Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ba1bdedd-ec5f-4dd4-8406-d7614eb847da.roa
File: ba1bdedd-ec5f-4dd4-8406-d7614eb847da.roa (raw, json)
Hash identifier: UG6I6lsRg808JVd+ws8IUBJ0fVegi+mj2LchNfsJLiY=
Subject key identifier: E6:D8:D2:3D:E7:C0:8E:03:3D:BE:34:FA:D2:7E:9F:C7:50:29:E8:62
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7851762E2061B8082FFD9A1970200A7BE77560F2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ba1bdedd-ec5f-4dd4-8406-d7614eb847da.roa
Signing time: Sun 08 Sep 2024 00:00:00 +0000
ROA not before: Sun 08 Sep 2024 00:00:00 +0000
ROA not after: Sun 13 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Sep 2024 13:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:51:76:2e:20:61:b8:08:2f:fd:9a:19:70:20:0a:7b:e7:75:60:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 8 00:00:00 2024 GMT
Not After : Oct 13 23:59:59 2024 GMT
Subject: serialNumber=25389d31bd2c00c23fdd11cea8b926aa9db7b4ec7864594ccc3d06719affd075, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bf:cb:87:ca:e4:f7:aa:dc:06:9b:78:07:41:
68:16:fc:e2:b5:06:2d:3e:8b:b4:48:e5:c5:44:a6:
2b:32:6d:81:17:fd:89:69:b1:d3:5d:ca:d7:45:7d:
b8:e7:4e:d3:39:f3:cc:7a:14:1d:06:98:d2:90:0f:
76:45:d6:60:dc:9f:85:d9:c5:c9:15:6c:80:ea:79:
fe:32:81:72:35:b9:4b:46:d9:eb:50:ff:c7:ab:2e:
f2:13:e8:5a:4c:05:c4:33:55:a7:fd:65:06:0a:e2:
bf:c2:c7:5a:87:2a:20:b6:fb:36:63:d3:2b:da:72:
63:03:91:b3:a1:cb:57:a7:64:a0:aa:e9:a4:b8:6a:
2c:8e:f1:5a:34:86:c7:21:26:a5:ce:47:b0:2b:6e:
fb:73:3b:c5:df:af:c7:cf:dd:5c:eb:c1:07:ae:43:
1f:46:77:17:31:ee:5d:3f:b1:2c:b7:43:69:b6:46:
da:f8:e7:30:24:dd:76:f8:f4:f1:36:73:a4:51:b2:
64:c3:d7:fd:69:10:74:7d:e4:f0:13:81:2b:d0:19:
db:c4:2a:12:1a:58:f8:63:88:c5:ac:dc:55:af:19:
a5:b1:a9:3b:eb:9a:72:0e:76:16:03:ef:74:31:fb:
42:44:f1:58:f2:62:a0:26:9d:64:de:90:41:d0:c2:
2b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D8:D2:3D:E7:C0:8E:03:3D:BE:34:FA:D2:7E:9F:C7:50:29:E8:62
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ba1bdedd-ec5f-4dd4-8406-d7614eb847da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
89:d6:7b:70:2b:1b:96:24:8b:6c:c7:3d:61:6c:57:72:32:d2:
86:3c:f8:25:a7:8d:dc:e2:97:40:2e:a8:bc:5b:97:c1:62:c0:
e2:fb:1b:14:6f:0b:06:80:02:ac:6c:a3:c6:af:23:23:54:db:
22:40:be:5a:4a:66:98:40:4c:f6:cd:08:17:26:76:7e:4e:e4:
d5:6f:d2:92:82:cf:7f:22:3c:ff:16:f3:db:9c:03:2c:32:21:
13:0b:58:6f:60:a0:4d:3d:e9:e3:ef:1d:3b:47:34:e7:29:d1:
e9:62:a0:2f:ea:ae:64:c3:ee:ac:29:32:d4:42:e5:84:f5:7c:
21:6c:cf:47:d8:c1:2f:4f:63:5c:7d:5a:35:26:ea:b0:50:3b:
eb:9c:8b:86:0d:96:77:59:2a:dc:32:f0:0b:6e:c9:2c:b6:8c:
ee:30:fe:25:40:fd:9f:5a:18:58:36:5b:0b:d2:fe:a1:a1:89:
35:3d:71:db:97:df:a3:df:27:a1:d5:65:3d:29:98:88:d2:5d:
b2:83:8c:4a:11:a4:8b:06:da:c7:49:6e:6e:ad:f7:6a:83:67:
be:95:18:0b:0c:e1:2a:db:ee:b1:6c:1f:89:78:c1:5e:9f:39:
1c:e4:ef:1e:90:02:f0:02:ff:32:87:7c:be:1c:49:a8:72:91:
cc:fe:05:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 8 16:45:04 2024 by rpki-client on console-ams.rpki-client.org