Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c926a3b-14fd-42b1-94ab-8047296393aa.roa
File: 1c926a3b-14fd-42b1-94ab-8047296393aa.roa (raw, json)
Hash identifier: w5aKBRjZSgxMr8j6D9zqzx44dpttL2nmfes1z+HatXA=
Subject key identifier: 5A:8C:FA:52:8D:2F:94:B8:CA:16:2B:75:62:45:29:DB:01:2F:FD:43
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7D12D723F27093D730A465CB45F733A40BF68F4E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c926a3b-14fd-42b1-94ab-8047296393aa.roa
Signing time: Tue 08 Apr 2025 02:03:19 +0000
ROA not before: Tue 08 Apr 2025 02:03:19 +0000
ROA not after: Tue 13 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Apr 2025 02:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:12:d7:23:f2:70:93:d7:30:a4:65:cb:45:f7:33:a4:0b:f6:8f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 8 02:03:19 2025 GMT
Not After : May 13 23:59:59 2025 GMT
Subject: serialNumber=38b3072bc3225489fbb5b09ae1c4d96e11369efba32e1e9b36ef17d68d1aca06, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:83:74:f7:c2:4e:dd:9e:40:fb:ba:b3:49:
a5:25:56:e3:7e:ad:d2:4b:bf:6f:55:ff:6f:7a:4a:
03:3f:68:d4:ac:19:ca:e2:73:d9:9d:f6:23:fd:9b:
06:da:76:ab:6d:ad:76:85:d1:70:ea:b5:92:a8:5c:
4c:69:1d:30:2a:00:09:3d:ff:10:4b:56:6b:8a:cf:
0c:2b:a7:c9:7e:3f:c4:2a:8a:e8:ba:b0:b0:7f:fc:
ee:b9:34:96:45:cf:65:07:5b:03:37:3b:fb:3e:0f:
38:85:bc:ac:e0:85:82:01:ec:99:80:78:27:f4:7c:
74:e5:55:cf:ff:72:dd:59:bc:02:b4:1f:c2:06:81:
9c:2c:f3:b0:f0:58:44:a7:36:ac:11:33:48:23:f1:
81:b2:58:a4:12:36:f3:81:16:7e:aa:c6:ad:20:2a:
ab:1f:9b:9b:4e:60:32:b2:b9:93:66:ad:e2:fe:5e:
18:5e:61:ba:9b:71:ed:48:a1:a2:ae:93:ea:36:eb:
a4:f3:90:b3:4d:bf:89:5c:d1:1d:72:91:b9:58:0c:
c0:02:c7:8d:b7:22:c9:9d:9f:a8:9f:b1:32:ba:b5:
18:e2:98:c4:a7:be:81:55:ec:22:1c:0c:32:bb:a9:
d3:8d:9c:52:4e:4b:80:b3:48:23:5c:d3:ad:50:c7:
2a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8C:FA:52:8D:2F:94:B8:CA:16:2B:75:62:45:29:DB:01:2F:FD:43
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c926a3b-14fd-42b1-94ab-8047296393aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:de:1a:b0:26:53:52:e2:c9:9d:b8:e1:2b:23:5e:a2:b5:ef:
37:5c:4c:4d:d4:20:65:18:80:ca:cf:7c:56:b1:07:70:0f:e5:
e0:f2:1b:33:80:23:4d:b4:4f:ec:36:db:b3:fd:2a:10:98:35:
5b:f6:56:d4:80:60:22:22:33:87:c0:f0:b1:12:3d:8f:a8:63:
4f:8d:1d:33:fb:3e:dd:ae:67:ad:7f:66:b2:99:17:04:82:de:
1e:01:dc:e8:f7:b0:ef:88:a5:7a:45:4e:9c:dd:c9:06:39:ad:
2e:87:dd:79:0f:e1:32:46:c8:0d:e3:68:c3:29:db:46:4e:9b:
d5:52:9a:05:32:f6:17:6e:30:21:7e:7c:da:9a:3a:53:3b:f7:
b3:e5:74:2f:7c:30:d3:01:77:97:59:f0:5f:39:3c:4f:ef:4d:
93:fe:85:fb:d5:23:4c:27:32:36:18:24:69:ed:c8:78:4e:1f:
b1:b9:e8:b8:cb:5b:ce:bc:20:71:bf:2a:d8:bf:39:c5:e0:47:
b9:9f:b2:d4:28:2b:d9:97:4c:5d:fb:61:72:c4:ad:92:29:b4:
61:41:2e:30:6c:75:3f:58:a4:49:1c:92:10:3f:0e:c4:03:10:
17:7c:f6:0b:98:7c:58:df:bb:84:97:4c:3d:c3:38:21:e9:3b:
6e:c3:60:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:32:25 2025 by rpki-client