Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0593fe8a-9558-4aa0-a950-cf486350e7ff.roa
File: 0593fe8a-9558-4aa0-a950-cf486350e7ff.roa (raw, json)
Hash identifier: paQNN8XO7FZfpsS7aXDQRpaVhm5XmtH6q4jXTY6dEcI=
Subject key identifier: C1:40:63:5B:34:C0:0C:C5:C3:7D:65:4B:C8:35:57:DF:6F:2C:EE:CD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6F1B54AA2DB3B5E3618B7D2D3A11C4DFC3B0A21D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0593fe8a-9558-4aa0-a950-cf486350e7ff.roa
Signing time: Fri 23 May 2025 10:23:20 +0000
ROA not before: Fri 23 May 2025 10:23:20 +0000
ROA not after: Fri 27 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 May 2025 10:43:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:1b:54:aa:2d:b3:b5:e3:61:8b:7d:2d:3a:11:c4:df:c3:b0:a2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 23 10:23:20 2025 GMT
Not After : Jun 27 23:59:59 2025 GMT
Subject: serialNumber=e750b9ae382400b66770123904cd19b5bd21a06bb23d774dfe314d63e84b5e3c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:eb:bf:ca:ba:c3:6d:14:28:3a:85:81:57:35:
04:7c:32:c7:67:b2:96:1e:61:6f:96:d0:84:61:4a:
f2:4f:d9:d1:b9:b9:95:4b:00:cc:58:3a:41:ed:bb:
6a:8c:08:c1:ed:4a:dd:ec:27:e1:82:49:b7:b2:d0:
f5:fe:19:b7:d8:2b:40:78:88:1b:0c:6c:e3:e3:84:
c6:78:76:01:67:f2:ce:16:a6:1a:61:d5:15:81:94:
80:0c:85:a1:66:1a:37:2e:b8:42:d8:cf:06:29:7f:
48:a7:f0:ee:65:b4:21:00:14:20:c1:5b:a5:ff:81:
68:24:01:09:22:e5:b8:e7:55:4d:b1:f4:41:ae:2b:
af:77:18:bb:b3:62:dc:c6:26:5b:f2:18:60:e3:59:
0e:1e:be:52:5d:81:a0:88:af:2a:5c:44:ad:cf:d9:
89:3c:c3:48:7a:a8:1d:11:8e:fb:d6:c3:87:de:f5:
7a:11:89:f7:dc:40:9c:54:5b:15:7a:47:d5:0c:18:
29:dd:a7:e1:05:e4:96:86:38:ed:c1:09:cb:77:00:
28:56:8a:12:19:de:73:4d:e6:25:23:73:6c:bb:d1:
00:81:be:41:e8:9d:c8:1f:59:a1:94:7b:40:94:54:
59:8d:64:9d:18:d5:56:04:9d:b2:df:a4:ca:da:8a:
b7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:40:63:5B:34:C0:0C:C5:C3:7D:65:4B:C8:35:57:DF:6F:2C:EE:CD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0593fe8a-9558-4aa0-a950-cf486350e7ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
68:45:dc:5c:f4:6f:3b:25:d3:6e:66:f1:a9:a3:91:69:70:c8:
14:93:f8:e6:69:bf:c1:c9:52:55:a8:f4:48:a7:ce:0d:7b:3f:
3f:76:17:f5:7c:22:83:4c:9b:a4:1c:a4:be:30:df:fe:93:2c:
e4:4e:11:dc:36:ec:fb:b6:2d:fb:b9:28:e2:08:2c:e5:f7:40:
5c:dc:e3:05:0d:d5:78:77:9f:6c:72:6b:17:71:7a:f3:15:09:
aa:4d:ac:73:66:e0:0b:3f:2a:31:2e:fc:c9:b7:7b:60:8e:12:
39:1d:b0:fe:c5:d9:25:c8:1c:1f:68:c2:cc:f6:75:74:3a:75:
11:cc:8d:58:67:d9:e1:87:91:07:f8:25:14:97:e2:47:3e:8c:
e7:d4:8f:22:45:69:06:f4:49:66:10:ec:6e:08:30:e9:20:18:
c0:e2:b4:8d:99:68:9e:b9:d6:98:d4:28:4d:18:57:42:4b:fd:
91:0a:99:fb:04:05:b8:d9:82:17:3a:fb:d0:b0:88:d2:d6:ab:
ee:c7:1d:cb:21:6e:ee:17:ad:0e:6b:b0:1f:28:87:a4:0d:e7:
fa:a6:c3:ee:0d:16:7f:5c:3e:4c:a7:72:c4:f4:f7:9d:32:19:
d7:48:9e:cb:19:e4:c2:9f:b4:31:86:85:f5:40:61:ac:f4:df:
2d:2a:04:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:24:44 2025 by rpki-client