Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/93f2fd37-4d0a-4f35-b665-2f20328b43c1.roa
File: 93f2fd37-4d0a-4f35-b665-2f20328b43c1.roa (raw, json)
Hash identifier: ARHzvwXd2RDhD4N0FKERcr8MFi/j29OByiFyFYveD+M=
Subject key identifier: 55:8C:BB:44:ED:17:C6:4D:BA:0E:66:A4:EB:9B:77:C4:42:87:9E:C0
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 57A96C91859FBCF78C709183CF84C41136A0DFAE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/93f2fd37-4d0a-4f35-b665-2f20328b43c1.roa
Signing time: Sun 06 Oct 2024 00:00:00 +0000
ROA not before: Sun 06 Oct 2024 00:00:00 +0000
ROA not after: Sun 10 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Oct 2024 23:59:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:a9:6c:91:85:9f:bc:f7:8c:70:91:83:cf:84:c4:11:36:a0:df:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 6 00:00:00 2024 GMT
Not After : Nov 10 23:59:59 2024 GMT
Subject: serialNumber=7e55dda5b1e9b79743f87fb07fa407f1514f1b325171829d86dcc494d0edc0eb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6d:0f:a4:71:ff:97:5a:f9:f4:29:44:35:84:
22:99:49:ba:94:4a:38:9e:d7:c5:78:ae:c7:d9:79:
20:48:20:d0:29:cc:93:e5:30:c0:0e:08:9b:45:d2:
f1:70:78:de:28:31:23:48:eb:4e:60:cd:13:2e:2d:
f2:bc:6e:4d:8a:9c:80:15:a3:0f:d8:76:02:ed:3a:
91:f2:93:cf:9f:4b:ca:b5:36:23:6f:5e:9b:99:11:
4f:e4:89:d7:76:72:e5:dc:e3:b3:5c:ce:eb:be:bf:
50:06:9f:11:2c:86:f4:83:2b:1a:b1:be:b9:48:d4:
24:d0:ed:c1:33:82:29:5d:98:fa:2b:b4:a7:e3:e2:
c3:5e:3a:54:71:4d:12:29:13:a5:eb:a6:1e:65:72:
63:a8:c2:79:95:8c:6d:b7:7b:f1:bd:d3:75:bb:b9:
50:03:35:ab:01:61:07:4f:09:f1:2d:a8:d5:43:72:
b5:da:9b:a2:4f:86:eb:3d:6c:91:f3:1f:39:1e:77:
be:c2:b2:92:13:b9:20:7e:78:57:64:00:57:a2:1f:
02:27:e9:ae:60:b5:57:8f:cf:46:48:09:40:0c:a8:
92:dc:89:b0:81:7f:ec:90:50:0e:36:18:e1:5d:39:
90:1a:a4:51:8e:c3:ac:2d:44:db:ae:3a:ab:8d:9a:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8C:BB:44:ED:17:C6:4D:BA:0E:66:A4:EB:9B:77:C4:42:87:9E:C0
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/93f2fd37-4d0a-4f35-b665-2f20328b43c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
23:55:28:32:58:b4:5a:9a:18:c9:3f:74:28:c2:57:d6:80:dc:
c7:0a:af:cc:a0:20:86:7d:d2:8f:35:2b:6d:68:ac:84:55:a1:
11:1a:85:5e:b0:11:4c:23:ed:9d:b4:6a:77:42:0a:93:4b:9e:
b7:42:d7:ad:ec:dd:dc:8d:fc:94:4a:cb:0f:ef:d0:ca:6e:d0:
a1:76:ad:ea:a4:3c:7b:c8:2a:be:3f:25:bb:3c:39:b3:50:2f:
e5:33:8b:25:67:3c:e6:d0:6a:9f:f0:27:aa:5f:cf:b7:0d:89:
1d:cc:a5:2f:f8:2e:0b:68:27:b1:89:a0:0b:a9:e5:8a:e1:65:
6c:77:bd:57:c9:a5:d2:2d:5c:85:11:0c:fb:d0:27:f3:66:2c:
4f:91:a3:12:03:62:9b:d9:13:35:49:f1:27:72:e0:8c:3f:a1:
8a:a2:bc:20:f4:b9:da:79:7e:3d:0e:2f:5f:45:01:c5:ac:7c:
89:99:26:13:9a:69:87:4c:9a:7a:d3:a1:c7:2b:b3:52:08:fb:
3c:cd:ea:42:e2:3b:06:a9:d3:07:4c:76:3f:1a:6c:c6:6a:f3:
c6:fc:69:1f:de:5f:4d:b8:5d:4f:6b:02:e4:8f:57:81:5f:1a:
8c:8e:db:ee:35:78:3a:59:0a:09:90:b8:40:ca:21:15:5c:ea:
1c:a3:8f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 04:20:04 2024 by rpki-client on console-ams.rpki-client.org