Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/802be997-b601-4a87-bef6-61a8b8fe3892.roa
File: 802be997-b601-4a87-bef6-61a8b8fe3892.roa (raw, json)
Hash identifier: wW+fmrjaxv+9dMNYcfAOfKnPZVoDcIHZqw+CGgQbn4U=
Subject key identifier: 6A:ED:C6:25:6F:30:7A:10:A7:8B:4F:1D:46:5A:14:53:24:80:69:7B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2D39FA1775DEE0A24E010D0EE8E9B29376C442C3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/802be997-b601-4a87-bef6-61a8b8fe3892.roa
Signing time: Wed 04 Sep 2024 00:00:00 +0000
ROA not before: Wed 04 Sep 2024 00:00:00 +0000
ROA not after: Wed 09 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 22:54:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:39:fa:17:75:de:e0:a2:4e:01:0d:0e:e8:e9:b2:93:76:c4:42:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 4 00:00:00 2024 GMT
Not After : Oct 9 23:59:59 2024 GMT
Subject: serialNumber=2d63f5b1c66b39a3a49cef9f783ed75ca732b1afe606135bece71a9635b80d1e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:01:da:c6:8a:e6:41:26:56:d8:ab:9d:bf:45:
5f:b2:f5:3b:2c:9e:76:17:df:28:ce:c2:ce:cf:29:
1a:61:48:81:ac:22:fa:6c:51:50:15:fd:ad:88:cf:
34:17:e2:1a:30:c2:b4:3a:c1:24:9e:7b:8d:81:31:
d9:01:c9:db:2f:54:cb:eb:a4:fd:e3:c8:4c:19:f1:
87:87:98:6d:db:42:5f:11:eb:84:29:7f:a8:6c:a8:
2d:f4:3d:ca:74:f1:2a:40:9e:a3:28:be:8f:96:6a:
83:36:d6:82:49:91:97:bc:b1:76:e3:7b:5b:43:a0:
48:be:b5:d4:94:31:71:d9:6c:3e:77:92:82:d1:f2:
13:e3:22:20:76:a8:42:e6:42:66:ef:35:19:39:58:
99:5d:79:de:bc:14:4b:f6:a5:61:c3:13:68:b3:90:
7b:0f:69:d3:4f:75:81:d6:a1:86:f4:32:33:51:98:
f9:e2:5d:f2:d5:15:c2:cb:57:9e:dc:3b:a1:e8:57:
e6:36:a5:ab:f6:58:b4:1b:20:a0:cf:d0:71:ba:0e:
7c:e6:93:6d:51:48:04:b4:33:53:37:3f:c5:2a:6d:
41:03:34:16:44:a1:34:a2:ee:58:cd:c4:18:bf:42:
47:4f:06:38:d1:9a:23:67:31:c0:41:b9:5b:8d:cb:
06:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:ED:C6:25:6F:30:7A:10:A7:8B:4F:1D:46:5A:14:53:24:80:69:7B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/802be997-b601-4a87-bef6-61a8b8fe3892.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:b6:02:9c:9f:ff:ec:33:63:35:a5:87:3f:78:1d:12:3d:ba:
24:95:a0:0f:78:80:84:3a:0e:a5:0a:7f:e1:51:81:e0:fd:df:
01:b0:31:f3:2b:2d:ca:8b:86:a2:9b:f6:9d:c0:d4:50:72:7f:
8a:43:69:35:ff:27:4a:d9:2d:74:aa:58:43:4e:65:03:5d:b0:
34:4d:f4:6b:09:70:92:f8:0b:06:1c:6f:2b:99:06:a7:74:3d:
97:d1:73:2b:5d:f6:b6:d3:a4:d9:5e:c2:c2:c6:9b:c0:29:17:
4d:49:45:b6:09:f0:5e:49:c8:ec:d8:c4:cf:ec:e3:b1:13:d6:
ae:b7:ed:ce:21:57:8a:a3:99:2c:84:0d:4e:15:2d:05:12:c8:
30:11:42:93:e8:22:64:0a:5c:fe:ae:3c:e2:15:9b:2a:d6:c1:
73:a7:6b:c0:18:e9:4c:55:ea:d2:f2:dd:e8:7f:25:fb:90:49:
53:66:f4:2a:18:39:6e:6b:dc:08:bb:09:f5:bf:36:21:c8:ef:
73:f7:a7:b4:c4:f8:82:5b:5f:28:43:d4:8a:e5:03:32:f0:de:
ef:b5:83:17:a2:b1:19:d3:d2:ba:ca:f5:ac:c5:8a:03:b9:03:
dc:e7:bf:9c:b0:e9:9d:ca:ee:dc:49:4b:b1:9a:fc:8a:ab:3b:
b3:d0:d3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 01:21:04 2024 by rpki-client on console-ams.rpki-client.org