Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6a898c20-57dd-4f08-a647-16fa0c48a751.roa
File: 6a898c20-57dd-4f08-a647-16fa0c48a751.roa (raw, json)
Hash identifier: z5F5IRIhhsf+a8ntCzSoK4Vm6wiQ8MBmBC9CGlrYFwY=
Subject key identifier: EE:30:D6:DE:03:60:85:FE:5D:E8:83:6F:E2:75:E0:3D:CA:2C:BA:1F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1CCDCEFDDB85275168949FAFBAC3B23F5ACC3684
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6a898c20-57dd-4f08-a647-16fa0c48a751.roa
Signing time: Fri 17 May 2024 00:00:00 +0000
ROA not before: Fri 17 May 2024 00:00:00 +0000
ROA not after: Fri 21 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 May 2024 08:28:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:cd:ce:fd:db:85:27:51:68:94:9f:af:ba:c3:b2:3f:5a:cc:36:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 17 00:00:00 2024 GMT
Not After : Jun 21 23:59:59 2024 GMT
Subject: serialNumber=e864f1f29908795eff2a20d98476bca941b82d4efc978655c20da2afcbcdfdea, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0f:b7:a6:ec:be:0d:e0:0a:80:b5:cf:f1:c7:
0b:d0:4a:4a:ea:31:6d:6a:d0:37:df:9c:41:ab:0a:
7f:da:cd:19:4c:fb:5d:44:31:b1:4e:c9:ac:bf:5a:
db:79:da:db:80:4b:a0:07:bf:3b:d8:dd:d6:34:ad:
b2:90:e7:ca:2d:40:72:02:56:2d:92:e7:4c:36:eb:
72:d9:3f:0f:7c:e0:45:e4:70:cc:08:64:3c:3c:47:
68:00:25:ee:90:ab:42:6b:bd:bd:78:81:aa:d8:44:
2c:4e:7a:90:26:16:f1:f8:dc:fb:4c:f8:5d:fa:17:
e5:ae:d1:d6:4d:f1:9d:a1:08:72:56:ec:89:9b:38:
e9:46:f0:95:42:6d:dc:9a:f7:82:b1:31:10:96:08:
e2:be:07:d2:1f:4f:c6:b8:cc:16:90:62:56:17:cb:
24:7e:ef:3b:05:39:0a:e1:8f:42:d8:b5:e7:c4:f0:
3e:7c:48:4c:71:fd:02:b7:15:13:34:54:fb:72:a1:
d8:40:72:b0:c0:d0:92:58:7a:ed:00:77:84:15:d5:
17:5a:00:6f:d0:cb:bf:a3:33:21:c6:e3:12:76:97:
72:d4:bc:08:c0:8c:cc:f8:50:24:18:02:c2:89:48:
eb:d5:11:9c:89:36:06:3b:59:f3:5e:96:5d:b0:b2:
15:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:30:D6:DE:03:60:85:FE:5D:E8:83:6F:E2:75:E0:3D:CA:2C:BA:1F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6a898c20-57dd-4f08-a647-16fa0c48a751.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
af:77:67:98:2e:83:32:72:d0:47:9e:65:97:8a:d2:02:1e:ee:
fd:d7:24:7e:64:27:cd:ab:3f:2c:34:3f:5d:f7:69:77:c0:49:
b9:a1:01:9a:45:9a:cd:87:54:66:b2:45:48:8d:1e:d3:bb:2d:
bf:06:bf:b3:04:c9:13:0d:fd:2b:0f:ef:5d:c0:6e:70:5e:7c:
e7:01:47:5f:1f:11:a0:9e:57:8d:cc:e7:72:02:8e:fc:eb:be:
63:d2:e4:bc:1b:14:8a:aa:6e:80:e9:3f:71:b4:47:72:44:71:
4e:ab:db:8d:dc:6f:e5:c0:98:a5:fe:90:7c:14:bf:08:92:d5:
27:64:c6:eb:1d:06:85:ff:ab:a0:ff:f3:bb:15:bf:1f:a4:ea:
5f:42:f8:42:bc:20:7c:20:c1:54:13:14:91:a7:13:8f:4a:54:
27:7a:6c:a4:aa:b6:66:46:f4:9d:39:4b:44:c4:c1:02:f3:79:
10:63:f3:c0:0c:ac:9d:89:0c:01:ea:0b:bb:27:99:74:ff:1f:
d6:cd:ae:f9:e0:eb:1c:6b:a8:5b:df:a7:21:cb:b7:e0:22:ab:
a5:fb:2a:52:92:3c:0d:14:91:fd:09:ca:f0:05:58:c8:00:6f:
b1:ee:99:e2:68:ce:6c:06:15:8c:a1:fe:d8:7d:d3:35:64:c6:
ae:f2:81:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:51 2024 by rpki-client on console-ams.rpki-client.org