Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/be3bdf23-2750-4ab8-a74c-1387f0a631d4.roa
File: be3bdf23-2750-4ab8-a74c-1387f0a631d4.roa (raw, json)
Hash identifier: QUTIs2omDVpUbOWiOYhXFZlJVzvNUfP/Mc2TXXQa4NI=
Subject key identifier: DB:48:19:44:8F:11:0B:B2:3D:49:3E:15:86:48:D6:5E:B0:82:94:C4
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 567DA25278CE4676A6294EC4D75F9D8FA24801FC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/be3bdf23-2750-4ab8-a74c-1387f0a631d4.roa
Signing time: Fri 08 Nov 2024 00:00:00 +0000
ROA not before: Fri 08 Nov 2024 00:00:00 +0000
ROA not after: Fri 13 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 20:18:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:7d:a2:52:78:ce:46:76:a6:29:4e:c4:d7:5f:9d:8f:a2:48:01:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 8 00:00:00 2024 GMT
Not After : Dec 13 23:59:59 2024 GMT
Subject: serialNumber=9680a05f0f9e8a11c1a53931d734341814b54cfab3ec3425f4d112acec21c00a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:3e:61:0c:7a:d7:34:f7:48:4a:5a:97:65:
e6:a9:7e:41:75:55:d0:41:26:51:18:ad:9b:d4:4e:
74:59:4a:88:7e:ec:75:5c:5d:2b:5f:fc:38:72:e8:
92:75:39:f8:70:73:ec:d6:81:3c:86:d3:7e:3b:e3:
ec:46:06:45:04:2b:4d:13:26:f6:3d:cc:f0:47:78:
f1:cd:39:79:d5:22:f2:04:9a:ac:69:5f:f5:30:c4:
c4:7e:ac:aa:1f:4c:64:ed:27:2a:f5:53:ea:f2:47:
83:25:2a:01:10:b8:0a:a5:6d:dc:96:40:c1:48:38:
a0:ad:71:f7:f2:73:ce:c1:60:08:7b:a4:55:b6:9a:
54:20:b0:d3:01:0e:ff:88:c8:ed:9f:a4:a4:f3:67:
19:99:56:3f:eb:ba:47:98:c9:0b:5c:a3:e1:19:e6:
40:3a:0e:a0:44:ca:93:27:79:33:44:de:3d:fe:a3:
52:03:7a:ee:26:1d:53:55:d0:44:0c:30:43:a7:0d:
8a:8b:23:db:d0:ef:c2:ee:c5:35:6d:31:3e:be:5f:
6d:fd:12:9e:ad:c3:c1:df:95:5a:0a:1a:d8:40:4d:
20:0d:a4:ec:81:bd:7a:36:69:cc:49:f2:ed:4e:54:
41:da:05:66:d8:de:d2:47:6e:b4:a9:af:5a:57:21:
82:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:48:19:44:8F:11:0B:B2:3D:49:3E:15:86:48:D6:5E:B0:82:94:C4
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/be3bdf23-2750-4ab8-a74c-1387f0a631d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:94:f1:b4:83:88:d6:2d:60:5a:7a:a8:d8:da:51:6a:e7:e4:
4e:db:44:9c:27:af:4c:13:f8:d2:1e:66:e9:2c:e1:7c:89:9b:
74:5d:b8:0f:9c:6a:93:e5:a4:a2:6b:81:74:33:ee:25:c5:25:
ba:bd:3d:2b:cd:66:09:1e:8a:0c:c2:b6:04:c8:a4:a1:90:59:
28:dc:41:46:2d:5b:80:60:dc:41:38:ee:88:08:b6:d1:aa:23:
93:d8:68:36:9c:01:fb:ea:e3:b2:41:a6:3c:f9:f6:ff:6f:55:
e8:2d:c2:a2:d9:f2:4c:20:e1:8c:c4:f3:06:1b:6d:17:bd:e5:
56:73:1b:99:12:1f:41:99:16:ab:94:cb:49:40:48:77:96:db:
6a:ef:1d:de:13:2b:9e:a3:49:51:6b:16:b2:43:8b:f1:35:95:
4f:58:21:50:2e:43:41:ed:68:0e:dd:14:69:24:fa:08:f7:25:
68:9c:50:54:16:10:c5:16:bb:85:a5:5e:51:9f:06:e4:9c:7b:
c1:9d:39:1e:af:bf:b7:09:58:89:6b:2c:60:80:b1:6e:3a:4d:
4b:5d:77:c6:47:2e:31:0c:28:a7:85:12:53:f7:64:e6:4d:89:
34:b1:6c:8a:34:48:d1:13:65:c1:50:18:fc:e4:f7:2f:83:d8:
30:8a:d7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 23:55:50 2024 by rpki-client on console-ams.rpki-client.org