Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b9c010b8-0201-4663-8c04-194e76112feb.roa
File: b9c010b8-0201-4663-8c04-194e76112feb.roa (raw, json)
Hash identifier: QN0VxpF/cF60FmCvsZIi6zSIkwHMWX41E9rG3F/ofXo=
Subject key identifier: 5B:41:13:DD:2E:5A:4F:94:04:90:DE:22:A2:3A:BA:23:6F:26:B7:10
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 32626E8D7C0A906EB10BB279D7D328B837DA76BB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b9c010b8-0201-4663-8c04-194e76112feb.roa
Signing time: Sun 30 Jun 2024 00:00:00 +0000
ROA not before: Sun 30 Jun 2024 00:00:00 +0000
ROA not after: Sun 04 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Jun 2024 12:38:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:62:6e:8d:7c:0a:90:6e:b1:0b:b2:79:d7:d3:28:b8:37:da:76:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 30 00:00:00 2024 GMT
Not After : Aug 4 23:59:59 2024 GMT
Subject: serialNumber=0febad8ef86c8da24f95fd878457285089245638b7111ebbb09729ed87cd44dc, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e2:17:20:bb:85:98:1c:b0:8d:a3:1f:5b:f8:
af:7c:eb:bd:cb:2e:87:47:70:67:f0:e1:58:30:a2:
75:ee:90:83:31:c6:ab:f2:a8:1c:be:25:77:8c:d8:
d8:03:c4:3a:ac:bf:cd:3c:df:e9:cd:fb:4c:ed:b0:
8b:e3:68:38:a5:b3:73:6e:aa:7d:79:8b:4a:3c:a6:
38:da:22:af:00:50:3e:3d:57:2d:32:5f:2d:d2:5e:
a3:07:4d:d8:fa:f3:01:bd:c8:a3:fe:69:8c:58:9f:
5a:e4:98:14:9b:94:7a:96:42:d8:38:a1:27:4c:60:
45:0c:38:28:9b:19:87:bd:e9:00:9d:6b:02:f5:74:
59:bb:1b:4f:3e:8b:94:d0:2e:56:3e:f9:84:ef:c3:
a7:fd:ca:f4:de:48:16:75:1d:de:ea:80:33:42:f7:
35:19:9b:26:49:3e:67:50:f4:51:06:76:ae:74:07:
32:f5:3d:4e:a6:27:46:93:e9:d0:30:0a:d7:54:f3:
db:8e:7e:43:59:40:8a:d1:b3:7c:9d:f6:a3:85:e3:
8b:df:a9:f3:ea:60:80:26:b2:cd:0d:cd:94:da:d1:
b8:06:67:3f:4c:6c:cd:d2:f1:0a:81:79:42:57:24:
b3:bd:3e:b5:bc:56:3a:8c:d2:0e:22:f2:1d:35:d8:
20:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:41:13:DD:2E:5A:4F:94:04:90:DE:22:A2:3A:BA:23:6F:26:B7:10
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b9c010b8-0201-4663-8c04-194e76112feb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
49:59:09:ff:e5:98:f2:58:09:23:7c:63:7f:dd:81:2f:fc:a6:
66:7b:15:da:87:6a:3f:92:6f:9a:ec:a6:1f:6e:e5:33:69:45:
75:fe:15:16:3f:36:5d:3b:3a:94:da:92:d0:63:1f:1f:a4:e4:
02:73:52:04:ce:21:fa:ec:b9:30:74:58:1b:5a:53:df:78:04:
9c:aa:fa:c4:32:e6:f4:62:d1:8d:79:f0:02:4d:ca:38:61:e2:
8f:e0:c7:33:eb:5f:87:07:da:74:9a:79:ec:1f:4e:67:ca:c2:
f2:b7:4e:0a:7c:65:b9:fa:b2:c5:27:0e:ed:8e:0f:b3:e1:06:
cb:2f:3f:67:99:97:1e:73:d8:de:a6:40:d7:a0:b5:27:ab:d4:
a2:c3:e3:ab:df:08:19:d4:b2:16:00:50:89:0b:fd:a9:06:25:
23:83:5f:e9:da:34:a7:2d:c4:4b:39:52:d1:09:b2:bc:3f:b1:
9f:2d:17:0e:ab:d4:78:98:6d:0a:0f:52:4f:60:d7:4a:36:af:
52:e8:7e:ca:3e:8b:44:be:94:1b:32:fc:e3:07:05:4c:5b:c0:
41:33:62:f9:4f:70:b5:1d:1a:2d:10:ff:8d:03:79:94:53:c8:
a8:a3:a6:f8:98:7d:71:0b:a7:d8:b6:8b:cc:2e:bb:c8:29:3c:
10:db:e9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 18:29:24 2024 by rpki-client on console-ams.rpki-client.org