Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/29706d44-f257-4be7-bc42-8f98e3d88e69.roa
File: 29706d44-f257-4be7-bc42-8f98e3d88e69.roa (raw, json)
Hash identifier: 55sqHvPLVosOeMYiZ9wYsqjaFJRZL1MvVSWG3akZbn4=
Subject key identifier: BD:39:4B:5A:3A:DA:F4:5E:FF:A7:1F:F6:B0:59:CE:0D:A0:C8:13:67
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0E4634FB75382A56D1B6BAB205BD56CA63BF2DB3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/29706d44-f257-4be7-bc42-8f98e3d88e69.roa
Signing time: Fri 25 Apr 2025 03:18:16 +0000
ROA not before: Fri 25 Apr 2025 03:18:16 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Apr 2025 03:38:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:46:34:fb:75:38:2a:56:d1:b6:ba:b2:05:bd:56:ca:63:bf:2d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 25 03:18:16 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=4fbd0e6559009b1822433b371f91b2a0791e0a04aa837ffa80c2cab49189fe8b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:34:83:3b:bc:8a:15:fc:57:95:9a:07:1c:09:
87:5f:66:a6:7e:7d:a0:c9:23:8a:04:a1:88:d3:d1:
25:10:90:b3:d5:88:2b:c4:86:05:38:ff:8b:8a:e1:
ee:3f:dd:57:1e:65:59:37:ee:4e:ba:f1:e4:a2:17:
10:32:22:89:70:98:ba:3b:0d:ff:b0:5c:8e:09:a0:
9a:b3:44:8c:c8:a0:a5:76:ce:7a:25:da:70:f6:e8:
e6:5b:99:ef:ea:28:01:c2:e4:58:cf:e2:a8:04:ca:
0d:c2:25:21:07:bd:88:e6:46:34:e8:83:9d:38:41:
ad:2c:1e:60:e1:f2:13:f8:3d:b1:fa:1f:56:cd:b7:
a0:c6:dd:03:f6:08:6f:ed:4c:c4:a9:39:42:09:8f:
60:e2:1a:9d:53:6a:38:ff:8a:56:d0:13:43:c6:78:
7c:b1:cd:b6:2e:cd:8f:23:3d:be:63:df:be:ff:8e:
a6:fe:5f:14:f4:5c:b2:3f:40:de:4a:0a:3d:a7:58:
9a:41:4b:1b:35:db:1e:4e:29:26:00:36:90:45:4a:
3f:b8:34:84:63:e7:0c:7e:27:f2:37:23:1a:b2:97:
9b:e8:26:b3:d5:e4:d7:08:f6:ba:c0:0a:d4:a3:02:
25:19:93:52:d9:c2:4a:55:bc:17:e5:f1:8a:36:62:
11:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:39:4B:5A:3A:DA:F4:5E:FF:A7:1F:F6:B0:59:CE:0D:A0:C8:13:67
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/29706d44-f257-4be7-bc42-8f98e3d88e69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
00:61:86:6d:a7:d1:a9:5a:a8:5a:a1:d2:15:89:b8:3a:7a:5b:
63:2e:ed:71:72:d2:cc:fa:92:a7:05:fa:e8:59:2f:48:5b:37:
94:8a:f3:bd:ee:e7:73:90:4b:1c:a0:d4:a1:5b:37:b1:83:fa:
a1:05:1f:9f:89:36:25:e6:97:31:cf:9e:49:09:22:e2:6f:7c:
dd:a6:f6:07:01:aa:13:8d:2d:3e:c3:ae:ab:66:d5:b9:31:64:
0f:0d:9c:aa:6c:cc:b6:4c:16:db:82:5c:ea:6d:63:6c:93:ae:
55:33:93:ea:37:c2:c3:b5:3c:eb:11:44:f9:e1:de:ab:3f:97:
d6:46:b5:ba:60:15:a5:ce:4f:ec:f6:c8:ed:9b:e3:ee:49:50:
23:b0:c3:11:a9:7b:7b:1e:d5:46:5b:a7:80:a3:a1:14:9d:84:
6b:c8:f4:b5:40:32:32:9e:59:47:ac:ed:90:87:0a:bf:94:80:
5e:2b:ca:cb:5f:ee:29:71:62:95:38:02:0d:f2:9d:da:e4:a6:
b1:b3:39:cf:61:b8:6e:23:ff:6a:8b:d1:49:b4:17:72:d9:d5:
10:dd:cc:d6:8c:80:86:29:fc:80:a7:4e:a1:cc:74:38:d5:3a:
e8:50:a9:d1:23:58:68:ed:59:55:d9:d9:72:0c:7c:de:57:1c:
e7:13:8b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:56:55 2025 by rpki-client