Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ec27159b-e920-4e49-b5cb-24fd0815a6ba.roa
File: ec27159b-e920-4e49-b5cb-24fd0815a6ba.roa (raw, json)
Hash identifier: JUloBsBt9BUSyW0EbcID4N8qYdhOzdf0mPNRfi7tGVs=
Subject key identifier: 3A:A0:F9:08:A1:12:F2:21:91:EE:2F:F4:E3:96:E1:34:A8:BA:1A:B9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7B5C142040CDCF540F4955AEE73027AE70DE616C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ec27159b-e920-4e49-b5cb-24fd0815a6ba.roa
Signing time: Thu 05 Sep 2024 00:00:00 +0000
ROA not before: Thu 05 Sep 2024 00:00:00 +0000
ROA not after: Thu 10 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 11:04:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:5c:14:20:40:cd:cf:54:0f:49:55:ae:e7:30:27:ae:70:de:61:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 5 00:00:00 2024 GMT
Not After : Oct 10 23:59:59 2024 GMT
Subject: serialNumber=e4d49ad2787132b5500c7967aea2ff5c796eedd3d7b751ef6c9eb307de8805fc, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0b:0d:bc:02:d7:21:88:e2:8d:a7:34:95:42:
56:75:0c:9d:4d:67:5f:7f:9a:d7:10:10:fe:9d:36:
ce:a9:3e:1b:ba:db:7f:6f:16:34:d7:3b:28:97:a5:
7b:9d:7b:c1:e3:0d:b7:77:a4:45:0d:5a:a2:63:aa:
4a:92:be:84:9d:75:11:8e:a7:3b:31:a8:b1:25:ce:
b0:eb:09:7c:10:f1:56:2d:1f:6b:a1:4a:1b:de:35:
9e:76:28:61:ab:72:b4:15:95:62:c8:d7:b3:74:d6:
b5:05:e4:94:fd:b1:e2:48:95:a4:d9:83:a0:68:49:
39:61:b9:00:35:fd:55:27:c2:99:7f:f5:16:2b:0f:
52:0e:63:f1:f8:5f:73:fb:85:ef:45:4d:5d:fc:2a:
59:1c:d6:e1:27:4d:63:13:a8:7c:bd:78:81:db:89:
d1:eb:2a:86:e1:13:fc:e8:87:1e:aa:ae:3b:e4:67:
ee:c8:6b:4d:54:99:b1:a6:c5:9f:95:7e:40:ac:61:
00:ed:3d:46:4f:05:8b:ee:b8:8b:83:92:f4:34:51:
de:63:b2:1f:4d:42:9b:17:42:a8:af:ba:c2:7c:26:
e6:e3:1a:e4:f2:2b:89:ff:d9:f0:9a:34:a7:f2:7d:
11:64:e3:a5:d8:6d:b0:da:fa:67:e2:46:10:06:44:
4a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A0:F9:08:A1:12:F2:21:91:EE:2F:F4:E3:96:E1:34:A8:BA:1A:B9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ec27159b-e920-4e49-b5cb-24fd0815a6ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ee:89:18:b3:d0:e8:3e:ab:de:21:80:22:0d:cd:11:c4:7d:
0f:59:fe:98:73:a7:24:4a:6f:9b:c7:7e:f6:cd:24:61:88:33:
60:78:0a:b4:1e:ca:19:80:32:55:02:e0:b9:3b:36:74:0d:8d:
ca:fc:8a:4b:03:6b:cc:b2:d1:e1:30:39:af:b3:54:02:e9:d1:
4b:d2:9c:cc:8a:52:98:2a:0d:d2:10:35:f6:55:2b:3e:8c:96:
19:e1:d2:ec:0d:f6:e6:da:14:bd:d5:92:a0:7b:52:52:03:27:
74:73:22:db:0f:9f:99:b2:a3:2d:7f:59:6e:e6:d9:24:f3:bf:
00:26:1b:70:65:e3:52:3b:27:d2:cc:14:e5:45:6f:85:cd:c8:
d7:5b:c5:b3:8c:91:dc:22:5b:3d:71:8a:c4:aa:4d:c0:06:9a:
08:20:64:78:66:c9:8f:21:59:0b:c2:fb:a6:36:bc:92:32:5e:
3f:0a:85:ba:a5:27:64:91:71:0a:18:6a:fc:f2:67:4f:cb:09:
1a:96:52:5e:62:a6:d7:10:8e:7c:ff:86:32:11:a8:65:9c:c6:
cc:a7:91:de:2a:60:04:23:85:44:84:a0:09:ff:2e:7c:d8:c5:
e7:6c:5a:c9:be:90:2d:e3:34:f2:ac:a1:70:58:c2:48:d4:ce:
bd:51:41:59
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUe1wUIEDNz1QPSVWu5zAnrnDeYWwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwOTA1MDAwMDAwWhcNMjQxMDEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BlNGQ0OWFkMjc4NzEzMmI1NTAwYzc5NjdhZWEyZmY1Yzc5
NmVlZGQzZDdiNzUxZWY2YzllYjMwN2RlODgwNWZjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDhCw28AtchiOKNpzSVQlZ1DJ1NZ19/mtcQEP6dNs6pPhu6
239vFjTXOyiXpXude8HjDbd3pEUNWqJjqkqSvoSddRGOpzsxqLElzrDrCXwQ8VYt
H2uhShveNZ52KGGrcrQVlWLI17N01rUF5JT9seJIlaTZg6BoSTlhuQA1/VUnwpl/
9RYrD1IOY/H4X3P7he9FTV38Klkc1uEnTWMTqHy9eIHbidHrKobhE/zohx6qrjvk
Z+7Ia01UmbGmxZ+VfkCsYQDtPUZPBYvuuIuDkvQ0Ud5jsh9NQpsXQqivusJ8Jubj
GuTyK4n/2fCaNKfyfRFk46XYbbDa+mfiRhAGREodAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUOqD5CKES8iGR7i/045bhNKi6GrkwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2VjMjcxNTliLWU5MjAtNGU0OS1iNWNiLTI0ZmQwODE1YTZiYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAE/uiRiz0Og+q94hgCINzRHEfQ9Z
/phzpyRKb5vHfvbNJGGIM2B4CrQeyhmAMlUC4Lk7NnQNjcr8iksDa8yy0eEwOa+z
VALp0UvSnMyKUpgqDdIQNfZVKz6Mlhnh0uwN9ubaFL3VkqB7UlIDJ3RzItsPn5my
oy1/WW7m2STzvwAmG3Bl41I7J9LMFOVFb4XNyNdbxbOMkdwiWz1xisSqTcAGmggg
ZHhmyY8hWQvC+6Y2vJIyXj8KhbqlJ2SRcQoYavzyZ0/LCRqWUl5iptcQjnz/hjIR
qGWcxsynkd4qYAQjhUSEoAn/LnzYxedsWsm+kC3jNPKsoXBYwkjUzr1RQVk=
-----END CERTIFICATE-----
Generated at Thu Sep 5 14:28:49 2024 by rpki-client on console-ams.rpki-client.org