Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c2385791-e510-4428-964a-fffe99ee0727.roa
File: c2385791-e510-4428-964a-fffe99ee0727.roa (raw, json)
Hash identifier: sKZpYXvt81LoZJG63ikxFLDJxnSNl1sHaOylrpuNlMQ=
Subject key identifier: 31:3C:31:05:09:17:49:95:7C:BC:3D:15:95:10:29:2D:BB:F9:C5:CA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 06A958216422CAD2B16FB13B8C0170EDE6855E22
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c2385791-e510-4428-964a-fffe99ee0727.roa
Signing time: Sun 08 Sep 2024 00:00:00 +0000
ROA not before: Sun 08 Sep 2024 00:00:00 +0000
ROA not after: Sun 13 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Sep 2024 12:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:a9:58:21:64:22:ca:d2:b1:6f:b1:3b:8c:01:70:ed:e6:85:5e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 8 00:00:00 2024 GMT
Not After : Oct 13 23:59:59 2024 GMT
Subject: serialNumber=8a08dd55e1eacddaadb7dc497178d74e6b52c77d4a5effdb6b52c42c39050d40, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b2:c8:b9:f3:c1:1c:2f:a3:e0:d8:29:10:e4:
c5:ea:49:d1:84:c7:0a:8a:74:28:18:f4:d9:ac:cc:
6b:ff:46:2b:5e:68:0d:58:72:6f:85:73:28:ce:57:
5a:c6:af:cc:00:92:81:38:2b:4c:44:8f:ba:26:76:
d3:96:f9:49:48:bb:a6:4f:44:54:4a:4b:cb:66:74:
1b:60:7b:34:30:fe:7d:1a:73:ec:16:86:1e:d6:39:
55:03:c5:f4:46:ae:a7:82:b7:ea:1b:df:41:ed:0d:
c1:af:fc:71:19:ba:f7:ed:59:e2:92:0f:9b:e7:f7:
21:3d:e5:55:72:b2:1e:77:0f:0f:6b:38:8c:e5:d3:
06:61:d7:3b:5e:6e:2c:31:14:41:4e:a0:c2:4f:5c:
c1:b9:1e:be:57:63:6d:ef:12:36:d4:16:51:23:6f:
47:6e:ea:49:16:38:04:a5:9b:28:7e:05:d3:81:46:
92:43:e4:c8:49:ce:b6:67:a6:61:31:68:55:a8:e3:
6e:98:14:ea:d0:ee:3e:00:d0:94:2e:61:99:67:aa:
02:07:24:f5:dc:d2:c8:81:45:ea:47:e4:e0:07:0c:
e4:35:1c:06:a0:10:ac:f0:e3:d0:c3:26:da:84:30:
ee:9c:90:08:d0:77:28:92:4a:1a:04:b9:d9:45:0b:
cb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3C:31:05:09:17:49:95:7C:BC:3D:15:95:10:29:2D:BB:F9:C5:CA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c2385791-e510-4428-964a-fffe99ee0727.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
26:d7:6e:cf:da:a8:8c:03:1f:6c:8f:5e:ce:cf:bd:af:5a:be:
86:9b:ae:44:a1:b5:03:36:68:e3:e8:f2:03:7b:e4:2a:ff:96:
6a:f7:f7:78:c9:18:ae:95:61:df:96:9c:b7:bd:ae:ba:2e:4f:
dd:22:49:29:6d:01:7e:b5:70:aa:78:fc:0a:2f:59:29:5a:48:
4c:12:c6:b8:9a:33:61:a9:7b:24:44:39:6c:6e:d2:2d:d4:f4:
bd:6b:4f:6e:b6:2d:12:fd:79:75:c8:00:9e:54:a8:9d:c4:fa:
af:04:37:b1:f2:b3:d5:38:b2:ac:a1:33:bf:0c:9a:f9:8b:a8:
bc:b5:7c:c6:a1:29:4f:b3:c3:74:78:07:b5:6b:13:bf:20:9a:
3b:a4:bb:33:a1:10:85:6d:1c:b1:8c:81:22:f9:1f:29:1d:c4:
87:c8:92:15:b4:b8:d9:2a:16:86:8c:86:6f:79:63:2e:17:0c:
43:15:d2:84:07:ad:ab:85:b5:92:b8:71:fd:44:4b:97:25:3b:
81:f1:99:74:8a:2e:ba:36:31:f4:8c:5b:64:02:bd:d0:8f:f3:
8f:ae:e0:6f:aa:92:82:05:82:cd:9d:ee:e5:62:78:81:cf:85:
83:af:ff:e4:f6:52:b6:0b:8b:81:42:85:40:03:8d:5e:c3:b3:
26:35:9d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 8 14:15:36 2024 by rpki-client on console-ams.rpki-client.org