Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cea6e209-c09c-439d-8536-0c0813ee6699.roa
File: cea6e209-c09c-439d-8536-0c0813ee6699.roa (raw, json)
Hash identifier: mE4shSigN5engmyvR52uTgNwgHWRII7mditpE6DVpHA=
Subject key identifier: 3E:CD:03:E9:FF:A6:74:C5:43:2B:79:D1:B3:20:69:12:59:4E:C7:66
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 744ABA20D113AC475F12A2A6E95235892035EB77
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cea6e209-c09c-439d-8536-0c0813ee6699.roa
Signing time: Sat 31 Aug 2024 00:00:00 +0000
ROA not before: Sat 31 Aug 2024 00:00:00 +0000
ROA not after: Sat 05 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 31 Aug 2024 18:59:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:4a:ba:20:d1:13:ac:47:5f:12:a2:a6:e9:52:35:89:20:35:eb:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 31 00:00:00 2024 GMT
Not After : Oct 5 23:59:59 2024 GMT
Subject: serialNumber=195d00c00211a48343f4e74a78349bce7fdcfe6730f8bdd9276193d92d9ea68e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:1a:7b:6d:9a:04:58:ea:85:d8:e5:c3:ed:
ab:33:43:05:60:87:3f:31:c6:a9:22:ee:56:21:21:
36:dd:11:19:b6:91:59:37:a8:df:7c:4d:63:5c:d4:
82:b3:bf:d8:9f:ce:7d:b6:87:cd:3c:3a:18:04:3e:
b8:87:5e:4a:38:57:91:9f:74:c9:04:d9:6d:e9:50:
cf:35:8a:4c:ac:db:8c:aa:40:97:9e:b7:c9:14:b6:
f5:fc:fb:8f:e0:0f:3c:ae:ba:aa:8f:17:63:1d:62:
7d:1a:66:78:13:70:9c:63:88:c5:49:f6:46:6f:83:
78:bb:31:03:c4:d0:ab:31:36:3d:c3:48:5f:5a:05:
ac:c2:0e:7c:ae:33:22:28:17:6a:92:98:18:b8:3c:
09:6d:ce:1d:0a:e2:c2:c8:36:23:ff:88:41:a7:ec:
dd:49:98:56:30:2e:7e:8b:57:5b:85:0c:a5:d1:2d:
67:79:65:9c:9a:7a:9b:55:d4:39:e8:18:f8:fb:01:
c1:48:5b:c6:c3:0b:ce:07:56:9f:0a:bb:bc:0d:af:
28:8e:f8:dc:2b:62:0c:53:5f:13:66:ba:dd:65:c6:
29:26:ce:8b:74:00:7a:61:66:ae:34:c4:e2:f1:23:
95:95:c3:c7:f8:95:75:54:d6:89:f8:ec:08:1e:80:
f1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CD:03:E9:FF:A6:74:C5:43:2B:79:D1:B3:20:69:12:59:4E:C7:66
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cea6e209-c09c-439d-8536-0c0813ee6699.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:a5:e6:ea:72:d1:60:9f:77:a5:89:b9:6e:a3:e8:2c:43:94:
1f:99:1a:4f:68:51:38:47:7d:f8:ba:d6:e9:b1:3d:57:83:77:
05:21:4e:7f:0c:74:17:9d:20:78:9e:be:68:ed:b5:78:b2:ea:
46:a8:29:8e:e5:45:9d:88:9f:94:3c:2e:17:28:b7:87:8a:ea:
eb:15:bb:b5:b1:9a:a2:0f:65:a6:76:90:5c:ac:95:ec:b6:66:
53:05:da:82:33:3f:dd:bf:4c:49:a2:52:e3:44:06:c4:e6:a0:
80:85:96:94:e6:35:c5:82:3d:d3:3f:21:0e:8c:6a:9a:2d:d0:
a9:ff:a7:86:bf:ad:10:06:21:64:e2:d9:15:9e:aa:b7:a1:ff:
db:58:36:29:9a:40:08:19:6f:76:9e:6e:7f:c8:38:d8:cc:34:
62:cb:5b:f8:cf:4e:93:52:99:31:b7:6d:82:ed:1c:f7:c8:8c:
9b:c2:51:e2:67:e8:93:ee:56:d6:a1:02:cf:2d:e3:45:9a:9a:
b7:9b:dd:e8:f5:73:7b:61:a6:b4:04:9a:6f:d7:1e:1c:d6:42:
28:19:9d:9a:81:d1:67:68:7b:f0:05:9e:7b:eb:9e:05:23:70:
61:a5:48:2b:a9:e3:06:61:3c:46:d6:1a:24:41:0b:6c:8a:72:
9f:b8:3b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 20:53:00 2024 by rpki-client on console-ams.rpki-client.org