Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1ba5d336-ed3f-4447-b81f-adb142de2b31.roa
File: 1ba5d336-ed3f-4447-b81f-adb142de2b31.roa (raw, json)
Hash identifier: 5kTvb51iHs+jbvwdpO6XMgavw2mg/I/c1qgN7A3Qw6M=
Subject key identifier: A7:E1:59:D7:4D:81:F8:FF:8F:4F:25:1E:12:CA:D5:47:80:79:C8:AF
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6A344C91681CEB203681597D9C372AD09119B3EB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1ba5d336-ed3f-4447-b81f-adb142de2b31.roa
Signing time: Sun 25 May 2025 02:28:23 +0000
ROA not before: Sun 25 May 2025 02:28:23 +0000
ROA not after: Sun 29 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 May 2025 02:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:34:4c:91:68:1c:eb:20:36:81:59:7d:9c:37:2a:d0:91:19:b3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 25 02:28:23 2025 GMT
Not After : Jun 29 23:59:59 2025 GMT
Subject: serialNumber=ebad3cedd225e5bf78522fd42f2efbeb9fd4d5efc148f4bb63c2b5bc5083ea06, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:59:d2:9b:a5:f4:c6:a8:53:f9:78:f0:17:
a1:89:c7:38:81:49:c2:79:b4:d2:73:22:69:a2:8d:
f8:2e:43:01:57:c9:6f:e2:8f:c8:ed:52:49:77:51:
56:54:92:46:d8:38:18:c5:26:33:6e:10:76:74:e5:
b6:c0:4a:24:ad:a7:53:01:36:f9:35:03:a6:e4:0d:
ab:44:06:7a:63:bf:dd:bd:d1:f1:6e:5c:c7:ec:0f:
80:3d:12:71:34:9a:77:f2:f2:8b:47:a5:89:ec:bb:
12:42:51:77:3a:3e:29:85:ae:ff:14:1a:6e:a2:e5:
65:24:f6:7b:0a:8c:da:1b:ab:4c:44:85:12:72:92:
a8:11:df:f2:16:67:fa:c5:57:50:ba:49:52:08:b5:
4f:a9:42:67:ed:9b:51:5f:48:b2:9f:f9:2d:e7:59:
bc:44:d8:d4:a6:f8:02:68:f2:bb:8f:20:c6:6a:0c:
4c:fa:07:06:37:99:00:a5:6f:e0:85:cd:bc:95:07:
52:00:f4:14:a6:c8:f8:25:ee:5a:45:50:47:d8:30:
e0:3f:f9:56:b6:48:03:f1:43:bd:f1:b9:53:73:5a:
a8:4d:f2:0d:8e:43:96:13:d2:2a:ad:d7:15:5a:7f:
13:12:12:b2:4d:20:1a:d3:a5:68:21:f5:a5:10:14:
a1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E1:59:D7:4D:81:F8:FF:8F:4F:25:1E:12:CA:D5:47:80:79:C8:AF
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1ba5d336-ed3f-4447-b81f-adb142de2b31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ca:b2:52:4a:d1:56:0d:55:5e:2b:18:1c:da:60:6f:ad:4e:
d8:92:bf:db:ee:d7:ee:5d:24:9d:c1:68:31:77:99:c7:5b:be:
dc:64:72:c5:5a:96:c5:23:e4:74:99:5a:2a:0a:8f:f9:8a:88:
b1:7d:69:22:29:05:e0:2c:17:59:10:64:a0:78:f0:1c:a0:4c:
a1:f1:82:af:ba:d4:1e:a3:80:67:68:29:17:4c:33:88:83:9d:
02:14:a4:30:35:b2:92:9f:34:b6:44:ef:8b:56:08:d7:97:ac:
27:7c:31:53:84:18:b2:66:d4:39:99:b3:6e:a2:63:bc:bd:f6:
75:be:67:f7:9a:13:71:ec:01:ac:e3:da:50:b8:c4:fe:29:c7:
9a:d5:88:17:7b:cc:dc:94:d0:3c:ca:7f:87:18:76:d6:3b:9f:
66:f1:2e:f7:78:ad:b2:fc:eb:c2:12:c6:79:52:f6:90:57:78:
24:36:05:71:c2:28:6c:5f:24:19:42:48:0c:dc:69:f3:62:e3:
28:6a:62:c5:d7:34:b8:ed:91:01:d9:d2:e3:a2:b4:7c:e8:ae:
a9:6f:39:fd:2a:3d:17:2c:8f:10:45:9c:04:fb:41:fe:22:56:
f0:40:f1:99:6f:dc:9c:4f:75:bd:2e:f6:dd:c0:0e:e4:93:d8:
61:f1:69:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:41:04 2025 by rpki-client