Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c02a585b-4f4a-45da-b660-d334f160d4be.roa
File: c02a585b-4f4a-45da-b660-d334f160d4be.roa (raw, json)
Hash identifier: MQN6WFZJFgsTUJf2q1rDcu0FnZQIs3G2UIkLXsBGRIc=
Subject key identifier: 75:65:44:16:76:B1:9C:45:6B:95:BD:30:BC:A2:5A:89:64:03:C7:92
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 33D0DDD0A61740A177BCCE7E27D51ACDE587F181
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c02a585b-4f4a-45da-b660-d334f160d4be.roa
Signing time: Tue 09 Jul 2024 00:00:00 +0000
ROA not before: Tue 09 Jul 2024 00:00:00 +0000
ROA not after: Tue 13 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jul 2024 21:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d0:dd:d0:a6:17:40:a1:77:bc:ce:7e:27:d5:1a:cd:e5:87:f1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 9 00:00:00 2024 GMT
Not After : Aug 13 23:59:59 2024 GMT
Subject: serialNumber=37f963d684abf5bc8235893b29a66a153790aad1c41bb02bf74092f834422714, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b3:47:3a:eb:25:00:25:af:66:62:0a:ed:48:
4f:2a:de:79:8e:ff:c4:39:3e:2b:9b:7b:ff:c0:ee:
56:ac:5b:1f:40:71:8a:b5:58:bc:82:a1:23:51:99:
50:bb:e4:5f:00:f3:82:1c:07:61:b1:8d:da:1e:34:
1b:e9:e0:01:d3:9b:be:8c:ba:52:1d:60:50:e4:e2:
11:5d:d1:3a:0e:76:68:85:f4:a4:04:26:7e:a8:32:
a8:eb:4a:53:a6:e4:4d:35:38:5e:13:1f:8a:b8:15:
a2:88:8c:7c:ac:04:83:e8:52:c2:24:35:ee:08:d6:
25:43:7d:75:ad:a5:eb:e9:de:5e:5c:f8:3d:af:c4:
7e:da:fa:a4:1c:5f:df:6e:13:63:4b:af:56:e6:34:
6c:f7:65:e8:92:2c:e4:2d:52:fd:e0:bd:57:3a:89:
2b:78:b2:86:96:f3:1f:91:69:28:1e:53:43:d4:79:
74:ca:a2:17:8e:6c:6f:14:11:aa:13:45:36:9b:ea:
c0:35:c9:d6:f4:f9:d4:d2:d5:07:68:76:eb:40:6d:
03:31:24:d3:5f:48:4e:02:d0:40:10:81:09:1a:a5:
cb:8a:da:58:e1:5d:a1:0b:7d:4f:5c:cc:2d:34:7b:
12:0f:0c:1c:e3:5f:d1:93:c2:8d:d2:48:d8:49:8b:
d7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:65:44:16:76:B1:9C:45:6B:95:BD:30:BC:A2:5A:89:64:03:C7:92
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c02a585b-4f4a-45da-b660-d334f160d4be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ae:9a:37:d8:10:c9:66:f5:c3:7f:99:99:8c:bc:3c:b5:80:
b6:ac:3a:10:87:e7:55:9b:9d:65:86:a1:f9:86:2f:3e:cb:51:
86:7b:4a:5d:91:9c:c3:fe:9f:33:0e:b9:20:49:49:21:fc:10:
84:e9:13:b5:d0:be:70:4d:79:a2:b9:e7:20:38:da:21:3b:73:
82:14:de:6c:51:a7:80:24:0f:05:9f:1c:2b:f3:fd:65:4f:aa:
ed:4b:22:1b:98:72:0c:71:d6:6a:d5:27:ad:03:5f:ba:be:d9:
8a:92:85:35:a5:cb:31:2d:9d:65:68:7b:c0:19:28:93:39:10:
7a:5a:c4:b8:6c:cf:23:a1:f5:e2:33:fd:17:c2:08:04:4b:cf:
cb:50:32:cd:9f:73:d5:44:08:dc:9f:02:12:a7:de:4c:61:8f:
32:08:a3:60:ed:de:4c:66:f3:2f:78:8f:74:6d:25:dd:44:eb:
21:3a:3d:6b:2d:a7:cc:c3:c8:d6:c4:d5:e2:46:ae:09:3a:d4:
db:58:17:92:48:51:ad:66:a0:59:3c:3e:6e:ab:41:11:27:44:
1e:8d:8a:f4:f9:25:f9:cc:c1:c0:cb:6a:99:5c:36:ef:15:b8:
1c:64:7d:4d:11:8a:da:4d:f2:ab:44:ce:82:5b:eb:0d:c5:6c:
20:06:cd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 23:11:36 2024 by rpki-client on console-fra.rpki-client.org