Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0f4cad8f-ba08-4c9a-9723-a7016b397fb9.roa
File: 0f4cad8f-ba08-4c9a-9723-a7016b397fb9.roa (raw, json)
Hash identifier: lv9WdtEdgmLhpq+hkGHDsPDHppeYvtnttgLHlJnv+f4=
Subject key identifier: 33:B8:0B:E4:CC:B8:AB:34:2C:BD:55:8B:CF:59:E2:1B:B4:05:98:79
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3668ACDFC8017755038B6E7E651559C4D737D847
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0f4cad8f-ba08-4c9a-9723-a7016b397fb9.roa
Signing time: Thu 17 Apr 2025 17:03:21 +0000
ROA not before: Thu 17 Apr 2025 17:03:21 +0000
ROA not after: Thu 22 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 17:23:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:68:ac:df:c8:01:77:55:03:8b:6e:7e:65:15:59:c4:d7:37:d8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 17 17:03:21 2025 GMT
Not After : May 22 23:59:59 2025 GMT
Subject: serialNumber=a509f0ca7f6234f5bfbff7a63b3af63c2d256767ce2964a3f9fe4983fdc06440, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:54:b2:7e:05:3e:23:b3:46:05:85:e8:43:e4:
54:47:88:7d:43:1f:d9:6e:25:74:fe:09:f6:15:d0:
ed:b8:15:a3:9e:49:69:81:a3:1c:16:54:f8:c1:3d:
8e:b8:18:13:fb:f8:05:04:ec:4e:c1:05:17:e8:03:
f2:37:50:13:f3:58:dd:83:7c:28:60:2b:cd:f7:93:
80:e5:9a:b5:31:6b:be:89:09:95:0c:12:e6:9e:a9:
1f:10:6b:46:9c:02:75:92:40:2e:f0:08:fc:5e:28:
7c:c9:55:70:a3:96:ce:cf:75:b5:ac:f7:a4:b6:72:
5a:b8:93:61:bc:60:02:38:52:13:8b:15:71:88:ea:
f9:30:c4:14:b0:a8:80:c8:83:09:0f:39:5d:6b:73:
25:26:3a:6e:ff:2f:d0:7f:1b:46:c2:fc:e5:27:1d:
06:b0:42:3a:4d:d6:09:64:cc:49:b1:29:8f:8e:9f:
b6:74:78:cc:20:fb:bb:50:36:b1:c5:b1:d8:44:de:
50:dd:0d:d8:db:04:31:b6:c9:5c:f6:22:0b:48:ff:
e1:98:ee:9c:27:a0:84:0d:1b:51:57:1e:9c:ed:f6:
f5:a1:f9:53:68:f3:00:8c:93:04:47:e5:fd:a0:0c:
92:68:ff:fb:1d:6a:f2:e7:f7:29:30:68:2f:2c:93:
d5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B8:0B:E4:CC:B8:AB:34:2C:BD:55:8B:CF:59:E2:1B:B4:05:98:79
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0f4cad8f-ba08-4c9a-9723-a7016b397fb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:71:a4:82:4c:90:5e:c4:02:23:4f:16:52:55:3f:eb:72:64:
1f:8b:0b:ad:9e:87:42:2c:c5:48:d2:bb:fb:92:8c:fe:6d:cb:
f9:3b:bb:9a:e0:83:65:f1:0a:52:0e:5d:a7:46:25:b1:fa:4f:
64:c2:18:cb:2d:6d:c4:40:7c:50:05:18:e7:e5:98:70:de:d7:
6c:3f:9c:90:97:a4:31:03:fb:ae:0c:09:ff:8e:87:01:dc:86:
87:9d:63:27:8d:f4:37:b5:a4:ed:3b:73:5c:3a:df:0b:77:61:
9b:14:4f:c9:eb:ce:b3:94:fa:31:e1:cf:02:74:77:83:96:48:
3d:a2:21:62:04:00:43:21:70:27:29:de:63:7f:ba:07:ad:b4:
3c:88:1c:0c:5a:73:48:2a:2c:e7:60:7b:4d:0e:89:87:99:e8:
86:53:63:c8:b9:ac:d9:0d:b7:58:19:f0:ec:45:29:16:3f:b7:
f2:60:9f:2b:df:11:45:7c:76:4f:5c:ea:ce:48:b3:ca:62:30:
7f:3d:8c:69:64:8f:42:57:7a:39:52:4c:28:76:7b:dc:7b:ad:
76:79:c3:7a:1d:83:c6:d9:4f:59:fe:2c:d3:83:28:e2:0b:28:
bf:2a:f5:90:1c:c0:4f:54:93:43:76:0c:e2:c7:4d:79:72:87:
55:f5:2b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:02:50 2025 by rpki-client