Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ad7ca106-d1ce-409d-a6b0-ff1e8114b81b.roa
File: ad7ca106-d1ce-409d-a6b0-ff1e8114b81b.roa (raw, json)
Hash identifier: iRdPj4rJYVqDbQwpHrBXExS2vTyXAFaQWG3xfU1eGlQ=
Subject key identifier: 79:9E:01:18:99:F8:E8:44:04:EB:8F:2B:36:C2:4E:80:EC:EC:36:84
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 47D1D5A16E95891CF797C0A5199E02257F0D625E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ad7ca106-d1ce-409d-a6b0-ff1e8114b81b.roa
Signing time: Mon 01 Jul 2024 00:00:00 +0000
ROA not before: Mon 01 Jul 2024 00:00:00 +0000
ROA not after: Mon 05 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 13:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:d1:d5:a1:6e:95:89:1c:f7:97:c0:a5:19:9e:02:25:7f:0d:62:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 1 00:00:00 2024 GMT
Not After : Aug 5 23:59:59 2024 GMT
Subject: serialNumber=91f16f87ca870714728703d4c38892fb8108c82f40eb367cd659f7e4737e1a78, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:79:a6:1a:f6:7b:00:51:df:51:cc:a4:e2:
d8:ea:a3:92:dc:68:33:bc:3e:f4:17:31:6a:7f:d6:
20:17:3b:99:02:61:f2:1e:ee:c1:9b:c0:b6:da:08:
48:42:cf:95:5a:2b:5b:05:fb:63:60:93:93:f7:ef:
e8:39:c1:5d:fd:50:3c:71:27:76:99:0b:83:18:a3:
c1:f7:ed:2d:2c:aa:36:74:29:53:fa:f1:bc:67:0c:
32:37:56:70:25:a8:33:d7:a9:aa:bd:85:ca:28:0a:
8a:8b:b5:75:50:a6:38:95:24:98:59:52:22:a4:4a:
43:b5:b4:51:e3:d9:09:f7:dd:21:01:f6:69:8f:00:
36:ec:9e:5b:c5:9b:d2:08:c8:0e:d3:d2:5d:fc:07:
28:1f:db:59:3e:15:6a:c5:e9:5f:d3:68:67:54:68:
dc:ba:4b:54:08:d0:db:8e:da:5d:34:16:e4:af:fa:
61:8f:5c:36:34:00:b5:2e:38:55:fb:83:9d:34:cc:
4e:d8:c6:5b:87:b1:5c:ee:c0:7e:43:4d:13:1f:b4:
9c:ed:49:b6:d5:47:77:3a:26:b7:e4:7a:c3:9e:64:
f1:42:91:45:68:e4:db:1f:72:3f:1f:04:d0:38:d3:
55:8e:f8:88:c3:b2:1f:66:12:bf:6f:6f:eb:2a:78:
b6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9E:01:18:99:F8:E8:44:04:EB:8F:2B:36:C2:4E:80:EC:EC:36:84
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ad7ca106-d1ce-409d-a6b0-ff1e8114b81b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:49:97:1e:9a:ed:8a:12:c8:ed:ef:0b:76:d5:45:75:0c:32:
e3:64:58:78:db:e4:88:9a:80:1b:a9:90:a8:03:ea:93:78:a0:
0f:74:0f:10:7c:5f:2b:95:7f:c0:ba:86:08:ff:48:dc:41:35:
c2:e9:cc:1e:62:13:bd:94:1a:26:2d:7f:08:59:57:46:c0:0f:
85:f8:c6:57:24:ec:64:28:12:e3:27:f7:9a:14:81:86:cf:3a:
62:2b:92:67:29:c8:41:d6:80:bd:f0:10:c7:0c:53:21:63:32:
33:84:5d:71:ce:66:27:75:00:f4:3f:dd:8d:55:0f:08:f6:d4:
6c:33:38:42:33:11:0a:50:1f:d5:97:69:6c:17:a0:3b:c4:e5:
ce:88:9f:ca:11:71:98:d0:2d:8b:12:21:e9:13:60:b9:62:bf:
19:62:c4:0c:73:66:6c:ee:8b:9d:ea:a1:b5:db:d6:14:35:74:
e8:08:3d:92:0d:41:be:50:c3:b1:4c:24:0c:eb:9c:ca:a7:fe:
16:d8:fa:be:e7:f8:2a:42:69:6d:5f:c3:d2:14:b1:d3:5a:f5:
9b:9e:db:2d:38:9b:6a:82:c8:f2:bf:66:c8:b5:81:ba:dd:88:
ab:3e:ae:dd:0d:c7:6c:e1:cc:1f:2e:37:3a:45:11:1b:fc:55:
8c:ea:16:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:21:26 2024 by rpki-client on console-ams.rpki-client.org