Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9922eacb-f91a-469e-b39d-e1470eb510e9.roa
File: 9922eacb-f91a-469e-b39d-e1470eb510e9.roa (raw, json)
Hash identifier: OALTg2ciboybxYOegNmoIqJllOFBN6CII/Fo9xFxteI=
Subject key identifier: E9:FA:91:F3:1B:38:ED:5B:FC:EB:FD:82:BD:DE:9F:A7:D8:3C:3E:02
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 13819A779967E95D42CCC94A2027F312CA75FAAE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9922eacb-f91a-469e-b39d-e1470eb510e9.roa
Signing time: Sun 04 Aug 2024 00:00:00 +0000
ROA not before: Sun 04 Aug 2024 00:00:00 +0000
ROA not after: Sun 08 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Aug 2024 07:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:81:9a:77:99:67:e9:5d:42:cc:c9:4a:20:27:f3:12:ca:75:fa:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 4 00:00:00 2024 GMT
Not After : Sep 8 23:59:59 2024 GMT
Subject: serialNumber=7a066a49bec26421505223a449e3434ae451c9edb5958cc7f0223b9b7ea256d9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:83:6f:47:97:00:96:f2:30:40:36:8c:3a:
b7:1d:c0:75:56:8a:4a:75:42:28:08:36:01:2d:0b:
b1:7d:fd:ca:aa:ce:d4:89:8b:18:8a:72:51:16:a2:
27:48:b1:39:dc:73:55:38:c9:71:d7:a2:df:20:05:
7a:0e:76:3e:f4:45:1f:87:eb:a4:e1:d3:f6:bf:b8:
4f:21:da:2b:8c:35:c9:07:26:c5:63:d8:9e:d3:ba:
12:0c:47:1d:ba:fa:35:d4:6a:a9:8f:62:88:ef:da:
17:82:46:7e:c6:12:4e:b4:d3:a4:01:8b:03:11:f0:
3b:14:9e:ad:8e:50:8a:02:41:07:37:2e:d5:6b:40:
ba:23:1a:f6:ed:1b:e1:3e:d0:8d:9d:c5:e9:17:05:
e3:40:22:f5:4d:ab:6e:33:fa:21:20:6c:59:6e:10:
4b:0d:ba:54:68:54:a9:53:f6:d3:d9:0a:16:29:89:
89:e1:15:cc:a2:1b:05:9b:10:9c:a5:c0:04:6a:4f:
8d:cf:20:ef:4f:f1:cc:cf:d9:02:99:d3:89:3d:86:
bf:17:56:ac:72:e0:8b:f2:04:b2:c1:b7:0b:03:e1:
3b:0d:f5:9e:7f:25:28:49:67:ab:54:73:5b:7c:0e:
e0:8b:20:31:20:3d:33:45:30:83:8c:f9:5a:f0:f4:
5b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FA:91:F3:1B:38:ED:5B:FC:EB:FD:82:BD:DE:9F:A7:D8:3C:3E:02
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9922eacb-f91a-469e-b39d-e1470eb510e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
60:eb:17:b3:48:dd:d1:c8:2e:ca:99:ec:0c:ef:19:eb:62:b8:
a1:eb:fe:c7:ca:09:32:83:a9:06:c8:f0:b3:bb:17:16:53:cb:
1e:6c:12:43:ce:ab:85:d9:f2:de:0f:ea:e1:df:67:e8:9e:47:
f2:a2:c8:df:5b:b2:47:a3:ba:2f:ba:d0:b2:42:53:cc:98:68:
b8:12:1f:f2:bc:c4:65:92:f5:6b:fe:d7:16:89:e0:04:e9:82:
8b:ed:24:54:97:98:fe:57:a0:dc:ae:51:34:f7:45:f1:94:e9:
f0:a3:11:3f:be:e8:f5:22:89:0b:ca:87:21:32:82:be:38:a0:
e2:78:4c:4f:60:d2:9d:48:ae:5e:96:e8:2a:de:67:48:2c:29:
d6:5c:a2:95:a5:e4:f6:16:06:a3:6e:3a:35:3a:88:94:fb:52:
b8:53:ba:17:d0:a3:0b:b6:c1:be:41:ed:db:a4:78:15:fb:73:
08:84:a1:45:9d:1d:d5:be:5f:c2:0d:83:2b:36:2e:f5:55:d0:
18:37:83:d9:07:6c:5d:e5:f8:84:d4:a5:08:3e:90:98:b5:7f:
44:36:3d:ff:79:f4:bd:c0:48:3e:f5:9f:24:a9:e3:ac:2b:bb:
c1:29:31:51:a8:c8:cd:de:98:e2:4e:cd:44:10:4a:6b:58:b2:
cf:5a:57:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 10:15:02 2024 by rpki-client on console-ams.rpki-client.org