Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1eba903d-0dfd-4f78-a6d9-80f032e744db.roa
File: 1eba903d-0dfd-4f78-a6d9-80f032e744db.roa (raw, json)
Hash identifier: eJCpxMjOx7gYmTJj9PMRAXKJsgOJKqPZlPuT4Cb665I=
Subject key identifier: CF:11:33:AB:3B:A3:32:BA:5F:50:A0:60:91:4F:54:1D:5D:35:31:4A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2F874D527732D22DDC405580A3D8371B8E923941
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1eba903d-0dfd-4f78-a6d9-80f032e744db.roa
Signing time: Sun 13 Apr 2025 09:18:18 +0000
ROA not before: Sun 13 Apr 2025 09:18:18 +0000
ROA not after: Sun 18 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Apr 2025 09:38:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:87:4d:52:77:32:d2:2d:dc:40:55:80:a3:d8:37:1b:8e:92:39:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 13 09:18:18 2025 GMT
Not After : May 18 23:59:59 2025 GMT
Subject: serialNumber=4fd4f9b1ce46dbf72f26b0d1dab80998190d75dedc79a5dfda5129578e5f6869, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:56:66:e6:30:4a:37:e1:f3:ab:26:3a:35:5f:
25:07:bb:cf:91:6f:72:af:e1:b3:83:74:8c:25:71:
fd:f6:a6:0b:a2:e4:6e:fc:f0:05:03:fb:93:cc:07:
e6:33:ce:e1:a3:60:13:fe:45:2e:13:06:c0:41:ba:
0f:de:3e:06:65:1c:14:83:58:4f:f8:79:79:25:35:
f8:3f:7b:bd:e7:05:4c:45:42:3a:3d:80:d7:ef:6d:
bd:d2:df:0b:1a:a8:d1:06:aa:74:2d:86:88:2d:7f:
dd:c8:58:3c:8f:a1:29:76:a4:90:0e:1c:2a:05:b5:
42:d6:1e:be:9d:c5:75:65:04:23:6e:c4:e5:19:c7:
d5:5c:5c:2d:95:4e:ae:9f:13:b9:70:39:4b:f9:bd:
59:ec:87:cd:fb:b4:17:35:e0:58:87:98:07:0c:85:
c5:0d:eb:ed:d5:e4:d8:31:dd:99:cf:4f:29:8d:b5:
34:46:89:2b:0e:9b:6e:01:da:f6:03:20:21:f5:38:
34:c6:d4:6e:da:a4:98:d7:df:17:c1:2c:d6:d1:32:
88:53:af:3b:50:44:2f:3f:70:54:c6:89:19:e5:69:
b4:75:45:bc:4a:f6:e8:72:ce:50:49:be:aa:40:42:
61:7d:58:1f:36:b8:14:53:2e:56:7e:36:fa:70:f5:
d6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:11:33:AB:3B:A3:32:BA:5F:50:A0:60:91:4F:54:1D:5D:35:31:4A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1eba903d-0dfd-4f78-a6d9-80f032e744db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
34:51:ad:52:9d:f4:bf:8f:b4:7e:ae:46:47:f3:29:4d:9b:b1:
9b:3d:79:11:f2:a2:38:16:5c:58:2f:7d:e4:49:e3:99:c3:91:
fa:3b:41:9d:ac:28:b4:c2:2a:b3:74:c0:c0:71:d8:ad:dd:96:
4d:23:d4:16:5b:d0:ad:d1:1c:fc:06:5b:b3:ca:e1:c7:50:6b:
69:b4:cd:ae:d2:95:70:21:21:ba:0b:6f:55:cb:06:8b:49:5e:
67:08:1a:b7:37:5a:70:13:88:a0:22:33:c7:9e:5f:b5:d8:4a:
c0:35:f5:31:d1:c6:9e:75:60:fd:6c:a8:1b:b4:ea:7e:9f:c5:
13:6e:f9:db:c7:0d:95:2e:61:de:a9:1c:16:30:ec:bd:7e:3a:
e2:75:2c:a3:7c:48:39:24:17:fb:d9:72:f6:d5:2f:9c:49:91:
5b:3c:02:cb:22:b8:c2:2c:d7:64:f5:70:85:33:e7:6f:e6:45:
64:70:c4:b6:03:9a:34:0c:fa:8c:e2:37:58:ff:6a:f2:e4:2d:
da:34:11:51:40:b1:4b:fd:8b:ef:97:95:d6:74:c2:4e:d3:b8:
59:b4:15:c4:e5:59:5a:d1:d7:d6:8e:8f:41:86:c5:57:ad:4d:
73:8d:7e:87:9c:bc:e5:c1:a6:7c:dc:56:97:9e:49:3a:cf:e5:
d6:58:ac:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:35:25 2025 by rpki-client