Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2522456f-f8e3-4a19-9fb9-e674c7e5a3b9.roa
File: 2522456f-f8e3-4a19-9fb9-e674c7e5a3b9.roa (raw, json)
Hash identifier: huxQ+KIkrNm7efH2Jcf6XC+Y2IGuKdA/SaxVx8gTJ3Q=
Subject key identifier: 8D:EA:CD:5C:F7:BD:11:82:9E:F0:85:D8:8A:90:19:0A:7A:78:C2:F6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2313B3B14BABC0C7356AA6800666870B7CEDB379
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2522456f-f8e3-4a19-9fb9-e674c7e5a3b9.roa
Signing time: Mon 19 May 2025 16:53:16 +0000
ROA not before: Mon 19 May 2025 16:53:16 +0000
ROA not after: Mon 23 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 May 2025 17:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:13:b3:b1:4b:ab:c0:c7:35:6a:a6:80:06:66:87:0b:7c:ed:b3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 19 16:53:16 2025 GMT
Not After : Jun 23 23:59:59 2025 GMT
Subject: serialNumber=3f1a7ba07bdbf6f080860ee3395347aeae8a30c3e662daa0498e9708670ad4f2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:18:be:ee:09:9e:9d:83:48:fb:af:0d:3a:
92:8c:37:29:27:28:21:b5:db:55:81:d2:a9:fd:d1:
e9:85:81:0d:89:53:2a:ca:42:87:ce:a0:73:d2:b4:
24:c7:7f:87:7f:b1:8a:8d:ff:e6:22:4d:ef:aa:6a:
6f:a7:26:6f:c2:ae:16:bf:09:46:66:7d:fe:fc:d7:
90:b4:fa:46:0a:93:ad:cb:9c:f9:1b:4f:77:6a:5c:
48:f8:de:67:db:a8:58:e6:21:0b:f6:fb:e1:bf:07:
20:f2:c2:ea:fb:71:8b:53:37:b0:f7:72:49:e6:8a:
e6:c3:fa:2b:3a:3f:f2:ae:a7:ff:e0:2d:15:69:22:
d6:8b:91:a6:74:bb:cc:99:6a:3e:d5:63:c8:79:59:
f8:00:39:57:86:22:3f:ab:f5:bc:b0:6d:8b:42:c2:
0f:03:74:5f:96:73:26:30:f0:c9:62:d7:3c:ad:aa:
d4:7d:cb:9d:75:7a:d4:de:c4:0e:ab:9e:00:46:f3:
12:71:21:f3:45:5e:2f:84:ac:1d:ee:bc:70:44:37:
de:51:54:5b:00:69:ae:e1:74:3d:f0:5a:c2:27:d6:
07:ee:6a:3d:3c:66:c8:c4:79:a7:a3:0e:69:39:63:
fb:44:52:bd:6f:5d:ad:85:a6:f0:8d:84:9d:bc:78:
ab:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EA:CD:5C:F7:BD:11:82:9E:F0:85:D8:8A:90:19:0A:7A:78:C2:F6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2522456f-f8e3-4a19-9fb9-e674c7e5a3b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
98:a4:2b:08:2d:55:d2:aa:45:29:dc:36:c8:c7:82:25:b3:6d:
36:cf:e3:6c:43:22:97:62:bb:d4:0e:a6:18:32:f4:a9:18:66:
b9:8b:bd:91:9a:8f:cf:b0:01:ba:2f:e8:62:ec:61:90:6e:69:
28:ed:47:cb:22:c5:8d:6a:0a:d9:11:51:73:d3:41:06:ec:69:
91:9a:cb:fb:98:be:a3:ef:86:00:13:44:c2:2a:3d:ce:f8:31:
6b:06:c8:f7:96:58:71:49:0a:64:60:b3:a3:1a:50:85:85:e8:
03:fb:dc:6c:b2:7e:f0:a1:3a:c8:95:0f:6b:7a:60:e4:97:5e:
d3:5c:ad:68:6d:7d:c1:43:33:94:7d:ab:68:25:6c:08:28:ae:
30:13:7f:46:a3:92:d2:1b:ac:cc:75:b2:77:bf:e6:70:5e:f5:
32:fb:46:e9:ab:03:ef:82:c5:b3:95:10:5f:25:43:47:5b:05:
7d:ad:6e:c5:9e:ce:eb:a5:b4:25:72:62:40:4e:48:84:94:32:
a6:35:41:06:0b:47:b7:7b:e6:b0:4e:ff:8a:20:b7:b5:66:b8:
ec:8a:93:05:35:76:9a:ac:0b:b8:64:de:f0:93:d3:ae:43:bb:
f7:61:9f:e3:1d:da:c7:24:c3:73:f9:a5:6c:82:77:55:37:f1:
42:98:40:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:58:30 2025 by rpki-client