Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cfe7beb0-0112-4fe4-b94f-6ebaddcd69bb.roa
File: cfe7beb0-0112-4fe4-b94f-6ebaddcd69bb.roa (raw, json)
Hash identifier: 649ypZ09ZtAramcsAQqqBwZJgbmcBx7p6WpYQQiCnbE=
Subject key identifier: EE:34:5A:DD:55:0A:BA:27:D3:20:DE:08:1C:BF:C4:53:E2:D1:89:C7
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 42151E819E0A5343C2689213F32E80D64D9D319E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cfe7beb0-0112-4fe4-b94f-6ebaddcd69bb.roa
Signing time: Tue 02 Jul 2024 00:00:00 +0000
ROA not before: Tue 02 Jul 2024 00:00:00 +0000
ROA not after: Tue 06 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jul 2024 19:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:15:1e:81:9e:0a:53:43:c2:68:92:13:f3:2e:80:d6:4d:9d:31:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 2 00:00:00 2024 GMT
Not After : Aug 6 23:59:59 2024 GMT
Subject: serialNumber=65dddd894a39d71ea53e7ff34a6fc03f73dd7d7c6ea369d2e40a79061ee5ec85, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:98:3d:e6:3b:91:cc:56:f8:ce:df:aa:58:c7:
20:5f:2a:97:2d:c3:1a:82:0e:97:15:20:27:b9:40:
20:c3:48:9b:5e:6a:17:d2:14:4b:f2:6b:5f:06:39:
41:e6:2e:bc:7e:e0:f2:10:a6:c6:93:96:e2:f0:e8:
aa:0f:a8:2a:9b:0e:63:a4:5b:38:12:17:e5:2a:7d:
ac:68:fe:d0:84:83:eb:73:be:18:c2:a8:67:ae:7f:
b4:2c:01:75:c7:06:de:08:57:67:07:3c:f7:d5:34:
b9:89:e5:f2:10:49:05:0b:4d:70:fb:2f:90:7b:13:
8c:4f:32:92:2a:20:c9:2a:e2:e0:2f:7e:47:a4:41:
6f:28:cf:c4:7c:03:f9:e9:3d:18:9c:50:bd:aa:1d:
3d:cd:96:24:a3:ad:ed:96:0b:f6:34:32:b2:0c:6d:
6f:09:a9:1f:48:95:da:31:d9:98:75:96:1b:93:e8:
ae:09:f5:d0:e4:51:b0:db:af:9f:73:42:bc:df:10:
4e:43:71:50:74:ed:0b:4c:9b:d5:a5:33:0c:9e:fb:
dc:87:29:dd:fa:0c:5a:a5:fb:53:48:dc:9e:a8:8e:
45:7a:05:f6:0e:03:05:73:82:0c:61:6c:a1:56:51:
bc:6c:ed:8b:2d:b6:c6:b6:40:a6:50:79:26:66:96:
17:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:34:5A:DD:55:0A:BA:27:D3:20:DE:08:1C:BF:C4:53:E2:D1:89:C7
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cfe7beb0-0112-4fe4-b94f-6ebaddcd69bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:9c:4a:65:be:44:8e:c5:0e:dd:4b:9c:4a:75:33:da:b6:49:
36:1e:3f:f0:25:9a:de:2e:30:f0:4c:06:79:c4:84:04:4a:06:
cb:a0:b9:cf:c4:18:39:e2:de:ad:eb:a4:b3:9b:b2:31:eb:9f:
17:f5:d1:d0:66:c9:3a:5a:ad:51:01:05:a0:09:3c:f6:82:0f:
b8:a1:d0:42:da:62:88:18:ab:20:f7:f4:1b:08:15:4c:db:28:
4e:82:cf:7c:f2:b9:fa:79:a1:05:e4:ee:02:be:20:a1:40:80:
91:8c:3f:b6:b2:70:08:1f:de:51:ed:c0:1b:b1:b1:88:90:b1:
2b:96:d4:da:81:b7:fa:62:66:37:f9:ab:5d:f7:45:16:8c:af:
d4:5e:dc:65:2e:a7:d4:16:8f:14:84:5a:9c:0e:df:b5:71:0d:
e9:38:65:a2:75:6e:da:2c:46:0e:be:29:94:46:b2:26:6c:5f:
5b:e3:95:7c:30:45:3a:af:09:f8:6b:ce:10:1f:84:e1:5f:6d:
ad:fc:ef:ef:a8:57:e9:3a:c0:8a:29:e5:10:74:d7:57:0a:57:
5a:7a:08:33:88:dd:ea:36:5a:ad:a5:bc:bb:3c:fb:c9:d8:a0:
42:ef:7e:0b:65:b5:43:70:6a:b2:b7:4c:a5:45:40:7b:2a:21:
50:a5:37:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 21:48:52 2024 by rpki-client on console-ams.rpki-client.org