Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c9affbdf-3525-439e-98ca-a871e01840fd.roa
File: c9affbdf-3525-439e-98ca-a871e01840fd.roa (raw, json)
Hash identifier: snEK2SQtn8TyFU7nuNq4weqjxCggVeKv0VWxoMeAhzg=
Subject key identifier: A7:FA:B5:EE:18:B5:1C:39:B5:6D:9B:D3:3A:77:8C:08:99:9F:05:F1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 512DCDE0F62FBC320BF270924C23D0396015184E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c9affbdf-3525-439e-98ca-a871e01840fd.roa
Signing time: Wed 02 Oct 2024 00:00:00 +0000
ROA not before: Wed 02 Oct 2024 00:00:00 +0000
ROA not after: Wed 06 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 09:34:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:2d:cd:e0:f6:2f:bc:32:0b:f2:70:92:4c:23:d0:39:60:15:18:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 2 00:00:00 2024 GMT
Not After : Nov 6 23:59:59 2024 GMT
Subject: serialNumber=5053efc32ba7ece2b87f6fc2530b601fe7df9fcdadd94046ad300d5d50b2a097, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3d:f7:10:74:fd:17:ee:1e:33:60:9d:a3:b4:
69:39:1d:9b:03:e8:69:cb:07:9b:5a:cc:82:24:f9:
49:58:19:64:20:67:4e:4c:04:bd:2b:7e:ec:65:f5:
7d:70:69:90:59:f1:e4:37:7a:f3:4a:a9:97:d6:ee:
10:5a:5e:3e:0b:8c:65:70:17:8c:37:a7:42:6e:af:
61:07:a7:63:f2:a0:b8:a0:b6:29:e9:49:29:92:53:
20:ff:c7:52:e1:3c:5c:71:fd:a6:33:d6:2f:d4:b0:
62:68:d3:9c:74:a5:7e:f6:71:ee:8b:41:5e:05:2d:
9f:36:5e:b3:e1:37:62:d8:b8:b6:07:f4:d1:51:df:
a5:36:9e:df:15:3c:37:6f:94:1c:01:83:c8:7c:f9:
36:82:f4:03:96:c1:bb:73:7d:ba:26:1c:f0:66:06:
2b:03:89:61:68:88:8b:ab:a8:39:d3:8d:e2:1f:ca:
50:13:4e:c3:78:88:d8:d9:29:18:66:f9:d6:60:39:
f6:97:97:5f:df:12:df:b1:b9:91:8b:50:f9:2f:36:
51:f3:e6:20:51:75:b2:bb:29:87:b1:81:56:78:e9:
af:47:df:b1:6e:c6:1f:b8:b1:97:74:18:d2:c0:c3:
04:e9:45:8a:03:f6:1b:8d:96:a5:16:cf:84:ed:db:
8c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FA:B5:EE:18:B5:1C:39:B5:6D:9B:D3:3A:77:8C:08:99:9F:05:F1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c9affbdf-3525-439e-98ca-a871e01840fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:63:dc:6e:a7:ed:a3:63:ce:65:24:f4:19:db:61:2c:63:fd:
0c:1b:e9:1e:1f:1c:13:ab:c0:64:ee:83:c3:08:b7:b2:cd:01:
ab:5e:7a:01:96:d1:93:91:a2:fc:4e:ce:ba:b4:4d:00:74:50:
60:e8:04:b6:19:cf:4c:7b:d8:d1:11:68:7c:4a:a9:fa:7e:77:
06:d7:28:18:6a:7f:67:b6:1f:f6:2b:6c:76:83:b0:23:69:72:
e4:30:62:39:c9:3f:00:06:d1:b6:83:e1:f3:0a:83:22:25:76:
92:86:e4:cf:ae:6b:e6:1d:7b:cf:d0:50:45:ba:43:b3:96:33:
d7:e8:e1:69:d1:f3:3f:5a:0c:66:ab:ab:25:1e:76:06:de:f8:
c2:2f:f1:66:d0:39:8d:27:d5:fe:44:13:1b:f9:66:34:3a:33:
ca:bd:cc:cf:e3:c8:0c:f6:03:de:23:82:77:6a:71:75:be:e2:
44:9d:ac:b8:41:77:f7:5e:d9:75:b9:c8:29:1f:99:84:59:4b:
0f:11:82:0f:e2:7f:4d:8f:b5:ae:61:c4:81:4e:be:80:a3:3c:
07:20:c6:c9:c5:95:9d:ef:ff:28:f1:ff:88:27:e3:d8:02:f0:
ec:f4:ac:0b:59:de:3f:69:2c:09:da:bf:b8:a0:a3:75:9f:a7:
9d:21:02:0f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUS3N4PYvvDIL8nCSTCPQOWAVGE4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMDAyMDAwMDAwWhcNMjQxMTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MDUzZWZjMzJiYTdlY2UyYjg3ZjZmYzI1MzBiNjAxZmU3
ZGY5ZmNkYWRkOTQwNDZhZDMwMGQ1ZDUwYjJhMDk3MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3PfcQdP0X7h4zYJ2jtGk5HZsD6GnLB5tazIIk+UlYGWQg
Z05MBL0rfuxl9X1waZBZ8eQ3evNKqZfW7hBaXj4LjGVwF4w3p0Jur2EHp2PyoLig
tinpSSmSUyD/x1LhPFxx/aYz1i/UsGJo05x0pX72ce6LQV4FLZ82XrPhN2LYuLYH
9NFR36U2nt8VPDdvlBwBg8h8+TaC9AOWwbtzfbomHPBmBisDiWFoiIurqDnTjeIf
ylATTsN4iNjZKRhm+dZgOfaXl1/fEt+xuZGLUPkvNlHz5iBRdbK7KYexgVZ46a9H
37Fuxh+4sZd0GNLAwwTpRYoD9huNlqUWz4Tt24zHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUp/q17hi1HDm1bZvTOneMCJmfBfEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2M5YWZmYmRmLTM1MjUtNDM5ZS05OGNhLWE4NzFlMDE4NDBmZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAD5j3G6n7aNjzmUk9BnbYSxj/Qwb
6R4fHBOrwGTug8MIt7LNAateegGW0ZORovxOzrq0TQB0UGDoBLYZz0x72NERaHxK
qfp+dwbXKBhqf2e2H/YrbHaDsCNpcuQwYjnJPwAG0baD4fMKgyIldpKG5M+ua+Yd
e8/QUEW6Q7OWM9fo4WnR8z9aDGarqyUedgbe+MIv8WbQOY0n1f5EExv5ZjQ6M8q9
zM/jyAz2A94jgndqcXW+4kSdrLhBd/de2XW5yCkfmYRZSw8Rgg/if02Pta5hxIFO
voCjPAcgxsnFlZ3v/yjx/4gn49gC8Oz0rAtZ3j9pLAnav7igo3Wfp50hAg8=
-----END CERTIFICATE-----
Generated at Wed Oct 2 14:01:01 2024 by rpki-client on console-ams.rpki-client.org