Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6b4801c9-2b09-4be6-bf02-0c979ed5590d.roa
File: 6b4801c9-2b09-4be6-bf02-0c979ed5590d.roa (raw, json)
Hash identifier: WfqqK6pQhnbt6rji1l8qN+vpGitcV/bwKhRfTcV1FBg=
Subject key identifier: 60:68:89:6C:D3:ED:54:F1:DD:7B:AD:E6:66:21:43:6C:CC:68:BB:58
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 207799F3707A657AF2944A400D0EAC92521947FB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6b4801c9-2b09-4be6-bf02-0c979ed5590d.roa
Signing time: Mon 01 Jul 2024 00:00:00 +0000
ROA not before: Mon 01 Jul 2024 00:00:00 +0000
ROA not after: Mon 05 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 08:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:77:99:f3:70:7a:65:7a:f2:94:4a:40:0d:0e:ac:92:52:19:47:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 1 00:00:00 2024 GMT
Not After : Aug 5 23:59:59 2024 GMT
Subject: serialNumber=eb17d8de29573d5b4c7b865f5dfc869dc0a077aebb1d818aa2c06d23c57e0eba, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:a9:51:90:0d:8b:4b:54:d8:47:a3:24:4b:
7f:a1:99:7d:07:d1:36:ee:9a:e0:4d:3e:41:ae:36:
17:22:34:92:41:3d:ec:58:22:e6:94:62:db:81:de:
71:8e:3e:1d:76:12:50:8d:0b:c6:f8:61:51:74:26:
00:16:12:0c:85:63:80:43:12:03:a5:7e:c5:bb:5b:
e9:93:d6:04:33:b8:18:60:c9:e7:96:d5:cf:89:89:
f7:c2:49:1f:f4:5c:b2:20:9a:ad:90:32:95:a7:e8:
78:f8:65:c0:68:8e:72:b6:a3:6b:32:4e:70:1e:37:
6e:69:97:54:40:d8:c3:f4:3c:3c:3b:aa:47:94:95:
ef:55:26:52:03:88:44:1f:94:15:c8:5a:94:31:e7:
df:ce:d0:1e:67:c2:14:34:8d:c8:df:5d:25:29:48:
07:d1:49:8f:b4:c1:ec:3e:d6:e9:cd:eb:d0:2a:4f:
dd:33:75:26:63:4e:7b:3c:19:24:89:9c:1b:67:ff:
d0:4b:cf:f2:b5:c8:8c:ee:04:a3:2a:95:f8:02:38:
bc:c8:88:bc:58:0a:70:be:7f:39:1e:28:ef:04:cb:
90:b0:d2:6c:9e:da:1b:c1:bc:05:a4:e5:84:21:6d:
7f:af:84:54:8d:cd:4f:c7:d2:20:00:68:c5:af:02:
93:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:68:89:6C:D3:ED:54:F1:DD:7B:AD:E6:66:21:43:6C:CC:68:BB:58
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6b4801c9-2b09-4be6-bf02-0c979ed5590d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:d0:3a:3e:1b:33:af:86:86:32:b8:b3:77:82:88:ae:05:f8:
10:ac:af:c2:19:1e:41:d7:5f:d2:8e:73:7b:d5:22:6a:ee:18:
a9:5e:de:d4:ba:1a:63:ad:17:bb:76:b3:5e:d0:54:b2:d1:46:
c1:31:75:01:fb:cd:d7:2d:b5:58:32:0c:a3:6b:59:e0:83:08:
b2:ae:55:c6:ae:f2:2b:20:7c:bd:3b:0f:3e:da:61:4f:af:13:
36:d3:d5:7d:94:2c:43:4f:2f:ac:4a:26:73:e5:ff:a5:bf:e2:
6e:b0:40:16:79:ce:2e:e5:eb:75:aa:1d:f2:c4:0c:6b:6b:d4:
23:74:3f:ba:46:19:3c:8c:25:42:42:97:ba:9e:37:38:52:07:
d4:d4:32:d1:e8:6b:af:8a:ab:a0:12:9c:f3:00:bf:eb:f5:0e:
30:ca:1c:2e:7d:6d:04:7e:8a:50:ba:ea:32:61:a4:58:64:ac:
5e:3e:29:49:44:8e:07:ce:12:3d:57:66:12:d8:40:ff:9a:2e:
09:d0:82:fe:9e:fa:33:7c:34:8f:35:0e:ce:42:35:e0:6d:96:
ee:41:43:68:91:f3:a0:14:6a:33:57:15:78:24:25:78:05:4a:
71:f4:53:79:72:86:6e:ff:05:4e:f4:25:6a:1e:fa:c1:0b:08:
a4:a0:2b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 10:53:25 2024 by rpki-client on console-ams.rpki-client.org