Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5079f033-99df-4c5c-bb01-e42dda90e544.roa
File: 5079f033-99df-4c5c-bb01-e42dda90e544.roa (raw, json)
Hash identifier: EhqiSPI8NSrZJcJB+qvpJfxVjLacR5Mgu19zvbFXWoQ=
Subject key identifier: 0D:DA:BB:F1:DA:3F:18:ED:11:8D:39:C5:15:D3:13:E2:08:67:6B:B9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5140BF78EB0818F1E7E88BBE9F995753CC8CA83B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5079f033-99df-4c5c-bb01-e42dda90e544.roa
Signing time: Fri 09 Aug 2024 00:00:00 +0000
ROA not before: Fri 09 Aug 2024 00:00:00 +0000
ROA not after: Fri 13 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Aug 2024 01:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:40:bf:78:eb:08:18:f1:e7:e8:8b:be:9f:99:57:53:cc:8c:a8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 9 00:00:00 2024 GMT
Not After : Sep 13 23:59:59 2024 GMT
Subject: serialNumber=500a64a2e26b765eb525774b1b7ddff46a94a39e3a38260843f6fa7fe8f38988, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dd:da:60:e4:6f:ca:66:1b:84:c5:bb:73:95:
51:df:73:05:a1:55:53:18:df:a2:c3:a5:74:3b:17:
d5:07:9f:ff:69:d7:5f:ed:0b:3d:ef:9e:ad:48:59:
1d:e5:72:2c:91:87:1e:97:72:7c:12:af:33:90:d7:
d3:71:b5:e1:13:99:4c:6a:b6:84:f6:43:bc:4e:0e:
ed:31:5f:dc:ae:a0:c7:21:3a:a6:30:aa:a4:29:82:
f0:ee:97:80:bd:61:91:96:24:82:88:52:f9:d8:f8:
94:02:fe:d5:95:da:f4:6c:da:41:18:af:4b:77:2f:
69:92:1f:42:69:03:0c:76:0e:fb:62:ff:e9:e6:32:
30:54:d8:ca:1d:63:4a:8f:f8:09:b4:14:ce:7a:f6:
8d:8b:4a:29:b2:9f:c3:fd:dd:25:b6:69:b2:e7:47:
71:14:c7:b4:45:ce:eb:b8:15:aa:0c:72:4d:e2:37:
aa:c9:c1:43:ed:69:51:3d:cf:58:f1:31:3c:8c:68:
16:bc:92:1c:b2:e3:e2:ed:13:7a:e9:40:a9:7e:8c:
93:7d:94:03:fc:1e:99:fc:ff:7b:aa:45:43:b3:31:
f3:f4:aa:08:de:09:ab:1c:0f:2b:d2:4e:70:81:d4:
2b:87:cc:a8:00:3e:94:50:95:7c:85:37:40:1b:52:
27:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DA:BB:F1:DA:3F:18:ED:11:8D:39:C5:15:D3:13:E2:08:67:6B:B9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5079f033-99df-4c5c-bb01-e42dda90e544.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
04:b0:5e:06:29:9d:12:c7:3c:00:06:b4:9d:b4:c6:be:07:ee:
26:8b:8c:34:18:26:95:3d:c0:2b:d1:d4:91:26:c4:e6:7e:e0:
cd:7a:ab:b1:fd:7c:b2:00:93:35:49:65:56:b8:9a:22:7a:0b:
6f:85:86:2c:b4:4b:72:b7:a1:48:60:b8:bb:b6:cf:e6:56:70:
7e:ba:d4:e5:2f:7d:90:bc:04:6e:e7:2f:ca:b8:44:0a:f9:5f:
b8:09:0e:3c:85:5c:f6:a9:2e:49:a9:d3:cf:96:22:69:69:71:
04:aa:95:84:65:7f:aa:ad:2e:74:25:2b:6e:06:2d:fe:35:05:
e2:66:c7:b8:2c:27:de:a5:f4:87:fa:c9:f9:03:c9:1f:82:f0:
f2:f1:48:56:be:05:ae:6d:19:8c:89:e2:47:b3:72:8b:5c:c6:
27:c5:07:87:e0:16:ef:f4:c0:2b:2a:2a:e9:5b:b5:06:9c:e1:
d5:91:fc:d8:5d:03:e1:76:11:47:58:26:50:65:55:dc:c1:4c:
3c:95:e6:86:cc:36:cc:9f:3e:47:a7:dc:3b:99:9b:30:46:6d:
7b:27:98:a5:f1:e4:fc:35:fe:44:a7:78:04:b3:d9:06:5e:be:
31:48:3a:db:a0:a4:0f:a1:78:36:3e:55:fe:29:29:34:e5:f3:
a8:70:f9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 04:25:47 2024 by rpki-client on console-ams.rpki-client.org