Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0c46f1e0-8bd4-48cb-81d5-659c7bd27a0a.roa
File: 0c46f1e0-8bd4-48cb-81d5-659c7bd27a0a.roa (raw, json)
Hash identifier: zv+9dypd5CkCN1qRls65YMA9RPEGWhChsnUgrrD+VdU=
Subject key identifier: 8B:BE:A4:90:95:FA:7C:A1:6F:4F:8A:A1:EF:2C:BC:CF:4E:B2:15:25
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4B4A75DDDCF12DFC899F54707461D8AFA737450D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0c46f1e0-8bd4-48cb-81d5-659c7bd27a0a.roa
Signing time: Thu 05 Jun 2025 14:03:20 +0000
ROA not before: Thu 05 Jun 2025 14:03:20 +0000
ROA not after: Thu 10 Jul 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:4a:75:dd:dc:f1:2d:fc:89:9f:54:70:74:61:d8:af:a7:37:45:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 5 14:03:20 2025 GMT
Not After : Jul 10 23:59:59 2025 GMT
Subject: serialNumber=bdfac994f29ed56b0b415a9a2756cac9ee94f78beaacf7cf6f6b0bdda2e20d43, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:71:63:f1:1d:db:ec:c5:e8:e4:6d:bb:94:8f:
2a:60:5d:d7:5b:98:01:28:ff:2f:87:65:79:d1:a3:
e9:bb:45:55:49:a2:83:6c:2d:08:c5:5e:45:2d:86:
70:81:e9:35:71:97:09:04:51:4e:58:92:52:a8:bd:
49:1e:5a:2a:a0:ef:e6:6b:e5:ce:44:af:6b:1b:d0:
45:d0:f8:97:15:71:86:bd:a2:2d:87:f5:52:d4:62:
1f:61:2b:00:01:d5:ac:2f:c6:e9:f3:20:12:26:3e:
c3:30:22:9e:d5:f1:9f:ff:ea:65:30:d2:1b:8c:57:
f0:37:9a:1d:0e:6d:89:ca:77:16:f1:6f:13:35:b8:
ff:c0:fd:6b:45:6c:fd:a0:f1:ab:29:8c:56:c6:a8:
20:58:e4:e7:13:ff:73:9a:28:a8:51:d6:19:e5:85:
ab:f7:50:9b:68:7e:da:c6:7f:f6:93:61:e0:7b:d3:
45:4a:71:b1:4f:44:28:12:4f:d7:66:2e:bc:4d:fc:
9e:73:39:b0:6e:ca:f5:d7:4e:44:f2:ee:d2:55:70:
20:4b:02:1a:7d:50:d6:90:8e:88:60:b4:23:97:1a:
21:a9:2d:98:77:6f:f6:ee:30:1a:0c:ac:81:1c:e8:
6b:8f:64:f2:84:a9:0b:0a:22:62:69:6f:ff:73:b7:
c4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BE:A4:90:95:FA:7C:A1:6F:4F:8A:A1:EF:2C:BC:CF:4E:B2:15:25
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0c46f1e0-8bd4-48cb-81d5-659c7bd27a0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
55:4e:67:b8:db:f5:c2:a7:12:5f:5e:71:8e:94:d4:0a:75:6a:
b8:b9:20:a2:9e:4c:7d:e3:8f:85:b1:82:1d:c4:86:f5:5e:89:
fc:7b:04:c3:f6:9d:64:db:41:c3:69:ea:69:9f:bc:d2:b1:ee:
26:a7:1f:ce:ea:42:f8:fe:09:a8:7c:e1:db:fa:77:38:ae:c1:
74:4b:c2:65:2e:ae:6a:de:f5:07:07:b0:85:37:27:28:ce:71:
06:60:e2:e0:26:e2:61:be:d1:ff:6a:cb:ca:ca:5c:61:46:4a:
4b:d5:bd:ec:4a:5d:2a:58:42:22:2a:59:63:9f:6c:bb:fe:90:
74:9d:ab:55:f9:dc:8a:e0:99:a0:fb:ad:69:af:d4:1f:9f:54:
36:c6:8b:00:c4:58:a6:dc:44:7b:81:c7:56:b1:55:b5:ce:80:
26:78:83:6a:eb:23:25:4e:ab:89:af:27:b2:7e:95:86:ae:a5:
e9:0f:53:17:fa:08:22:47:c8:0e:d6:82:e2:c2:c8:c7:ed:97:
1b:16:88:de:c5:75:c2:e8:95:be:70:e8:43:a2:ca:5a:35:67:
b6:46:66:38:f7:71:63:0b:1c:6d:4c:d0:68:42:d2:77:db:e9:
85:39:14:74:77:10:bb:4d:ba:30:6a:b1:14:f0:97:e3:33:ff:
ed:e6:01:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:53:35 2025 by rpki-client