Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/da04f59a-bc5e-4578-b030-58ed3f8b3693.roa
File: da04f59a-bc5e-4578-b030-58ed3f8b3693.roa (raw, json)
Hash identifier: di0xIbQce6UoEnTye4tPfMdYZnxf5QgwBXDsEhEcDv4=
Subject key identifier: 3C:01:83:67:1E:F7:7B:31:DB:D0:28:02:6D:09:8D:48:F1:D2:CF:7D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 43CA5409B835D2CBDA4A8D8FBFF706AD6209511E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/da04f59a-bc5e-4578-b030-58ed3f8b3693.roa
Signing time: Fri 06 Sep 2024 00:00:00 +0000
ROA not before: Fri 06 Sep 2024 00:00:00 +0000
ROA not after: Fri 11 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Sep 2024 15:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ca:54:09:b8:35:d2:cb:da:4a:8d:8f:bf:f7:06:ad:62:09:51:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 6 00:00:00 2024 GMT
Not After : Oct 11 23:59:59 2024 GMT
Subject: serialNumber=d9e38182de16a7f724de8923eb077ece27cd503c71f0789642679c505b5bcc28, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:39:b5:56:1b:c8:42:b4:f9:ed:f9:fc:ce:
f6:9a:e5:70:b9:a8:da:db:ee:39:3d:eb:c9:c2:2b:
42:e6:da:51:39:71:e2:c6:d8:c6:80:89:10:a5:6b:
8d:b7:16:ac:90:d2:ec:b9:f9:87:f1:9f:24:41:86:
a5:fb:24:b4:74:e7:d1:9a:29:42:01:5f:6f:21:f5:
25:fe:e3:01:d5:13:5d:ec:bb:22:d5:c9:de:35:97:
e8:22:d3:5a:67:fd:50:f9:04:25:4e:b0:41:d3:0e:
be:e7:0c:1e:ab:1e:f6:4d:b4:3c:bf:57:14:65:a8:
62:b2:64:c6:b6:8d:51:08:8c:f3:eb:06:60:d4:78:
6e:82:91:61:45:fb:eb:01:4d:fc:93:b9:71:19:e6:
04:6e:c4:35:fd:3e:b9:7f:6a:b2:99:fb:3a:dd:4b:
48:49:4d:99:28:49:b5:68:c1:07:7b:43:a6:70:35:
3d:4a:10:56:a3:90:0b:71:4f:cb:2f:f2:54:56:2e:
b7:6c:47:30:ed:11:8b:31:78:8e:ce:58:55:6d:22:
05:d3:19:fd:a1:04:39:ba:17:e7:46:a0:2e:7a:81:
c1:ac:b5:95:d9:71:ed:b3:8c:59:70:b3:dc:44:1e:
82:e0:dd:17:f5:f8:ce:8d:82:15:02:17:82:15:05:
7f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:01:83:67:1E:F7:7B:31:DB:D0:28:02:6D:09:8D:48:F1:D2:CF:7D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/da04f59a-bc5e-4578-b030-58ed3f8b3693.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
97:5d:0d:5f:38:9e:7c:41:c6:6e:14:b2:8c:4a:6d:00:4b:ed:
0d:2a:49:8b:3c:a4:27:b3:55:cb:64:15:4b:7a:da:d0:6d:2a:
12:59:a5:e0:05:66:e0:bf:04:4f:6c:9f:2c:b1:c9:c2:a9:76:
29:ef:5c:49:1f:de:41:76:a3:ee:81:d9:d4:d5:21:ac:f6:25:
68:de:b3:f0:ed:09:35:17:ae:8b:d4:50:51:33:f3:eb:9b:1f:
bc:7d:65:83:cd:cd:d7:c8:51:dd:2c:b1:60:7e:16:c9:8d:ac:
d8:62:8d:27:38:48:87:0e:b4:b2:9b:46:6a:61:b3:83:16:80:
8b:54:12:51:d4:e1:2c:31:bb:11:5a:93:0d:b2:8e:a5:33:2e:
28:bf:ac:10:5d:ea:f2:3d:81:c9:27:8c:48:ef:4b:e3:24:d6:
8c:aa:40:61:7d:04:28:8c:10:f2:83:0e:0d:50:b5:ef:8d:7c:
c7:39:f8:1b:7b:4f:08:60:7b:bf:97:32:af:70:b8:bc:66:c4:
38:74:4f:01:b1:6e:db:be:ac:9a:52:35:a1:c3:16:d0:14:3c:
3d:8d:fd:af:ec:00:ad:9d:40:ae:66:b9:a8:37:a7:e3:ab:91:
c5:a2:55:5f:59:b5:76:7a:2f:79:0f:b7:f9:bb:5b:70:16:11:
d9:d9:4b:2b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQ8pUCbg10svaSo2Pv/cGrWIJUR4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwOTA2MDAwMDAwWhcNMjQxMDExMjM1OTU5
WjB6MUkwRwYDVQQFE0BkOWUzODE4MmRlMTZhN2Y3MjRkZTg5MjNlYjA3N2VjZTI3
Y2Q1MDNjNzFmMDc4OTY0MjY3OWM1MDViNWJjYzI4MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4ejm1VhvIQrT57fn8zvaa5XC5qNrb7jk968nCK0Lm2lE5
ceLG2MaAiRCla423FqyQ0uy5+YfxnyRBhqX7JLR059GaKUIBX28h9SX+4wHVE13s
uyLVyd41l+gi01pn/VD5BCVOsEHTDr7nDB6rHvZNtDy/VxRlqGKyZMa2jVEIjPPr
BmDUeG6CkWFF++sBTfyTuXEZ5gRuxDX9Prl/arKZ+zrdS0hJTZkoSbVowQd7Q6Zw
NT1KEFajkAtxT8sv8lRWLrdsRzDtEYsxeI7OWFVtIgXTGf2hBDm6F+dGoC56gcGs
tZXZce2zjFlws9xEHoLg3Rf1+M6NghUCF4IVBX8/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUPAGDZx73ezHb0CgCbQmNSPHSz30wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2RhMDRmNTlhLWJjNWUtNDU3OC1iMDMwLTU4ZWQzZjhiMzY5My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJddDV84nnxBxm4UsoxKbQBL7Q0q
SYs8pCezVctkFUt62tBtKhJZpeAFZuC/BE9snyyxycKpdinvXEkf3kF2o+6B2dTV
Iaz2JWjes/DtCTUXrovUUFEz8+ubH7x9ZYPNzdfIUd0ssWB+FsmNrNhijSc4SIcO
tLKbRmphs4MWgItUElHU4SwxuxFakw2yjqUzLii/rBBd6vI9gcknjEjvS+Mk1oyq
QGF9BCiMEPKDDg1Qte+NfMc5+Bt7Twhge7+XMq9wuLxmxDh0TwGxbtu+rJpSNaHD
FtAUPD2N/a/sAK2dQK5muag3p+OrkcWiVV9ZtXZ6L3kPt/m7W3AWEdnZSys=
-----END CERTIFICATE-----
Generated at Fri Sep 6 18:41:18 2024 by rpki-client on console-fra.rpki-client.org