Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0802493e-2a49-4b6a-b64c-bdb68c4c8de5.roa
File: 0802493e-2a49-4b6a-b64c-bdb68c4c8de5.roa (raw, json)
Hash identifier: tsdPwVhHB8OEP8rMoaWld4pHBi3NZdMqtLL8Tqp7nOY=
Subject key identifier: D3:FA:DF:4A:EA:6C:6C:05:77:F9:DE:CC:C9:A2:25:EC:97:DE:D9:ED
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 652ACA3CAF369213B57A0D71F13530EF8A8F0A57
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0802493e-2a49-4b6a-b64c-bdb68c4c8de5.roa
Signing time: Thu 10 Apr 2025 09:38:27 +0000
ROA not before: Thu 10 Apr 2025 09:38:27 +0000
ROA not after: Thu 15 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 09:58:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:2a:ca:3c:af:36:92:13:b5:7a:0d:71:f1:35:30:ef:8a:8f:0a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 10 09:38:27 2025 GMT
Not After : May 15 23:59:59 2025 GMT
Subject: serialNumber=04843e6e18a0b9423efed227d94a4ae02a9988ea3d809693691b4f534e3b88fa, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:af:09:db:a2:c7:d1:8a:bc:03:2c:74:86:4d:
4c:98:a0:f9:57:ae:c1:f6:33:dd:08:b7:d5:65:fa:
63:50:13:f0:d5:9d:42:6e:1a:91:84:96:c6:75:ed:
e9:45:84:fd:f5:47:64:6b:42:57:c9:c2:b4:6a:f4:
5c:1c:de:ba:7d:e8:db:aa:31:8b:22:cc:b3:68:b8:
5a:ef:ec:4f:00:c8:ca:75:56:fc:7d:10:1f:d0:9d:
2c:de:59:4f:92:38:ae:7f:2d:c6:90:76:cf:9f:4c:
f8:72:39:3a:38:46:f3:83:87:ce:53:f6:b5:4b:62:
f9:57:30:13:e8:5b:0c:bc:08:2c:45:a5:1d:bd:f5:
1c:96:7d:fa:4c:39:bc:9b:db:cc:61:be:6c:0a:f9:
b7:bf:06:79:78:e5:87:91:6c:98:c7:c9:ee:2c:59:
69:56:34:8e:ce:ca:0d:72:00:99:06:a7:0f:bb:bf:
04:bf:cb:1c:3c:08:d4:33:68:45:6d:84:0a:3b:bf:
67:c9:0a:2c:9c:0a:da:d0:a2:a6:f8:d7:b6:79:1a:
36:c8:a2:35:74:a9:d4:b2:d0:bd:ae:1c:ea:7b:17:
ad:46:96:c4:5a:7b:a0:be:f8:2d:ca:4c:70:85:bb:
bd:e0:5c:5f:93:bf:12:d0:15:a8:c5:3c:d8:b9:00:
5e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FA:DF:4A:EA:6C:6C:05:77:F9:DE:CC:C9:A2:25:EC:97:DE:D9:ED
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0802493e-2a49-4b6a-b64c-bdb68c4c8de5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:02:e3:19:99:68:2d:17:49:d3:ad:f1:26:8c:32:da:75:7e:
2e:c2:29:9a:f3:3a:cc:c8:c8:0e:c3:12:d8:82:d3:39:78:bf:
a3:d2:83:56:4c:ee:2d:6d:be:3c:a1:7f:5f:77:59:68:f6:2c:
0c:35:0a:ec:55:9d:71:83:98:90:06:8b:58:ae:0c:ee:cd:6b:
3c:95:ff:a2:2b:93:d9:b5:5b:93:34:af:db:59:88:42:ae:af:
16:38:63:ff:fb:99:a6:b6:38:63:53:20:e3:72:cd:9e:36:9b:
6a:78:94:cc:41:5c:07:0c:c3:9c:72:13:76:01:73:31:b2:40:
5f:17:e0:9d:0e:73:7b:78:76:c8:f4:0a:4b:c3:3a:0f:f3:f8:
e3:b8:08:b6:75:6a:d9:b4:d7:f1:06:b0:53:df:32:f1:7e:9f:
a4:86:06:b7:6f:7d:9c:ec:c1:31:37:f8:d3:67:6f:b3:bc:09:
8e:2a:ad:24:f6:12:5a:f0:02:08:a1:0f:5c:b1:a8:16:4a:08:
54:8c:03:a1:7a:b6:eb:ec:a9:95:63:ae:c7:aa:4e:61:de:94:
e4:ee:c8:36:6b:9b:96:81:62:29:0c:e4:fb:52:61:fb:b1:e4:
e2:42:36:b8:72:3d:25:96:ea:dd:8c:55:d7:07:b5:32:7e:95:
2c:8e:ea:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:37:47 2025 by rpki-client