Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1bc46d67-a109-4565-94f6-7c660510b53c.roa
File: 1bc46d67-a109-4565-94f6-7c660510b53c.roa (raw, json)
Hash identifier: nGhFiEsjvdCf7tblnanZ38m1GNtA4ftmDwKQiomvcrE=
Subject key identifier: 81:0B:2E:EB:36:FF:59:D9:0E:1D:FE:69:B8:3C:05:80:AD:48:14:35
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 172CF0549C9330ECD87C73C17D353DA9131DF9A4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1bc46d67-a109-4565-94f6-7c660510b53c.roa
Signing time: Fri 11 Apr 2025 23:23:20 +0000
ROA not before: Fri 11 Apr 2025 23:23:20 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Apr 2025 23:43:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:2c:f0:54:9c:93:30:ec:d8:7c:73:c1:7d:35:3d:a9:13:1d:f9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 11 23:23:20 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=a973f07b860c104b506b008a7681e91c41d76fd3dc5272cd3d86ca5da19792eb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:76:6d:e7:d4:d4:91:70:57:95:99:34:0f:cb:
a9:2f:ca:d7:32:10:98:02:a7:a5:df:5b:fe:f2:1d:
3c:b4:f4:3c:d5:13:8e:b4:96:6c:62:6b:d5:70:8f:
e7:3b:67:d7:27:aa:c6:3e:12:c2:9b:c6:c2:a8:bc:
fa:e3:77:cc:96:ed:65:e4:19:0f:d5:a4:ac:91:79:
6b:c6:27:83:5b:a4:d8:8f:27:2f:66:3f:7f:ce:64:
e0:f4:d6:f4:e6:d3:fc:56:aa:59:b9:2d:f4:43:43:
95:de:85:99:ca:fb:db:89:40:83:b1:53:09:a8:af:
5b:09:8e:b7:d8:2f:00:0e:da:b0:83:c9:3f:8d:54:
44:2b:a8:90:40:b6:17:a0:3c:78:e6:dc:bf:14:db:
37:7d:d0:eb:40:a5:28:6f:10:27:fd:c3:7b:29:ce:
56:5f:f8:a1:fc:ad:39:99:23:f1:55:1f:6f:c8:d2:
84:04:cf:d1:4b:30:74:3c:86:7c:b7:15:6e:2d:33:
35:4e:d0:24:6c:2e:18:cc:4d:ca:78:4d:77:66:d5:
b3:8e:0d:f1:e7:75:1f:2a:72:f4:7a:d8:04:f9:56:
f9:56:1c:5b:85:28:a5:98:52:4d:11:0e:22:8c:e1:
b2:00:f9:ae:f0:d8:0a:b2:2c:90:b3:08:58:92:7d:
03:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0B:2E:EB:36:FF:59:D9:0E:1D:FE:69:B8:3C:05:80:AD:48:14:35
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1bc46d67-a109-4565-94f6-7c660510b53c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
99:1b:dd:12:c5:01:2d:91:de:df:7c:ee:fd:73:79:5a:36:26:
17:21:e1:98:11:3c:48:fb:14:43:76:2f:f4:3b:e2:29:07:00:
88:30:ad:cf:89:2b:a0:1d:e6:3b:4c:b7:ed:4d:79:69:21:50:
67:21:44:27:e7:a2:88:ba:6e:a8:cf:39:4b:3c:23:c6:c2:4f:
77:75:e6:b2:3e:bb:f6:5d:c8:22:da:2d:a9:cc:de:d2:dd:e5:
e6:c7:78:4e:d1:41:85:07:7f:4b:39:43:f7:6f:21:84:b8:62:
6a:1e:cd:58:3d:a0:cf:f4:a9:b2:8e:70:12:9b:15:33:09:0d:
8b:19:bf:ef:5a:58:63:c7:17:fb:b7:7e:4a:25:cc:d7:f1:2d:
41:f5:12:97:32:f4:ed:ac:50:d7:f6:26:19:60:11:dc:82:fa:
38:60:a2:8e:2f:1d:7c:66:ed:59:6b:35:04:dc:46:23:0f:49:
ce:d9:20:c2:89:33:de:f6:90:bd:e9:6f:28:10:fe:39:63:76:
29:fc:92:97:94:6f:7b:e8:f4:c3:94:19:3d:55:bd:65:13:b4:
b7:66:d4:68:89:df:2b:1b:98:3d:cd:f3:fb:64:8d:76:b3:77:
0d:5d:8e:65:4d:f2:7b:d8:55:87:6f:bb:fd:83:57:00:44:6c:
99:de:9f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:11:24 2025 by rpki-client