Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ec3d88bb-a8b7-4cf7-9394-efe29c0bd5f1.roa
File: ec3d88bb-a8b7-4cf7-9394-efe29c0bd5f1.roa (raw, json)
Hash identifier: lODjRLDrNL90FVm9Mljju9aVtq6BSBXVz8i9hTFuYH4=
Subject key identifier: 54:32:6E:6D:52:75:64:B9:19:0E:E2:E7:86:C4:1F:B2:D3:03:A5:6D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 78F5EF8D609C4EC8F6EEE2651CF10116EE6386FB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ec3d88bb-a8b7-4cf7-9394-efe29c0bd5f1.roa
Signing time: Tue 03 Sep 2024 00:00:00 +0000
ROA not before: Tue 03 Sep 2024 00:00:00 +0000
ROA not after: Tue 08 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 09:19:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:f5:ef:8d:60:9c:4e:c8:f6:ee:e2:65:1c:f1:01:16:ee:63:86:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 3 00:00:00 2024 GMT
Not After : Oct 8 23:59:59 2024 GMT
Subject: serialNumber=f5af5bebb064d5aa44f2276d3846e8a40563409fdbcb0df3b39f16558adb27cd, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:53:53:71:af:26:3c:6f:03:51:ff:cd:21:3f:
46:33:2b:95:28:f0:11:94:e0:52:d1:d6:77:4d:16:
21:20:0e:ad:3d:78:8a:c4:17:08:30:07:a4:d6:93:
13:c9:6d:36:c7:f7:3a:1c:d2:db:ac:ff:1f:b9:58:
8e:19:27:de:59:60:5c:be:cd:7d:64:a1:85:ad:aa:
a1:9c:ad:59:58:43:e2:86:57:92:1f:9b:d1:99:5f:
c8:1f:1d:03:82:99:00:b5:4d:00:f0:64:b7:b9:d8:
6d:b1:b6:0e:2f:f9:6f:6f:72:33:97:0e:eb:9f:7c:
41:92:7d:77:11:8a:1f:b9:f3:ab:2c:0c:73:75:84:
fe:f4:d8:84:89:a4:e2:c4:48:0d:1d:f4:98:b9:3b:
09:fd:8c:01:32:ea:9c:ad:3c:59:eb:48:7f:72:66:
eb:6f:bb:96:b5:0d:11:00:06:74:a3:54:1e:83:9a:
c9:3b:c3:d3:ea:29:25:4d:76:42:f6:de:ff:53:aa:
e2:f0:88:43:27:b1:a4:78:d6:7a:3e:39:49:15:dd:
12:8b:a4:a4:39:35:fc:ed:f9:ce:0c:92:48:f6:f4:
b2:96:e5:da:70:37:f5:0c:e5:19:6b:3d:c9:de:b2:
43:72:44:ae:67:02:f7:55:97:c3:2e:81:36:00:42:
03:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:32:6E:6D:52:75:64:B9:19:0E:E2:E7:86:C4:1F:B2:D3:03:A5:6D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ec3d88bb-a8b7-4cf7-9394-efe29c0bd5f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:8d:61:43:2f:4d:e4:41:cc:0f:0c:53:85:56:4a:bc:d2:b7:
f1:10:52:ae:2d:27:8d:48:0a:b0:28:e8:5a:65:28:67:d6:cb:
b1:c6:f4:2a:c1:62:3c:7a:96:45:31:e9:c8:3f:c8:0a:2e:87:
34:88:bc:2f:44:fd:e8:5f:7e:18:45:57:82:ee:44:0d:24:b0:
c3:c7:93:64:cb:af:90:69:b4:6c:00:5d:e8:db:b5:2f:f4:fa:
67:6e:55:40:ab:02:40:10:dc:22:a1:80:0e:a2:ea:bf:21:6a:
1d:e3:d6:18:57:53:13:21:d5:ab:23:31:33:a6:f9:f1:09:a5:
5b:89:d5:99:36:99:84:1f:eb:fe:33:5c:7c:20:29:b1:c7:e4:
ab:76:69:f2:80:96:5d:31:31:e7:87:fa:41:88:92:90:8e:5b:
e2:59:12:1d:a9:1b:c5:e5:79:51:89:7c:71:ca:2a:2b:19:46:
24:7d:6e:17:00:04:15:e6:ae:88:9a:4e:03:70:89:87:b3:4f:
91:25:25:1d:95:b5:b0:5c:cc:a6:ed:ac:b2:30:18:ae:a1:80:
32:56:51:77:01:73:70:4c:ff:25:8d:f0:a9:63:dd:4c:d9:8c:
ef:76:74:7c:84:16:a3:bc:32:6a:8b:e1:b4:89:55:69:b1:ec:
43:ea:32:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 12:42:41 2024 by rpki-client on console-ams.rpki-client.org