Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/199925e0-44f1-4376-8c88-26f9282a4667.roa
File: 199925e0-44f1-4376-8c88-26f9282a4667.roa (raw, json)
Hash identifier: nNOsFVTpUNYdVW3aQpW4Yrxo6LA2LprL1bLHj1zwZb8=
Subject key identifier: 41:CB:AA:F3:34:55:67:52:BF:0D:13:27:75:F8:A0:6C:CE:F8:30:8C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7F781E877C665286C7B19E4E177A6CE038DDE0D4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/199925e0-44f1-4376-8c88-26f9282a4667.roa
Signing time: Thu 05 Jun 2025 20:28:22 +0000
ROA not before: Thu 05 Jun 2025 20:28:22 +0000
ROA not after: Thu 10 Jul 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 20:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:78:1e:87:7c:66:52:86:c7:b1:9e:4e:17:7a:6c:e0:38:dd:e0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 5 20:28:22 2025 GMT
Not After : Jul 10 23:59:59 2025 GMT
Subject: serialNumber=9965d1845b68312e139ea966114db2ff2b26ea671e0cf0cea9faa92a75a6afd4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:77:03:9e:00:2e:b0:ed:95:c8:ca:d8:58:af:
97:44:f7:5d:0c:9f:21:f1:c0:00:d9:eb:33:9c:1d:
88:bd:ef:51:eb:37:43:8e:01:3c:22:1c:cf:c0:03:
e7:d3:df:3c:09:c2:3a:d1:f1:0f:1c:1f:a0:65:f3:
e8:e8:ee:63:0a:87:30:53:fb:c4:85:7a:46:42:a4:
52:59:58:d6:4f:c7:f3:75:25:11:f1:1e:56:4e:45:
3d:f0:3d:1e:4b:4d:da:ed:36:9f:ad:cb:86:d1:9b:
d1:d0:8c:c3:e2:40:b9:08:df:03:01:fd:26:7a:e3:
b2:43:f0:5a:66:d0:fc:26:90:18:f7:a1:9f:76:c2:
d6:0c:68:4d:c1:12:9d:05:2c:89:95:a8:93:fd:1b:
82:b5:17:66:e9:b9:de:53:a6:92:a0:c4:e8:76:ca:
ea:78:af:aa:6d:59:ec:f7:57:19:2d:35:de:f2:f9:
a7:a4:12:05:5e:59:f5:7c:0e:dc:e5:7e:12:17:c0:
c0:ab:e9:29:e5:ae:83:50:04:91:e5:89:65:cc:47:
3e:2b:4b:79:9c:5c:9d:02:df:a6:34:fa:a3:19:18:
2f:b6:64:f0:12:4f:87:ef:9f:b7:6d:50:3e:27:c0:
40:bb:56:a1:22:a5:ec:de:91:e6:e0:b7:6f:08:c5:
87:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CB:AA:F3:34:55:67:52:BF:0D:13:27:75:F8:A0:6C:CE:F8:30:8C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/199925e0-44f1-4376-8c88-26f9282a4667.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
74:4f:c8:b3:ab:3d:68:e3:c5:ac:f9:e9:10:d4:29:03:f2:e5:
68:60:5d:a0:8a:0a:6d:ce:27:76:fd:22:ad:a7:46:7b:04:0f:
af:c7:88:37:48:df:6a:76:06:f6:92:9a:ae:a2:9a:67:49:b8:
37:ae:ad:1a:ee:b2:83:06:90:e2:1f:a2:5b:82:44:c6:91:40:
5d:4c:50:50:01:d0:5f:c1:c5:63:76:ff:f5:9b:f1:72:31:22:
09:64:32:42:ff:a9:cb:36:8c:e4:72:39:cf:a4:e2:62:74:fa:
b0:bc:d9:e3:a9:fa:8a:8a:2b:f1:a9:5a:d2:f6:11:4a:1b:2d:
9c:88:ef:0a:03:06:21:b5:ef:e8:3e:55:eb:cc:e0:c9:f7:8f:
22:9c:e3:ac:d3:4b:62:d0:38:43:0c:83:59:fd:6b:84:1a:2b:
79:64:d3:6d:fc:9a:68:30:e5:86:ab:af:51:34:e9:1c:3c:34:
2d:ae:d9:45:47:34:1b:23:19:d1:2a:9b:5b:47:26:d0:a4:4b:
41:5a:a6:67:ca:13:9d:f7:f2:67:61:2d:fa:29:6a:1a:77:c9:
e0:fb:f4:a1:ba:b2:2f:62:3c:77:09:eb:03:29:7a:b3:4a:2b:
85:6a:9b:7b:ab:c9:c7:9a:9d:3d:0f:69:4a:c4:c6:2e:3a:ea:
21:2d:4e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:47:03 2025 by rpki-client