Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cd78929a-5f17-481a-9876-fcb48f021551.roa
File: cd78929a-5f17-481a-9876-fcb48f021551.roa (raw, json)
Hash identifier: 10Bw5urAbAeJD201b4mi0PTH8IMJDfdpNuC1mrLTLAo=
Subject key identifier: 27:09:0F:FA:01:59:27:A1:F9:71:8D:3C:36:4F:99:0B:B8:78:32:B4
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5C54E8F9DE89CA1FAC29B08540B0211405F27E3F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cd78929a-5f17-481a-9876-fcb48f021551.roa
Signing time: Mon 28 Oct 2024 00:00:00 +0000
ROA not before: Mon 28 Oct 2024 00:00:00 +0000
ROA not after: Mon 02 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Oct 2024 15:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:54:e8:f9:de:89:ca:1f:ac:29:b0:85:40:b0:21:14:05:f2:7e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 28 00:00:00 2024 GMT
Not After : Dec 2 23:59:59 2024 GMT
Subject: serialNumber=3aefc7a05816866a71735ca54b1e35cbea809ade26a24ce6997128fddf51b9f2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:73:37:d4:0d:e9:5f:52:45:68:04:1c:8c:37:
6e:35:43:d0:83:a5:97:20:34:35:43:cc:ee:90:7b:
24:6a:e9:e4:b4:2b:a7:c6:f8:c8:04:71:d9:17:80:
b4:3b:bb:81:ea:85:95:fd:46:d8:06:47:4e:60:f2:
fc:f9:59:c9:2b:a3:ed:92:c1:94:6c:1b:ca:39:2a:
c2:90:21:06:61:45:db:08:50:5e:1f:c8:93:d4:4a:
0c:e4:9f:dc:84:d1:79:85:20:53:18:ef:4a:3e:e9:
10:b0:4b:99:71:84:08:a9:99:e0:4c:07:65:eb:94:
2a:4d:21:90:e9:60:67:83:08:6c:13:0d:ae:8d:a0:
c1:a4:c9:e3:a3:5f:76:00:80:38:41:51:d4:7f:46:
0d:59:51:a0:a1:60:7c:de:23:0c:3e:71:4b:9c:ba:
a2:f7:fa:40:86:2c:0f:d7:a3:8d:50:9f:4b:b7:c8:
48:e9:b5:8d:17:4a:38:5c:08:9c:66:76:4f:64:4c:
9a:66:72:82:b5:00:51:f5:f5:4f:88:87:03:bd:63:
2f:bb:47:e1:4c:02:e0:be:d4:e2:ab:6a:01:1e:87:
37:e6:18:a4:02:95:4d:59:6d:99:eb:2e:51:d1:94:
aa:39:d3:5c:5e:a4:7e:b8:f1:72:4e:78:23:3b:5d:
5d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:09:0F:FA:01:59:27:A1:F9:71:8D:3C:36:4F:99:0B:B8:78:32:B4
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cd78929a-5f17-481a-9876-fcb48f021551.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
86:e7:c3:e4:58:4a:ac:08:c6:b6:a6:4c:ad:67:b6:3c:f7:5b:
50:5c:89:9c:8e:4e:b7:3d:d2:cc:76:fc:24:bf:71:cd:de:fc:
f6:62:1c:79:bb:29:a3:b3:3c:7a:b5:01:0a:7e:21:c1:d4:f5:
3a:6a:fb:b3:c2:c1:e4:7b:ff:79:93:96:fb:4d:21:f9:ce:da:
54:93:c0:e2:ba:ff:ec:eb:87:95:79:f6:95:a0:79:c9:e9:dd:
77:ac:52:31:ad:98:a6:df:30:43:10:be:81:ac:6a:b3:68:b7:
c3:8e:42:34:36:ce:0d:2c:40:3c:f3:ca:dc:ae:96:ab:04:c7:
44:fc:2e:e5:55:c4:41:cb:6d:70:69:03:c7:63:b3:e3:c3:04:
b1:24:b7:28:45:d6:7a:c4:af:9d:64:5f:7f:95:5a:20:e5:48:
51:05:f1:f5:88:23:59:71:f4:48:29:1d:e3:34:96:bf:2d:00:
6f:b8:7f:40:47:ee:43:be:9b:01:99:94:f2:fe:f2:2e:71:0e:
9a:60:bd:a8:cd:60:de:d8:2f:f0:30:bf:09:99:bd:67:96:aa:
20:0d:ed:c1:69:f7:6b:40:1b:4e:b0:e8:98:00:be:91:6e:db:
04:2a:9d:34:3c:f8:df:03:62:00:35:67:8c:09:e3:bc:4b:ea:
a8:fd:4a:0f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXFTo+d6Jyh+sKbCFQLAhFAXyfj8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMDI4MDAwMDAwWhcNMjQxMjAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AzYWVmYzdhMDU4MTY4NjZhNzE3MzVjYTU0YjFlMzVjYmVh
ODA5YWRlMjZhMjRjZTY5OTcxMjhmZGRmNTFiOWYyMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDlczfUDelfUkVoBByMN241Q9CDpZcgNDVDzO6QeyRq6eS0
K6fG+MgEcdkXgLQ7u4HqhZX9RtgGR05g8vz5Wckro+2SwZRsG8o5KsKQIQZhRdsI
UF4fyJPUSgzkn9yE0XmFIFMY70o+6RCwS5lxhAipmeBMB2XrlCpNIZDpYGeDCGwT
Da6NoMGkyeOjX3YAgDhBUdR/Rg1ZUaChYHzeIww+cUucuqL3+kCGLA/Xo41Qn0u3
yEjptY0XSjhcCJxmdk9kTJpmcoK1AFH19U+IhwO9Yy+7R+FMAuC+1OKragEehzfm
GKQClU1ZbZnrLlHRlKo501xepH648XJOeCM7XV3LAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUJwkP+gFZJ6H5cY08Nk+ZC7h4MrQwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2NkNzg5MjlhLTVmMTctNDgxYS05ODc2LWZjYjQ4ZjAyMTU1MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIbnw+RYSqwIxramTK1ntjz3W1Bc
iZyOTrc90sx2/CS/cc3e/PZiHHm7KaOzPHq1AQp+IcHU9Tpq+7PCweR7/3mTlvtN
IfnO2lSTwOK6/+zrh5V59pWgecnp3XesUjGtmKbfMEMQvoGsarNot8OOQjQ2zg0s
QDzzytyulqsEx0T8LuVVxEHLbXBpA8djs+PDBLEktyhF1nrEr51kX3+VWiDlSFEF
8fWII1lx9EgpHeM0lr8tAG+4f0BH7kO+mwGZlPL+8i5xDppgvajNYN7YL/AwvwmZ
vWeWqiAN7cFp92tAG06w6JgAvpFu2wQqnTQ8+N8DYgA1Z4wJ47xL6qj9Sg8=
-----END CERTIFICATE-----
Generated at Mon Oct 28 20:14:21 2024 by rpki-client on console-ams.rpki-client.org