Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/04eadb8f-c08f-453f-a879-18612c222945.roa
File: 04eadb8f-c08f-453f-a879-18612c222945.roa (raw, json)
Hash identifier: P+p6WtGlY39eY/q4p/C99A2ptYVuUD0p78f8SssMs0E=
Subject key identifier: 0C:22:9E:D3:0E:D9:89:1A:07:6D:AE:BC:B8:81:C9:04:99:CD:B2:C6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 77638B43515B19EC8164C321B9AEBC60F1F936A2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/04eadb8f-c08f-453f-a879-18612c222945.roa
Signing time: Tue 22 Apr 2025 21:23:19 +0000
ROA not before: Tue 22 Apr 2025 21:23:19 +0000
ROA not after: Tue 27 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Apr 2025 21:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:63:8b:43:51:5b:19:ec:81:64:c3:21:b9:ae:bc:60:f1:f9:36:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 22 21:23:19 2025 GMT
Not After : May 27 23:59:59 2025 GMT
Subject: serialNumber=96e8ff5b3fb4565133db2df8122a9fb9e1d134ba168f310f40b913e2e69e01a6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:68:c3:9b:7c:50:e3:df:5f:27:80:f0:92:e4:
22:73:91:b9:59:cf:49:b5:79:36:26:4a:6c:4d:1d:
0d:e6:bf:f4:58:07:52:2a:cf:b5:94:5f:ae:38:d0:
d9:ea:f3:98:00:ba:99:da:72:21:6b:12:05:8d:ad:
68:fe:5d:0a:75:32:b5:3e:44:31:8b:4c:ef:17:f2:
4f:2a:b1:60:0c:8f:88:94:a7:3d:2d:57:bb:26:2e:
ef:41:8f:1e:5e:cd:4e:fe:12:bb:72:af:65:4c:c2:
b2:1f:7d:7d:37:69:97:f6:32:98:30:86:f9:d9:00:
c5:e3:43:08:11:fc:da:e2:a5:2e:ff:3d:26:f2:59:
8a:34:11:37:ca:1d:7d:ae:da:89:9e:c6:6f:f6:68:
52:99:67:52:52:fd:fe:eb:6e:14:43:2f:59:4a:7b:
0e:44:45:93:f0:62:d2:f6:d1:97:92:4a:86:e6:ae:
32:1f:50:0a:74:99:b5:6f:a8:0a:62:d8:3d:21:ca:
65:f0:fd:d6:b7:b4:f5:e2:51:f5:59:4f:cc:f6:e3:
36:19:45:1b:18:84:1b:84:2f:9b:49:ba:47:43:ed:
18:8e:37:86:84:aa:bd:36:bd:8a:78:e3:09:a4:ce:
85:6c:23:f2:e6:a2:83:8d:ca:91:13:7d:bc:a9:8c:
ca:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:22:9E:D3:0E:D9:89:1A:07:6D:AE:BC:B8:81:C9:04:99:CD:B2:C6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/04eadb8f-c08f-453f-a879-18612c222945.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
32:b5:ac:04:04:f8:9b:c9:8f:7f:1b:93:79:68:8d:1c:9d:db:
37:03:eb:0f:97:8e:06:bd:7f:e0:0a:65:2a:64:eb:9e:f0:85:
77:e9:7a:04:19:7c:d0:bb:30:05:73:c5:ae:3b:07:07:6c:a5:
7f:1e:62:4e:56:75:67:4e:59:b0:e4:6e:ec:7d:70:2c:ef:35:
9d:fa:23:ff:4f:27:f6:36:58:16:34:8e:e2:d3:73:fd:b5:c7:
0a:47:cb:4d:ae:a2:b9:20:0e:47:ef:f3:21:6b:d7:37:8a:22:
f5:6f:c4:ad:5f:e0:c3:da:01:17:9e:df:7f:93:d9:81:72:09:
4f:c0:16:34:79:87:db:00:e5:73:34:c9:2d:81:1b:8a:5c:d9:
dd:d5:8d:df:7f:56:9e:0d:cf:74:12:7a:9f:74:fa:54:be:08:
94:9f:78:76:0e:48:61:75:b3:57:21:46:3e:87:c6:f9:74:c9:
96:ec:23:65:54:62:7b:02:07:64:65:ac:f8:05:65:82:f3:23:
0a:2a:81:69:f6:15:36:ef:a0:c0:61:1a:bb:bd:75:28:92:18:
5b:1a:04:ef:da:77:1c:27:6d:c3:1c:97:0b:45:db:08:36:aa:
b2:fc:94:43:bd:cc:27:19:18:0d:b2:4d:60:08:c6:3c:b2:32:
0a:47:a8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:40:56 2025 by rpki-client