Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1827b8d5-1d93-4554-ab23-6150a4c714c8.roa
File: 1827b8d5-1d93-4554-ab23-6150a4c714c8.roa (raw, json)
Hash identifier: OnvYjWTwrcnqIdyQ7hLicfVZtJ1xGUm7Zwsk4lcEwzQ=
Subject key identifier: EA:EB:D1:13:53:63:6D:A4:15:8F:69:9F:E2:9F:C8:A1:52:F8:09:ED
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 32D7FE617BC5DE0667DB5AF2749FD5C66D91EC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1827b8d5-1d93-4554-ab23-6150a4c714c8.roa
Signing time: Thu 12 Jun 2025 07:08:17 +0000
ROA not before: Thu 12 Jun 2025 07:08:17 +0000
ROA not after: Thu 17 Jul 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Jun 2025 07:23:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:d7:fe:61:7b:c5:de:06:67:db:5a:f2:74:9f:d5:c6:6d:91:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 12 07:08:17 2025 GMT
Not After : Jul 17 23:59:59 2025 GMT
Subject: serialNumber=d59b6ddca37c00a93d2ed6d575b750aaddb58a396fdb4227006c06014cdd5f87, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:77:b7:47:b8:50:6e:c8:86:7f:9f:1b:d7:13:
05:b1:63:66:20:ed:94:6f:08:9e:53:c4:83:c8:c3:
79:66:cf:2d:2b:68:ba:1a:7b:12:a4:ba:dc:e6:c0:
90:32:a7:fe:ed:77:e6:a9:56:a7:aa:fc:3f:42:e3:
a7:3d:b7:e5:39:dc:69:a8:fb:37:e6:7a:5b:2c:c5:
a3:3b:18:11:33:f1:89:69:7a:f7:ef:bf:f6:da:66:
82:9f:65:71:3a:00:b8:02:79:18:59:bf:01:cd:e8:
18:5e:4c:80:98:47:43:4d:b6:b4:31:13:3a:b3:4f:
98:41:c7:8c:dc:cc:b4:b2:93:17:2c:a9:b6:6d:6e:
7f:84:41:1d:44:53:c4:e6:2a:e0:73:af:4c:cc:97:
3b:52:2e:e2:68:80:cb:b2:f2:04:b6:c9:93:3b:a5:
a3:9e:6a:59:1b:df:0f:86:a6:4b:44:20:3e:36:2e:
40:69:84:3b:ea:54:24:20:87:e0:7c:5c:a9:9e:ef:
c8:6e:69:4a:cc:77:52:86:75:5f:31:13:27:90:fc:
9f:2a:03:17:07:93:a7:1e:d6:06:67:22:6e:9f:29:
11:4f:3f:2c:27:ed:c2:7e:0b:3c:ae:cb:0c:4f:e6:
3c:06:59:43:54:97:9e:db:3d:69:b4:64:d2:bc:24:
93:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EB:D1:13:53:63:6D:A4:15:8F:69:9F:E2:9F:C8:A1:52:F8:09:ED
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1827b8d5-1d93-4554-ab23-6150a4c714c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
39:4d:a4:f3:e1:19:4c:73:4c:fe:98:89:b2:a1:8c:8e:30:0c:
1c:73:75:fc:32:d3:5f:3e:c7:7b:3d:44:db:52:a2:9f:1f:27:
10:7f:3c:5f:69:77:36:12:b7:94:42:42:f5:78:52:30:df:98:
9d:db:1d:bb:95:3b:ad:cc:f3:96:b3:55:98:25:a5:e9:55:9a:
da:0b:11:f2:e1:20:6c:20:99:ad:fb:f1:62:de:13:31:9f:a8:
2d:e0:f4:10:95:c1:12:6f:a2:b0:4e:8d:e6:15:cb:d8:77:a6:
21:11:b6:25:d4:12:28:c1:b7:95:03:e3:43:ec:1f:9d:e5:4b:
d7:33:c0:32:4b:a1:ee:4d:5a:d9:0c:37:7e:12:91:67:3c:e1:
94:ea:95:3d:ca:b0:e8:42:d9:4c:99:86:24:bd:94:b3:eb:4d:
bc:1c:22:41:2c:97:9c:94:90:e3:a9:19:06:99:7e:4d:24:f8:
e3:f2:09:05:ae:27:33:8d:36:19:d4:8d:a1:2e:84:4c:2b:a2:
be:89:14:01:98:75:fd:83:67:a7:bd:50:22:2a:91:10:70:22:
5a:ad:da:99:a4:d1:bd:8c:6d:db:f5:75:45:e9:6b:d7:c8:61:
4b:0b:e8:07:e6:fc:fd:2b:ce:4c:f4:30:cd:a9:7d:e3:0d:aa:
6e:d6:64:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:58:25 2025 by rpki-client