Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b545d8a3-1e3d-4d5a-93c9-4a49c7e4f8df.roa
File: b545d8a3-1e3d-4d5a-93c9-4a49c7e4f8df.roa (raw, json)
Hash identifier: xLQogXluygcmaoudZrM024/hZpL/CzNms6nsGJBl4qQ=
Subject key identifier: F1:66:4C:00:EF:E0:E7:2D:E4:54:7D:19:E7:5B:2B:28:6F:21:B8:FE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3691A4C20F59F6603928D02E06A131177F09ADC6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b545d8a3-1e3d-4d5a-93c9-4a49c7e4f8df.roa
Signing time: Mon 05 Aug 2024 00:00:00 +0000
ROA not before: Mon 05 Aug 2024 00:00:00 +0000
ROA not after: Mon 09 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Aug 2024 14:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:91:a4:c2:0f:59:f6:60:39:28:d0:2e:06:a1:31:17:7f:09:ad:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 5 00:00:00 2024 GMT
Not After : Sep 9 23:59:59 2024 GMT
Subject: serialNumber=4cb8a9f6d4ca0be70eca79d69f8383703bc2a9d18ccd6fb14197195656d5ebf8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:95:80:3a:18:71:cb:fd:e3:df:33:fa:36:eb:
cc:b9:e6:b9:fd:74:a1:79:35:e0:ed:65:c1:07:3a:
06:a6:dd:cd:62:18:c5:8d:06:19:e9:52:97:2a:f7:
01:e3:97:d0:85:25:b8:72:a6:49:13:d4:aa:3f:03:
06:39:ca:12:b7:6d:1a:d3:54:55:5a:49:fb:33:68:
b3:00:26:c3:6c:f6:82:d5:4e:88:82:3a:8b:ca:a4:
35:5a:36:83:c4:9f:08:99:37:f2:24:c9:43:6b:65:
80:59:8a:2b:61:86:f8:b9:ea:57:cf:d8:b7:7c:06:
48:23:25:88:e8:1e:81:63:37:12:ff:d1:cb:16:71:
6a:e2:dc:95:b3:87:4d:be:b5:a3:50:ce:dc:df:9c:
04:0e:84:4a:1d:69:94:41:09:f3:8a:01:01:9d:70:
b3:1d:eb:22:78:54:87:4b:3b:f8:52:3c:87:2d:91:
35:b6:f8:ea:08:de:91:60:c7:3e:1d:88:01:f5:40:
f0:52:1b:35:28:2f:1e:89:2f:e6:9b:62:48:19:ac:
40:ff:64:fd:66:be:3a:f4:2e:be:a8:79:ba:3f:26:
4c:ff:e7:18:d4:b0:df:0c:5b:e9:16:2b:85:ca:9e:
b4:bd:fa:9a:e7:ff:2f:c6:89:42:0e:14:e2:d3:d4:
ec:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:66:4C:00:EF:E0:E7:2D:E4:54:7D:19:E7:5B:2B:28:6F:21:B8:FE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b545d8a3-1e3d-4d5a-93c9-4a49c7e4f8df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
86:b2:c9:2e:b8:49:9a:b7:4f:f5:45:f1:f9:37:99:6d:25:78:
e1:04:f5:bf:98:76:f2:0f:8e:4d:79:ff:9c:e8:7f:4e:86:50:
03:f3:02:97:a4:18:72:06:46:84:a4:29:bb:11:db:fe:64:85:
0f:33:49:f8:71:f9:9b:db:14:be:ac:4e:9c:5a:cf:79:de:52:
e2:64:ee:41:c7:a5:71:8b:28:60:26:42:36:89:7a:c9:8a:d6:
17:1b:45:87:ae:33:47:8b:c1:99:5a:1f:9b:23:a7:f0:db:be:
a8:b0:5b:76:f9:c8:01:34:ff:54:52:bd:70:1c:e7:70:a8:7b:
89:c1:e0:62:bb:42:b8:4e:84:2b:f4:c7:6e:ab:b4:59:8f:7a:
06:b3:f7:f7:8d:47:d9:8b:dd:bc:50:6a:0f:6f:9b:7e:51:2a:
bd:64:99:b8:86:92:b9:8c:8e:eb:eb:a7:8f:e4:d5:0a:ca:fa:
64:a6:f6:8f:30:db:30:f3:7a:f9:7a:5b:f3:60:cc:b2:a0:00:
95:71:af:9c:74:2e:ff:f0:99:d2:a4:e8:74:58:c8:94:80:a0:
a8:02:4f:4b:c3:f7:25:d6:19:52:33:5d:8d:79:11:6c:55:06:
34:51:a2:ce:a7:0b:38:1f:db:a3:d4:4d:8e:df:0a:a0:94:b5:
19:60:af:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 17:11:46 2024 by rpki-client on console-fra.rpki-client.org