0:84:b5:19:
b0:ec:11:47:dc:24:ff:c8:b9:e8:a4:ae:47:36:b7:5f:12:69:
04:e7:99:0f:0d:f6:84:7a:b9:b1:fa:21:b5:61:42:db:8a:55:
cb:28:c3:e5:54:d6:48:5b:56:c9:35:ce:6e:03:92:95:eb:d1:
99:d9:db:45:77:bf:38:cd:72:22:9c:e5:9e:e8:06:4b:a0:ab:
e0:07:68:42:a9:ab:b5:fb:6c:db:33:4d:bf:25:47:0a:1a:f2:
cd:32:37:cf:71:a6:19:0e:8a:13:10:85:fb:74:57:1c:7f:8d:
93:33:e0:e4:9a:f0:2a:ea:22:9c:07:4e:90:4b:6b:8b:86:20:
82:63:16:c0:7f:25:47:94:d8:7b:b8:17:2a:d7:b8:c6:65:f0:
c4:04:a4:87:42:be:71:dc:88:91:79:a1:a0:d2:93:3d:64:4c:
87:21:3d:b8:1d:90:8e:c9:b6:dc:7f:6f:13:a8:7a:d9:4f:6f:
08:a4:ee:c8:1d:b2:84:90:92:92:bb:d3:2e:ab:0d:46:1a:c3:
bf:0c:ff:4d:b2:f2:3d:32:20:1e:51:c5:d4:90:16:ef:83:e2:
dd:16:6e:93
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbI2pL6hbs758qrH5Acuzk9zYH0gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMDA1MDAwMDAwWhcNMjQxMTA5MjM1OTU5
WjB6MUkwRwYDVQQFE0BmMzBmZDkxZmE3M2RiOGZlN2EwZThlMDQ2ODBlYjllMThl
OWEyZDVlMjE4ZjNlYjc4OTIzYjBkYzkwMjI5OTgxMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCjrjcZW8aGpSewxLOXRAfqqCYYvRw2ISXeCwviBUw7A+GE
xcB7qL2RUP1FBog1Fgx8b38l1S/FsUvs/vxqZTLl5WACy8V7wt7SuzlFoyKCahie
WpQ9HA2BN7SHNYpff/iBKawPPKjdsXjb7tQLTlEgp49eMEro75vYyCH8PtOBZfaZ
3sQancjZ6oguoAkcurheql/rBh4A4pt7FFLIPW8Pt3TUMnw0b2sDJIN56EGizvX5
MzS4IvsIjV6D6L+SHMxGkMucvlZbjHT21VcqKT6cLhphmB87pTylAxlBPorKWCz2
lRhwQZiGz8eW2h5Wt9b5S4FaGFqm3t/x/erwOGM3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUwVBZMtU7ZzxWe5AX4I6Uv1mMUP0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzRjNzBkYTVmLTQ0NTAtNGFhNi1hNTlmLWVlNzg5MDAxNjc2MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAFOZSaTWNmmtlThiXx8/Isad54rG
2V6TolEiF6G8dwuDsIS1GbDsEUfcJP/Iueikrkc2t18SaQTnmQ8N9oR6ubH6IbVh
QtuKVcsow+VU1khbVsk1zm4DkpXr0ZnZ20V3vzjNciKc5Z7oBkugq+AHaEKpq7X7
bNszTb8lRwoa8s0yN89xphkOihMQhft0Vxx/jZMz4OSa8CrqIpwHTpBLa4uGIIJj
FsB/JUeU2Hu4FyrXuMZl8MQEpIdCvnHciJF5oaDSkz1kTIchPbgdkI7Jttx/bxOo
etlPbwik7sgdsoSQkpK70y6rDUYaw78M/02y8j0yIB5RxdSQFu+D4t0WbpM=
-----END CERTIFICATE-----
Generated at Sun Oct 6 03:35:37 2024 by rpki-client on console-ams.rpki-client.org