Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aee2d31a-7210-454f-8b43-cae7de4ef83c.roa
File: aee2d31a-7210-454f-8b43-cae7de4ef83c.roa (raw, json)
Hash identifier: Wzqnvnl4z+xytLlQLQbmjzM+O2M1kSPjnWxet44yE8A=
Subject key identifier: 23:E0:F3:FE:19:8D:4E:F4:05:37:06:B8:7A:AA:2D:BE:26:6D:F1:37
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 43E68BFFE78393F10F5C2E09EE309EDCE218CF7C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aee2d31a-7210-454f-8b43-cae7de4ef83c.roa
Signing time: Sat 04 May 2024 00:00:00 +0000
ROA not before: Sat 04 May 2024 00:00:00 +0000
ROA not after: Sat 08 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 May 2024 13:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:e6:8b:ff:e7:83:93:f1:0f:5c:2e:09:ee:30:9e:dc:e2:18:cf:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 4 00:00:00 2024 GMT
Not After : Jun 8 23:59:59 2024 GMT
Subject: serialNumber=3fac3a6948d218d499ce9d9860f83fbb9c9f5f3be9b323c63edfb33f5ae368ec, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6d:f9:68:ed:e4:5b:bf:35:ee:1c:99:66:67:
bf:90:af:ce:c1:57:21:68:80:7b:c7:9c:12:f0:51:
cc:07:86:68:03:e7:85:0d:a3:1b:19:98:59:77:fd:
67:e6:d6:cc:81:4e:84:0a:91:2f:e9:0b:77:83:f2:
4f:94:0c:8e:6d:3c:f7:78:53:41:39:b7:b9:dc:5c:
3f:f7:5b:64:85:12:6d:10:b2:41:e0:8b:44:a7:bb:
9d:75:ef:a7:1c:fd:4b:d4:a1:90:ce:66:7b:29:d1:
2b:1e:3f:44:b5:ef:85:62:6c:da:9a:08:be:52:b9:
8d:3c:95:4a:b4:c9:88:b6:4e:6d:8e:d8:42:2b:f5:
1a:1a:ca:c5:83:6b:1a:1c:02:e6:3a:30:e3:8a:c4:
55:b8:46:43:95:3d:18:3f:1c:3e:d6:17:10:b6:8a:
b1:82:80:b8:fc:e9:8c:5a:46:c0:37:3a:e4:54:85:
5a:7e:70:f0:05:5e:b0:11:a5:14:dc:3e:c5:85:73:
2c:1c:5e:51:f3:97:3e:19:30:90:9d:e7:44:d2:86:
72:0f:b8:21:ee:c9:13:13:88:eb:40:9d:03:71:78:
3e:db:2e:97:cf:24:04:92:87:86:71:aa:0e:0f:88:
de:dc:a2:1b:6d:0d:97:fc:4c:02:18:96:6f:29:9e:
d4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E0:F3:FE:19:8D:4E:F4:05:37:06:B8:7A:AA:2D:BE:26:6D:F1:37
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aee2d31a-7210-454f-8b43-cae7de4ef83c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
14:bd:d2:c5:86:c7:21:cb:1b:29:f0:75:e7:f0:5e:7b:a4:25:
c5:88:47:eb:1d:7d:8f:42:08:96:5f:d4:b1:a1:67:7f:ce:0b:
e4:64:d2:ac:17:c0:22:cf:5e:db:70:71:d5:01:11:8e:17:96:
74:62:2c:36:d1:ff:fd:bd:d3:8e:c3:69:22:de:ae:cf:e3:0f:
be:69:2f:9d:ef:13:a9:0a:89:15:4d:e2:25:ed:2d:47:5f:80:
9d:11:63:60:a8:6d:67:4d:11:d9:ed:69:e0:61:41:a9:38:d4:
3b:14:f4:22:e1:e3:fa:59:07:da:8d:ea:4d:7b:6f:3a:cc:30:
49:f3:3f:ad:d5:1b:b5:11:00:7d:64:99:38:af:45:42:ef:af:
e1:9a:82:18:07:41:59:22:41:56:8c:70:cb:16:15:47:87:c9:
3b:d4:cd:69:69:b6:0e:95:f2:fe:80:ba:f3:3a:c2:6a:30:bb:
af:db:d1:3b:fd:0e:89:16:f8:91:f9:02:da:7b:98:23:67:4f:
4c:a6:0e:ae:09:1e:72:b3:dd:54:f5:c1:0d:32:9b:fc:9d:23:
1f:75:1e:11:49:d0:3b:60:fa:b4:3e:f7:3a:92:12:81:a5:90:
52:47:1c:50:9e:70:98:d7:e1:c1:53:4c:ba:56:9f:19:3c:5c:
f4:c9:f0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:07 2024 by rpki-client on console-ams.rpki-client.org