Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a356f394-cf25-4677-a1fa-d9af8b083151.roa
File: a356f394-cf25-4677-a1fa-d9af8b083151.roa (raw, json)
Hash identifier: cjGbhyb+AT1hT+37S3UlLuRwKC6e7iH4EU5hfwx+K/o=
Subject key identifier: 21:DA:05:12:A7:7E:29:CF:1A:D4:FB:F0:05:7F:75:84:AA:36:52:FE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 69C35F86CE722DF7E693A1D78D30A829EBE7323C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a356f394-cf25-4677-a1fa-d9af8b083151.roa
Signing time: Wed 03 Jul 2024 00:00:00 +0000
ROA not before: Wed 03 Jul 2024 00:00:00 +0000
ROA not after: Wed 07 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jul 2024 09:08:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:c3:5f:86:ce:72:2d:f7:e6:93:a1:d7:8d:30:a8:29:eb:e7:32:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 3 00:00:00 2024 GMT
Not After : Aug 7 23:59:59 2024 GMT
Subject: serialNumber=f806de4a404ba0e466ace1fabbb4f22014b8b1c5f1e879129fc2af70da91c8af, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:61:85:9f:80:d1:71:5f:75:15:fe:c6:53:95:
09:01:b9:f0:69:09:03:96:a3:3a:5f:2d:f4:f9:48:
89:14:a9:c9:db:6f:a4:85:a9:bf:9e:51:d7:7b:f5:
b8:28:38:57:c6:2b:00:e7:a2:d2:87:af:02:ab:e8:
57:1f:a0:33:d5:79:c4:0b:ab:57:4e:72:29:03:95:
05:fc:95:cc:11:2d:a9:c2:67:58:93:b1:86:ad:11:
6d:e3:17:68:cb:49:cd:61:8e:15:e3:81:a0:7a:5e:
71:bc:0d:03:2e:28:49:f8:c7:f6:15:57:8c:b5:10:
c3:df:1d:06:0e:fa:2e:29:3a:62:6b:f6:49:90:63:
b4:e5:96:6f:e3:0c:10:5d:fc:6a:82:8a:83:96:1e:
9a:1e:00:03:75:45:9b:51:1e:3e:96:83:d1:6e:b3:
39:60:92:ca:81:38:3e:1c:9e:b0:c7:b2:f6:57:1c:
86:98:93:1a:c4:c9:10:a3:15:d3:f1:3a:dd:85:cd:
48:81:c5:bb:12:49:15:13:90:c8:c8:e4:4f:7e:0c:
69:01:8f:2e:83:c2:ef:e9:30:fa:81:81:0c:79:38:
b9:b3:78:60:e4:fd:e9:61:90:cd:7e:fd:5b:05:64:
4b:21:21:3c:8c:15:07:4c:c5:2c:12:86:3a:d3:b6:
aa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DA:05:12:A7:7E:29:CF:1A:D4:FB:F0:05:7F:75:84:AA:36:52:FE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a356f394-cf25-4677-a1fa-d9af8b083151.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:e4:4b:4c:b5:7c:92:be:16:65:cf:f1:35:8d:1d:91:f6:69:
60:bf:0f:a8:49:07:75:9d:ff:d1:11:4f:ac:9b:46:56:ab:50:
a7:fb:4f:4e:d3:c8:78:c2:4e:8d:0a:c7:3b:7f:4d:45:21:fb:
fc:99:e9:92:24:98:06:0b:72:69:ef:ec:19:da:0f:7b:21:84:
73:0a:03:a0:d3:1f:7e:7f:81:da:0b:1c:30:4a:33:2c:f6:bd:
ec:54:23:8d:75:98:df:35:6f:92:54:14:4b:40:2f:1e:0c:b8:
0f:b9:63:a9:bc:88:64:4f:55:a5:9c:14:1a:9f:19:bf:ac:ba:
c5:ba:f7:15:a3:21:f9:f3:29:71:7c:7d:d8:17:8c:ff:f8:69:
ed:67:f6:74:a6:54:66:d5:3f:f8:5c:83:b2:c8:93:79:a5:37:
44:44:ec:9b:a0:a6:44:c8:91:ce:8d:d5:15:f7:72:17:85:d3:
42:4f:b2:e6:aa:0d:67:fc:5f:5c:22:22:ed:16:ea:69:72:c2:
1d:bf:1c:06:d4:30:4a:90:75:d0:14:11:6e:b2:a0:4c:e0:a8:
9f:0a:88:a6:12:87:35:aa:2e:4b:da:a7:fe:7b:7c:b1:32:e1:
6b:df:46:d9:b2:17:07:5b:6d:17:35:24:6a:1f:cc:9a:86:89:
b5:69:9d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 11:06:33 2024 by rpki-client on console-fra.rpki-client.org