Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ee42321f-7cec-45bc-bbea-75570b011918.roa
File: ee42321f-7cec-45bc-bbea-75570b011918.roa (raw, json)
Hash identifier: sh3YJ/dlfkfl5W57Ve9+ZLaLVTOk2SKeCSfJpVTX+vM=
Subject key identifier: 23:A8:D3:E2:7E:CE:3A:D5:B2:29:11:24:73:73:35:D9:3E:94:CB:BA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 18D112EB94F62122FF0014E8BD3B03FFACF5DB42
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ee42321f-7cec-45bc-bbea-75570b011918.roa
Signing time: Thu 09 May 2024 00:00:00 +0000
ROA not before: Thu 09 May 2024 00:00:00 +0000
ROA not after: Thu 13 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 07:25:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:d1:12:eb:94:f6:21:22:ff:00:14:e8:bd:3b:03:ff:ac:f5:db:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 9 00:00:00 2024 GMT
Not After : Jun 13 23:59:59 2024 GMT
Subject: serialNumber=caee7a19632b463e710f070b64ed4e97f0640089be0851aa629ca157b1646f71, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:50:bb:00:fb:e1:1b:8e:2c:ea:ae:cb:e2:ef:
b9:02:38:49:7e:71:6f:05:b5:1e:3e:35:a7:21:69:
cc:14:8c:8e:b6:ab:06:fa:61:80:08:69:2f:b1:aa:
47:bf:88:3e:bf:7c:44:7d:bb:8e:2e:45:21:d3:11:
92:0c:35:ae:1e:9d:86:10:b4:9a:d0:9c:8d:46:d7:
e4:d6:f7:bf:80:bf:de:27:60:62:2c:ec:62:3d:db:
a4:ad:9a:37:03:c7:b3:68:47:23:ec:4e:78:51:19:
9f:0a:2f:65:f2:c7:1f:84:d2:84:e8:dc:f4:93:88:
c1:11:75:38:6e:e9:2d:fc:08:37:29:69:99:8d:fe:
67:2f:d0:e7:2c:4d:78:ea:ce:f6:d0:a2:b4:ab:d1:
33:20:55:21:ab:9e:10:2d:1d:09:2f:54:98:e6:c1:
0f:e0:7d:6a:ac:b0:66:a8:ee:83:f3:ca:82:25:1d:
51:13:24:1d:73:4f:d0:fc:27:a1:42:be:55:62:90:
b9:8d:1d:42:09:fa:f6:a3:85:2e:0d:6c:2c:74:54:
1c:c8:81:81:1e:95:ec:ec:4e:07:0a:58:2e:18:04:
f0:f3:48:8b:d9:a7:87:d9:b0:07:55:d4:d8:20:d2:
b4:55:81:f0:f9:63:58:8f:37:86:fc:de:ac:94:ef:
cc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A8:D3:E2:7E:CE:3A:D5:B2:29:11:24:73:73:35:D9:3E:94:CB:BA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ee42321f-7cec-45bc-bbea-75570b011918.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
13:14:29:c3:da:16:fd:f6:a3:da:67:4e:cc:78:32:5a:9a:2e:
b6:bd:44:ea:29:09:6d:09:4a:ad:ed:dd:34:fe:66:0d:2d:01:
f9:f7:a7:88:2a:c6:e5:b5:0a:18:ca:59:5b:9e:bb:03:de:ef:
2f:97:60:b0:3f:eb:41:f3:1e:d0:d9:9a:b8:a6:5c:f9:bb:e1:
19:fe:02:82:c9:15:c1:5e:64:f8:9d:51:a8:fb:a8:54:50:ca:
45:e8:c4:ee:40:3e:f1:4c:45:6d:c3:e6:1b:c2:1c:83:52:93:
4c:7d:fc:53:1a:61:33:c5:d8:cc:b7:66:11:6b:2c:07:f1:9c:
9d:c3:f7:f4:bd:45:42:35:52:b0:7c:f1:55:66:7d:03:1b:8e:
13:e9:da:d5:7f:4d:bb:2e:00:4e:ab:03:69:87:80:92:9b:01:
dd:b6:c9:7f:28:f3:43:3d:0f:16:4f:39:a2:b5:fa:a2:3c:90:
59:19:66:a2:17:bf:c1:0c:b0:78:3e:5f:8f:12:43:86:20:eb:
68:22:73:b9:41:17:10:94:91:f9:7c:d9:45:ed:a8:f0:bc:9c:
91:a1:a9:31:f4:d1:a2:46:3b:b9:f8:5d:ff:f7:47:71:1d:57:
77:c2:ba:ac:e3:1a:eb:a7:ac:a6:e8:1c:7d:82:ae:b7:3a:b0:
6d:85:be:30
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGNES65T2ISL/ABTovTsD/6z120IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNTA5MDAwMDAwWhcNMjQwNjEzMjM1OTU5
WjB6MUkwRwYDVQQFE0BjYWVlN2ExOTYzMmI0NjNlNzEwZjA3MGI2NGVkNGU5N2Yw
NjQwMDg5YmUwODUxYWE2MjljYTE1N2IxNjQ2ZjcxMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCQULsA++Ebjizqrsvi77kCOEl+cW8FtR4+NachacwUjI62
qwb6YYAIaS+xqke/iD6/fER9u44uRSHTEZIMNa4enYYQtJrQnI1G1+TW97+Av94n
YGIs7GI926StmjcDx7NoRyPsTnhRGZ8KL2Xyxx+E0oTo3PSTiMERdThu6S38CDcp
aZmN/mcv0OcsTXjqzvbQorSr0TMgVSGrnhAtHQkvVJjmwQ/gfWqssGao7oPzyoIl
HVETJB1zT9D8J6FCvlVikLmNHUIJ+vajhS4NbCx0VBzIgYEelezsTgcKWC4YBPDz
SIvZp4fZsAdV1Ngg0rRVgfD5Y1iPN4b83qyU78zFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUI6jT4n7OOtWyKREkc3M12T6Uy7owHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2VlNDIzMjFmLTdjZWMtNDViYy1iYmVhLTc1NTcwYjAxMTkxOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABMUKcPaFv32o9pnTsx4MlqaLra9
ROopCW0JSq3t3TT+Zg0tAfn3p4gqxuW1ChjKWVueuwPe7y+XYLA/60HzHtDZmrim
XPm74Rn+AoLJFcFeZPidUaj7qFRQykXoxO5APvFMRW3D5hvCHINSk0x9/FMaYTPF
2My3ZhFrLAfxnJ3D9/S9RUI1UrB88VVmfQMbjhPp2tV/TbsuAE6rA2mHgJKbAd22
yX8o80M9DxZPOaK1+qI8kFkZZqIXv8EMsHg+X48SQ4Yg62gic7lBFxCUkfl82UXt
qPC8nJGhqTH00aJGO7n4Xf/3R3EdV3fCuqzjGuunrKboHH2Crrc6sG2FvjA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:33 2024 by rpki-client on console-ams.rpki-client.org