Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a7854b35-7ded-468e-94ce-bec6dbcb2109.roa
File: a7854b35-7ded-468e-94ce-bec6dbcb2109.roa (raw, json)
Hash identifier: 0rFUJ2Bn1lH+r9PuL2LXl88qeT9b4R7HEy6sImZpX/4=
Subject key identifier: C9:2C:D7:F7:20:43:29:1B:D8:FC:3D:59:A3:3F:77:F2:1D:6B:5E:3E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0101730981DF68A325C3F9DE38CA82C90FBB2FCA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a7854b35-7ded-468e-94ce-bec6dbcb2109.roa
Signing time: Fri 04 Oct 2024 00:00:00 +0000
ROA not before: Fri 04 Oct 2024 00:00:00 +0000
ROA not after: Fri 08 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Oct 2024 23:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:01:73:09:81:df:68:a3:25:c3:f9:de:38:ca:82:c9:0f:bb:2f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 4 00:00:00 2024 GMT
Not After : Nov 8 23:59:59 2024 GMT
Subject: serialNumber=7dd2adc55e08cffdceaba068db4c3ca17039e245c0b8d5c9f541743cfb8f1981, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2b:ca:e8:66:34:00:d7:bd:b3:96:5a:c5:27:
07:1d:e1:af:41:da:7f:59:31:e4:c2:da:65:f4:58:
33:d1:8f:f7:10:cb:2e:51:f8:db:cd:58:69:0f:7b:
8e:fb:03:d9:2e:eb:2d:4f:24:49:3f:5d:6b:bc:46:
15:27:6a:8a:68:74:5f:cb:52:8e:73:de:ac:62:d4:
00:95:8a:8c:11:ea:40:04:28:0d:85:1d:74:45:ce:
c5:cb:66:62:e8:6e:8d:38:e7:48:9d:d5:b3:1c:bd:
5c:13:72:5e:cb:98:bb:43:18:1f:6b:32:96:a3:cc:
79:fc:a2:ce:6e:52:fa:28:4e:ff:3d:75:e0:c4:f5:
c3:9d:99:d9:3e:ac:ed:e2:76:2e:03:75:79:b7:76:
28:3b:a3:8b:0b:a9:61:a4:b4:b3:3a:0b:93:8a:ac:
63:79:1a:c9:b8:a5:35:42:6d:72:d5:d1:f5:79:bf:
02:fb:6c:8b:a9:72:85:63:a6:06:58:7e:bf:46:e2:
33:aa:18:2f:88:bb:2c:0d:99:a4:85:f2:d7:e9:a7:
14:8d:57:30:01:a2:f3:b8:7b:43:75:b8:b2:33:d2:
58:d4:5d:78:96:24:19:41:2f:6d:ad:08:82:fa:86:
c9:15:40:23:e9:8b:3b:5d:8e:c6:d6:6d:ae:76:33:
bf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2C:D7:F7:20:43:29:1B:D8:FC:3D:59:A3:3F:77:F2:1D:6B:5E:3E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a7854b35-7ded-468e-94ce-bec6dbcb2109.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:b6:3f:f9:c2:5e:ea:c7:44:ae:a3:a1:d9:42:a7:4c:4d:dc:
cc:af:8f:a1:66:c0:91:37:2e:1b:86:d8:35:2b:42:dc:60:d9:
b8:47:43:53:0a:a7:24:ac:28:50:9c:5b:0a:4e:f2:dd:b5:7c:
3b:ee:03:f0:d7:43:72:91:8b:0e:e4:0f:ff:f3:51:cf:53:74:
06:c2:6b:d0:44:63:cb:90:e4:d1:1b:a2:7c:f3:f2:2e:5d:f8:
03:ad:0e:e4:82:20:c1:1d:28:15:a2:bf:77:75:d1:c0:48:23:
b7:32:fb:16:fd:11:f2:59:69:4a:ca:b1:c4:34:9b:81:e4:54:
ac:3e:63:3c:b1:cb:13:2e:e4:69:cd:a9:32:3a:be:f7:1f:0d:
f4:6f:e3:ba:6a:10:c7:2a:c2:e3:2e:bc:7a:ab:4c:02:44:49:
54:cc:c7:2f:c8:52:d8:e0:ed:61:c2:f2:26:c8:a6:28:73:38:
ec:40:65:1e:d9:56:24:62:fb:08:ab:fe:0f:42:83:b5:46:7c:
16:79:3d:22:88:90:43:17:e8:2e:0c:77:f8:5c:3f:4e:44:de:
bb:4f:27:2f:03:18:91:0a:d6:9b:ea:a7:fa:eb:80:79:4c:22:
00:08:32:d6:1f:3b:ab:b3:82:ef:e0:e5:97:59:95:8a:dd:b7:
66:f3:7c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 04:02:51 2024 by rpki-client on console-ams.rpki-client.org