Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/610d087f-6b55-4fa4-b311-4293b42c59e5.roa
File: 610d087f-6b55-4fa4-b311-4293b42c59e5.roa (raw, json)
Hash identifier: WEzQSVZErgZM1l8oUeuZ9WYBFUGnH8qANo4V8tnh5h0=
Subject key identifier: FF:6F:78:53:72:77:1F:54:16:3D:32:C4:80:00:68:E4:E1:17:96:16
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 092A489606D651FA0C1FAA58172CD79CF3490EEC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/610d087f-6b55-4fa4-b311-4293b42c59e5.roa
Signing time: Thu 30 May 2024 00:00:00 +0000
ROA not before: Thu 30 May 2024 00:00:00 +0000
ROA not after: Thu 04 Jul 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 00:13:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:2a:48:96:06:d6:51:fa:0c:1f:aa:58:17:2c:d7:9c:f3:49:0e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 30 00:00:00 2024 GMT
Not After : Jul 4 23:59:59 2024 GMT
Subject: serialNumber=808d630656ffc5452d7e7f2dcd3a127328fbad44ba0a953e42605a8b42454113, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f6:44:a1:e7:0a:6f:be:57:61:b3:9d:3c:92:
bd:6c:e5:47:e1:b4:80:71:c4:88:8f:68:ff:8c:8b:
ad:53:5c:fe:81:ae:e0:ab:cb:5b:21:28:8c:54:0a:
36:cd:d3:1e:b0:1c:0d:ea:2e:c4:48:c7:a2:78:48:
60:04:11:df:89:7f:39:02:88:c2:90:1a:ba:8d:da:
e4:7f:c9:3b:9c:4c:35:07:f3:00:da:d6:c4:b8:39:
d1:65:54:d8:ec:d2:d2:2f:0b:ff:ad:7c:d4:b3:3a:
f7:bb:9e:22:ca:4c:8a:e4:17:8e:cb:98:ae:71:a4:
6e:26:da:27:c8:5e:37:0f:b6:95:bd:36:a5:15:fe:
db:98:79:ae:f2:5c:6a:61:35:8d:73:20:e0:e0:63:
cd:64:fe:0c:39:57:73:72:78:03:4b:e0:9d:ef:51:
78:d4:0c:5b:e1:72:dc:3c:f2:d5:c0:01:ac:04:db:
15:ef:cd:0a:88:a6:e6:46:55:cb:7b:96:61:05:c1:
7c:5b:8f:ad:6a:84:7e:f9:d7:d2:49:63:c8:98:af:
53:af:78:72:b6:e2:49:02:9c:8f:f4:1b:78:e9:dc:
48:57:7d:cd:98:3c:65:e8:3c:0b:ea:e7:21:89:40:
bf:02:7c:4e:53:45:0a:82:9b:2b:4d:85:af:70:41:
30:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6F:78:53:72:77:1F:54:16:3D:32:C4:80:00:68:E4:E1:17:96:16
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/610d087f-6b55-4fa4-b311-4293b42c59e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:d0:f1:47:d6:2d:57:27:fb:9c:92:d8:2c:5d:5e:58:60:14:
16:96:5a:f5:df:43:b2:21:01:00:d2:a9:29:67:3b:e4:01:5c:
7f:93:da:c3:b7:64:1b:cb:66:36:23:66:8d:db:fd:c2:af:3f:
c1:2b:d3:ee:14:c2:35:a4:31:8f:de:73:e8:17:ed:85:79:e4:
46:d5:30:5e:40:d8:44:7e:ba:b8:76:85:76:a1:d7:00:82:b5:
28:45:67:65:30:38:3d:fc:88:a3:70:0d:55:6b:80:e2:3b:e0:
81:70:51:5f:ca:28:fb:58:44:8e:07:ca:ff:57:f9:cf:5c:31:
83:fd:28:54:c5:0d:8d:aa:91:43:f4:1a:76:dc:12:ca:d4:16:
0f:f2:45:28:30:11:e2:a1:a3:14:b3:87:25:99:69:9d:7b:15:
7d:7c:40:10:59:34:24:61:e5:10:79:47:82:37:14:ec:1d:01:
3d:0b:14:28:68:4f:45:db:8e:04:a1:d6:ac:ff:28:91:8f:ca:
00:49:18:88:4e:24:cf:9b:f2:9e:05:49:6e:9f:7d:8e:91:35:
d1:b0:18:2e:83:dc:9e:d9:e4:6b:9e:7a:81:b3:f9:f3:66:d3:
d0:d2:ce:7c:52:73:c2:9c:3d:7f:fd:84:d6:c9:4a:ce:82:dc:
b5:63:24:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:29 2024 by rpki-client on console-fra.rpki-client.org