Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0e6dd5f1-cfb9-41d0-9cda-1871769b617b.roa
File: 0e6dd5f1-cfb9-41d0-9cda-1871769b617b.roa (raw, json)
Hash identifier: cK+5TjYGhcGtmjLakdjrh1Fe3jbFmQpaHauWpx3V7AA=
Subject key identifier: 44:44:67:CF:82:F8:AB:4F:78:DD:39:D9:4A:3E:9C:54:6B:B8:DD:50
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 151C3FB8EB4365F6091E91960FA92EBEB8E73C17
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0e6dd5f1-cfb9-41d0-9cda-1871769b617b.roa
Signing time: Mon 12 May 2025 10:28:18 +0000
ROA not before: Mon 12 May 2025 10:28:18 +0000
ROA not after: Mon 16 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 10:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:1c:3f:b8:eb:43:65:f6:09:1e:91:96:0f:a9:2e:be:b8:e7:3c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 12 10:28:18 2025 GMT
Not After : Jun 16 23:59:59 2025 GMT
Subject: serialNumber=4481297a737408e9580be504a87279c048e7ee0cec5533b325474795f3b849c2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ee:ac:c4:f0:87:a7:a8:52:be:a7:55:2a:0e:
37:1e:ba:92:e8:84:20:7c:a9:69:7b:33:44:59:6a:
8a:52:14:a9:b0:f1:72:b6:b5:b8:1d:7e:f8:96:ac:
be:c4:12:cb:c8:1c:40:a0:89:02:61:c7:10:a5:0f:
47:80:fb:4c:74:7d:60:50:e5:c9:80:50:69:e3:21:
d9:59:50:9f:b6:3f:6f:6f:b9:02:35:31:38:4f:c7:
65:c7:79:56:73:1d:da:c5:a1:65:de:b8:cb:df:7f:
f4:19:1b:57:8f:3c:10:87:1b:ac:74:cd:cc:cf:c1:
52:15:d5:ce:bc:c9:d0:aa:92:1a:0e:b5:15:63:98:
59:44:72:2c:84:fc:07:02:f6:4c:31:6b:b5:39:92:
c3:e5:d0:c3:ca:dd:d3:81:31:de:1c:68:b9:bc:33:
ce:7e:61:c7:b1:6c:8d:13:87:4d:4d:28:f4:c3:ee:
9a:8f:bf:75:c2:51:d8:87:8e:0b:ae:9c:bf:83:49:
1b:fc:3c:5f:cd:48:58:49:8b:10:82:53:54:b9:3f:
43:0f:b5:8f:85:7c:e3:b8:6b:0c:b4:3e:b4:a9:ce:
7a:7d:fa:2f:ac:da:fe:9c:91:79:4c:cb:68:f0:eb:
44:49:aa:ab:cb:8b:5c:d8:10:7a:2d:97:8a:5a:47:
60:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:44:67:CF:82:F8:AB:4F:78:DD:39:D9:4A:3E:9C:54:6B:B8:DD:50
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0e6dd5f1-cfb9-41d0-9cda-1871769b617b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
67:50:2c:c1:4a:41:95:e0:d7:cc:ac:83:74:7b:e0:23:e4:da:
63:13:b8:81:59:7d:26:60:e9:7c:70:d0:5c:b2:b7:3a:63:4f:
17:5e:dc:78:e8:3b:ff:f4:b1:4d:70:f8:ac:9b:c0:b8:3c:90:
3a:0a:d4:c6:fe:f4:84:c8:96:df:72:d7:16:e3:a0:3c:14:04:
07:a5:54:17:e3:68:c0:da:3f:4b:12:8a:7a:74:96:6c:6b:9f:
95:30:d4:21:29:d8:70:d8:ff:f8:2b:77:ba:1f:d1:d9:ab:b0:
0c:f3:17:96:d0:5c:a6:d6:2c:9b:65:cc:a7:fd:f9:48:42:a6:
52:b9:26:9e:2e:1b:71:b4:50:0a:2e:11:2d:2b:8e:5e:f2:f3:
2b:72:a8:5b:23:fa:1f:ac:59:23:1c:0d:f5:76:e4:50:1c:34:
17:69:b2:09:76:7c:1e:49:2f:62:d0:37:eb:51:18:9e:49:09:
58:c3:5f:8a:f3:0d:0f:27:29:22:f4:f9:f3:10:75:8e:a8:97:
36:5e:9e:c9:54:78:44:04:5b:fe:c4:49:e4:ea:81:5e:46:08:
64:1c:d4:99:e4:fd:8e:46:52:67:95:c4:11:a6:45:c9:31:13:
05:10:e9:54:df:ce:cd:5c:21:a6:3a:fb:d8:ed:01:53:21:27:
7d:2f:78:33
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFRw/uOtDZfYJHpGWD6kuvrjnPBcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNTEyMTAyODE4WhcNMjUwNjE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A0NDgxMjk3YTczNzQwOGU5NTgwYmU1MDRhODcyNzljMDQ4
ZTdlZTBjZWM1NTMzYjMyNTQ3NDc5NWYzYjg0OWMyMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCa7qzE8IenqFK+p1UqDjceupLohCB8qWl7M0RZaopSFKmw
8XK2tbgdfviWrL7EEsvIHECgiQJhxxClD0eA+0x0fWBQ5cmAUGnjIdlZUJ+2P29v
uQI1MThPx2XHeVZzHdrFoWXeuMvff/QZG1ePPBCHG6x0zczPwVIV1c68ydCqkhoO
tRVjmFlEciyE/AcC9kwxa7U5ksPl0MPK3dOBMd4caLm8M85+YcexbI0Th01NKPTD
7pqPv3XCUdiHjguunL+DSRv8PF/NSFhJixCCU1S5P0MPtY+FfOO4awy0PrSpznp9
+i+s2v6ckXlMy2jw60RJqqvLi1zYEHotl4paR2DhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQURERnz4L4q0943TnZSj6cVGu43VAwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzBlNmRkNWYxLWNmYjktNDFkMC05Y2RhLTE4NzE3NjliNjE3Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGdQLMFKQZXg18ysg3R74CPk2mMT
uIFZfSZg6Xxw0FyytzpjTxde3HjoO//0sU1w+KybwLg8kDoK1Mb+9ITIlt9y1xbj
oDwUBAelVBfjaMDaP0sSinp0lmxrn5Uw1CEp2HDY//grd7of0dmrsAzzF5bQXKbW
LJtlzKf9+UhCplK5Jp4uG3G0UAouES0rjl7y8ytyqFsj+h+sWSMcDfV25FAcNBdp
sgl2fB5JL2LQN+tRGJ5JCVjDX4rzDQ8nKSL0+fMQdY6olzZenslUeEQEW/7ESeTq
gV5GCGQc1Jnk/Y5GUmeVxBGmRckxEwUQ6VTfzs1cIaY6+9jtAVMhJ30veDM=
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:49:47 2025 by rpki-client