Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/242ccc75-72a5-449d-b8a3-b94ee029a1b6.roa
File: 242ccc75-72a5-449d-b8a3-b94ee029a1b6.roa (raw, json)
Hash identifier: CmGZIo0KRiNYdxk4XHvpZ2IjeoAWNBU+651LT6PO+p8=
Subject key identifier: 72:DD:29:7F:33:B8:00:D1:A0:70:7F:ED:05:72:64:1D:55:F5:DB:7A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0AEE9E3DE8573C39652D96DE0848A39C2C9901B5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/242ccc75-72a5-449d-b8a3-b94ee029a1b6.roa
Signing time: Tue 13 May 2025 04:53:19 +0000
ROA not before: Tue 13 May 2025 04:53:19 +0000
ROA not after: Tue 17 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 May 2025 05:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ee:9e:3d:e8:57:3c:39:65:2d:96:de:08:48:a3:9c:2c:99:01:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 13 04:53:19 2025 GMT
Not After : Jun 17 23:59:59 2025 GMT
Subject: serialNumber=33144af700df4ca19977c06479d7130b425a1897dbaa554ab5e7800145b53f8a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:45:b1:b8:bb:04:21:b5:75:ab:cf:0b:9c:
d4:42:c2:9c:11:2b:34:8f:2a:64:db:d2:43:67:df:
d2:22:c8:fa:20:00:81:56:21:d9:c1:5c:dc:45:d5:
ca:0f:3a:95:d9:b0:7f:4c:c5:f5:38:70:b3:40:d4:
c7:de:a3:34:61:ed:01:ca:6d:b6:30:14:f9:14:09:
af:44:2d:b9:df:2c:97:e2:ae:54:f9:2b:36:3e:5d:
cc:14:0b:01:37:62:53:df:73:80:3a:4c:2e:0b:64:
05:29:8c:66:ba:cc:59:27:b8:fd:f9:fc:a5:83:6a:
e7:cb:67:22:17:c0:ff:c5:7c:15:c0:c5:0b:0d:03:
e4:40:f3:1f:75:12:91:f5:c2:e9:fc:f0:29:34:19:
5e:c7:68:fb:68:db:53:88:af:48:b4:04:b8:9b:b7:
1d:f4:e0:56:4c:30:54:55:5b:66:1e:2f:ab:7e:f4:
50:a0:9b:c7:12:e1:4b:d5:fe:09:a3:8f:39:dc:39:
30:94:e3:b4:0d:1f:7f:bf:60:bb:97:ff:cc:b3:39:
15:4b:87:98:04:f1:f5:1c:01:13:c6:86:5a:65:e5:
b7:2e:ff:9a:1e:d0:b8:7b:2a:78:f3:35:b3:3e:5a:
19:44:c7:41:34:59:fb:25:c8:34:8f:db:d1:e8:e0:
e1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DD:29:7F:33:B8:00:D1:A0:70:7F:ED:05:72:64:1D:55:F5:DB:7A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/242ccc75-72a5-449d-b8a3-b94ee029a1b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
48:2c:00:26:b2:bf:da:b0:a8:cd:ee:fe:b5:df:98:a2:6a:99:
dd:04:63:dc:f8:52:c0:c6:7d:c2:3b:b3:ef:1a:8f:c4:74:57:
d1:13:36:2f:73:11:15:8e:5b:91:33:ef:49:de:5a:a7:38:84:
9e:2d:6f:d7:16:e6:d9:66:f1:97:f8:c5:ab:16:74:d6:b5:ab:
0e:62:85:e2:cd:07:0f:1b:0d:d3:ff:51:94:ea:ef:06:b1:61:
e8:a6:07:7d:d9:07:8c:f8:dd:e5:6d:1b:b6:99:cb:25:bc:a9:
11:ab:87:6c:e7:2e:10:82:b9:80:f9:a4:ee:2a:93:ff:ce:1e:
26:ea:41:23:61:f3:37:65:6f:20:01:9d:94:1e:eb:14:83:f6:
6d:78:6e:e5:c5:18:a1:e0:73:6a:f5:6b:62:0c:7e:dd:ca:39:
6c:7c:af:1d:ef:11:be:fe:53:f5:33:4f:5b:ec:07:36:64:72:
8b:37:4e:b2:40:32:cb:1b:3e:7c:3e:bd:29:a2:93:0c:05:a5:
d6:6f:d2:ae:3d:b8:57:eb:5c:78:b9:c4:5b:89:df:bd:ed:05:
b0:04:6d:a4:6e:a5:96:a1:1d:00:89:44:fc:ef:2f:df:f3:8d:
82:90:a1:b3:c0:2b:0a:3c:9b:80:74:14:dc:d6:3d:c3:7a:23:
d1:9d:1c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:24:11 2025 by rpki-client