Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c554808e-6072-49f9-96a6-b7486b295e52.roa
File: c554808e-6072-49f9-96a6-b7486b295e52.roa (raw, json)
Hash identifier: MVIUsmr9zBUYEViPlNOlpAw78dZs8Kjm7fD1XMhgLuk=
Subject key identifier: C7:AB:34:CD:AE:15:04:D6:76:0D:41:58:3D:51:38:B8:81:99:18:56
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 12EB2E55884BD0E5CAF1666402EF2D4EB7D9D532
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c554808e-6072-49f9-96a6-b7486b295e52.roa
Signing time: Fri 05 Jul 2024 00:00:00 +0000
ROA not before: Fri 05 Jul 2024 00:00:00 +0000
ROA not after: Fri 09 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 07:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:eb:2e:55:88:4b:d0:e5:ca:f1:66:64:02:ef:2d:4e:b7:d9:d5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 5 00:00:00 2024 GMT
Not After : Aug 9 23:59:59 2024 GMT
Subject: serialNumber=0e283a085d87be2ee6d4cbb7e86883835a18156c8eb21688ea5252c882b751e8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:01:de:c2:d3:1b:0f:65:da:fd:ca:84:25:
c8:89:ec:b1:08:7f:df:eb:bc:f3:22:dd:76:45:fa:
31:4e:e6:cc:11:50:ec:48:95:09:1c:26:f2:f6:81:
b7:43:51:4a:b2:63:1a:d8:dd:e6:8d:b2:1c:74:c9:
65:af:a3:32:1c:16:9a:44:b7:e9:f8:d7:ed:26:8e:
b7:59:8b:6f:0d:da:ad:ba:12:e8:d3:f5:11:16:d8:
1c:e8:26:8c:5a:fe:27:84:6c:5d:26:36:cf:1d:78:
0f:4d:59:60:7f:fd:ad:a2:61:87:a0:0a:d2:15:fe:
41:87:e2:5b:6e:82:e5:71:cf:a3:3c:15:d5:f3:48:
1e:9d:82:02:99:d7:9d:cc:13:04:63:86:1b:24:8a:
cf:89:36:db:e4:f3:58:dc:a5:6f:94:c1:b4:cd:91:
d7:20:2f:a8:e7:ca:dc:10:de:ac:99:f5:e2:3d:46:
d3:b1:ab:34:5c:b2:3f:18:b8:ad:c5:d4:a7:87:15:
e9:a0:95:f2:db:fa:63:0a:16:e8:b2:33:ca:89:cf:
bf:7f:18:2e:c5:47:80:af:ad:14:a8:90:0e:bd:68:
50:9a:04:84:13:6b:66:fa:cb:07:db:77:cb:c1:9a:
39:a9:fb:65:a6:2c:64:5b:11:a0:64:55:b3:35:14:
76:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AB:34:CD:AE:15:04:D6:76:0D:41:58:3D:51:38:B8:81:99:18:56
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c554808e-6072-49f9-96a6-b7486b295e52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:1c:5a:e6:81:b5:14:ac:45:90:12:67:17:74:1b:ed:18:8d:
53:f3:50:be:5d:d4:fc:1a:31:70:f5:75:be:9c:43:94:2f:79:
97:87:40:ef:79:de:a4:7d:6d:44:79:b3:c5:2b:2b:d3:c0:6f:
51:9f:fb:00:bd:e4:84:85:b4:bd:ee:49:86:b0:a1:bf:a8:d5:
a3:c9:c7:e4:4b:a8:98:a7:82:76:4e:3f:ae:ed:a6:ea:fe:10:
80:0d:9b:84:48:8f:2a:82:6c:6e:7b:f0:07:86:22:9a:0c:70:
70:79:25:50:42:8b:f5:46:50:16:9c:35:f9:b4:3e:60:fa:0c:
37:c7:07:c9:b4:8c:8e:75:4a:61:10:c8:ce:5d:24:0f:da:4b:
94:76:39:51:51:99:21:f3:3b:a9:63:cf:44:91:b5:88:48:93:
2e:3f:ab:0d:0a:22:12:97:a5:c0:ce:b9:37:4d:b4:94:3b:d1:
5c:2a:de:66:26:26:3f:c3:60:fc:3d:31:b5:0b:79:95:20:ba:
a9:1c:af:a4:4b:f3:c2:a7:49:af:b9:9c:94:d2:6d:8c:35:58:
ec:91:bd:87:aa:52:92:58:de:73:ea:4d:09:47:ba:0a:5a:2f:
42:86:93:42:1a:e7:47:db:7d:6f:da:8f:3e:c4:6d:80:90:63:
70:dc:8e:20
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEusuVYhL0OXK8WZkAu8tTrfZ1TIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNzA1MDAwMDAwWhcNMjQwODA5MjM1OTU5
WjB6MUkwRwYDVQQFE0AwZTI4M2EwODVkODdiZTJlZTZkNGNiYjdlODY4ODM4MzVh
MTgxNTZjOGViMjE2ODhlYTUyNTJjODgyYjc1MWU4MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxdQHewtMbD2Xa/cqEJciJ7LEIf9/rvPMi3XZF+jFO5swR
UOxIlQkcJvL2gbdDUUqyYxrY3eaNshx0yWWvozIcFppEt+n41+0mjrdZi28N2q26
EujT9REW2BzoJoxa/ieEbF0mNs8deA9NWWB//a2iYYegCtIV/kGH4ltuguVxz6M8
FdXzSB6dggKZ153MEwRjhhskis+JNtvk81jcpW+UwbTNkdcgL6jnytwQ3qyZ9eI9
RtOxqzRcsj8YuK3F1KeHFemglfLb+mMKFuiyM8qJz79/GC7FR4CvrRSokA69aFCa
BIQTa2b6ywfbd8vBmjmp+2WmLGRbEaBkVbM1FHbvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUx6s0za4VBNZ2DUFYPVE4uIGZGFYwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2M1NTQ4MDhlLTYwNzItNDlmOS05NmE2LWI3NDg2YjI5NWU1Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBALccWuaBtRSsRZASZxd0G+0YjVPz
UL5d1PwaMXD1db6cQ5QveZeHQO953qR9bUR5s8UrK9PAb1Gf+wC95ISFtL3uSYaw
ob+o1aPJx+RLqJingnZOP67tpur+EIANm4RIjyqCbG578AeGIpoMcHB5JVBCi/VG
UBacNfm0PmD6DDfHB8m0jI51SmEQyM5dJA/aS5R2OVFRmSHzO6ljz0SRtYhIky4/
qw0KIhKXpcDOuTdNtJQ70Vwq3mYmJj/DYPw9MbULeZUguqkcr6RL88KnSa+5nJTS
bYw1WOyRvYeqUpJY3nPqTQlHugpaL0KGk0Ia50fbfW/ajz7EbYCQY3DcjiA=
-----END CERTIFICATE-----
Generated at Fri Jul 5 09:04:45 2024 by rpki-client on console-ams.rpki-client.org