Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/84a2c3a6-84a2-4a83-8461-f649e9c62028.roa
File: 84a2c3a6-84a2-4a83-8461-f649e9c62028.roa (raw, json)
Hash identifier: Wvu82nQVxQpgERjAxpoL8b2Q9jqdIZ6CirrdE7kJrfQ=
Subject key identifier: CE:17:B7:60:AA:D7:35:35:F1:1D:E0:20:14:0D:A9:03:4A:90:3F:DA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7ECD72B48129CFE932A3622FC4A6F9F33514C486
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/84a2c3a6-84a2-4a83-8461-f649e9c62028.roa
Signing time: Fri 03 May 2024 00:00:00 +0000
ROA not before: Fri 03 May 2024 00:00:00 +0000
ROA not after: Fri 07 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 May 2024 06:10:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:cd:72:b4:81:29:cf:e9:32:a3:62:2f:c4:a6:f9:f3:35:14:c4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 3 00:00:00 2024 GMT
Not After : Jun 7 23:59:59 2024 GMT
Subject: serialNumber=e3293af9c9dcf9387a6e210539187049ebd3a050895b22085b82c956d8f48b7f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5a:05:5f:5e:73:eb:6c:bf:10:52:c3:cb:7c:
2e:79:b0:2c:5b:55:a6:90:a6:65:e6:6a:cd:75:d8:
fc:21:bf:ec:40:e0:00:af:66:8f:5c:5b:77:e0:cb:
ac:17:3d:85:93:df:c8:1d:a8:ef:e9:ca:54:3e:f6:
aa:b5:18:12:27:d2:e4:76:5c:ba:10:5a:6e:5a:f6:
7d:4d:45:b8:94:3e:c4:c4:f1:92:27:78:b3:e1:5b:
f6:6c:fa:49:56:f6:a1:4e:f5:2a:3d:48:b0:91:b4:
b6:08:61:2f:58:15:1a:72:53:19:ef:5d:ee:ed:b6:
11:8a:73:a6:bb:4d:4a:9d:89:4f:c2:19:88:d4:d0:
86:f8:72:ad:b4:9c:67:33:b6:52:73:27:aa:92:71:
0f:f0:ba:2d:28:69:a2:fa:a0:7d:42:26:30:c1:ae:
aa:b8:a3:bf:c2:6e:3e:05:5a:8a:6a:cd:97:24:7f:
bc:d7:13:1f:7a:e9:48:48:3c:65:72:9e:94:9b:4a:
42:cc:9b:13:f7:5d:81:81:aa:52:63:b1:31:55:06:
58:e8:d1:c2:c9:ed:5a:69:eb:fe:ec:b1:60:97:02:
15:33:cf:28:35:e4:79:62:a1:82:f9:b7:4c:9c:13:
2d:fa:ad:a3:c1:c3:62:33:85:06:1f:3e:cc:b4:b9:
0c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:17:B7:60:AA:D7:35:35:F1:1D:E0:20:14:0D:A9:03:4A:90:3F:DA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/84a2c3a6-84a2-4a83-8461-f649e9c62028.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:7a:d7:aa:ba:8d:aa:d4:6f:dd:90:b7:9d:a3:57:a6:1b:15:
0c:4a:21:de:96:53:a5:cc:a9:b4:12:5e:74:2f:e0:30:e8:be:
4c:6b:69:da:0f:55:e4:41:9b:ab:0a:46:c8:5a:ba:09:02:72:
37:bd:3e:b2:60:ba:c6:07:1d:a6:6f:b5:18:c0:6d:b4:c3:77:
43:7c:ae:6a:a1:80:98:d8:82:61:ae:46:f4:7a:43:e9:1f:03:
ec:c2:7e:59:47:4c:57:ce:c4:95:c0:da:3b:f1:5e:82:3c:15:
e5:8c:a2:9e:43:73:e0:6e:c5:62:91:47:47:31:e4:15:58:cf:
4f:84:61:f5:6b:f9:d5:0e:5f:fe:54:63:e3:ac:0a:db:0c:34:
37:e0:4f:81:af:f9:0f:1f:b9:1d:bb:e9:bf:16:88:22:f0:66:
8b:24:e1:6c:ca:0f:04:84:0a:17:66:2a:f5:18:41:3f:2c:93:
02:a8:84:2c:87:26:6c:28:2f:15:de:94:59:41:89:34:1c:10:
8a:7c:c6:41:4f:75:89:51:32:eb:75:c9:58:56:75:46:f2:1f:
c8:f8:c0:e3:ad:12:67:6b:49:02:91:99:2a:8f:b8:c9:d5:4f:
56:7c:36:61:ff:15:80:8c:a2:c3:dc:de:16:ab:69:6c:70:9d:
58:21:9c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:58 2024 by rpki-client on console-ams.rpki-client.org