Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2a8d57c2-94cd-420b-9a03-0c93339fa543.roa
File: 2a8d57c2-94cd-420b-9a03-0c93339fa543.roa (raw, json)
Hash identifier: 3CCJTdzOGXQyfn2Aeg7J4WHSd1oseVAQP06LQXBB47k=
Subject key identifier: E4:81:8A:01:9F:EB:56:C8:96:FC:04:74:FA:73:F5:67:52:5B:D4:F6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2A5F8E5768787388EF09B9D7C729D7B6480826E9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2a8d57c2-94cd-420b-9a03-0c93339fa543.roa
Signing time: Thu 05 Jun 2025 08:13:20 +0000
ROA not before: Thu 05 Jun 2025 08:13:20 +0000
ROA not after: Thu 10 Jul 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 08:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:5f:8e:57:68:78:73:88:ef:09:b9:d7:c7:29:d7:b6:48:08:26:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 5 08:13:20 2025 GMT
Not After : Jul 10 23:59:59 2025 GMT
Subject: serialNumber=d0b96e6288edf97ba455a0d66c7c0812becf22e238f24b45120a70757b9a4539, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:09:d8:e9:29:a7:b8:cc:c9:55:11:70:0a:67:
cc:0a:cf:c0:fe:a3:77:e0:0b:4b:77:bb:3e:b7:77:
a8:db:1b:67:a5:bd:63:d4:c7:64:1c:e1:06:0f:ba:
aa:f3:5f:b3:92:7b:cb:4f:ae:96:d6:ef:d2:d4:47:
a1:75:67:48:d3:6d:dc:58:1f:8d:82:e8:1b:13:e8:
b3:d9:62:8b:1c:72:79:ad:54:f8:42:02:70:21:d5:
2c:c9:72:d7:75:30:aa:a4:ce:60:b3:15:6e:f5:3b:
e4:a8:23:a2:3b:fe:ea:b8:ad:70:e3:32:3d:c5:11:
d0:87:a0:5e:d8:ae:97:89:a6:9a:88:5f:5a:e1:92:
74:51:62:9e:fe:bf:9d:7f:27:46:f3:6f:3e:fe:6b:
5b:9d:41:a5:bb:25:4c:b9:ee:ca:53:88:52:f6:18:
16:9f:4a:3e:50:c8:ab:fb:a3:44:11:89:83:98:ad:
11:50:a7:3a:4c:5c:e4:cf:bf:86:cf:d9:a1:2b:d7:
d0:7b:24:a9:45:48:f8:3f:0c:40:95:0f:3c:86:bb:
f1:4b:02:b0:53:50:ec:1f:b4:cb:08:37:01:6f:38:
ea:57:79:75:8f:e1:07:62:fa:d8:50:55:f5:2a:cd:
1e:18:26:96:37:ef:bb:86:9d:6b:e4:b2:0b:3c:5e:
cf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:81:8A:01:9F:EB:56:C8:96:FC:04:74:FA:73:F5:67:52:5B:D4:F6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2a8d57c2-94cd-420b-9a03-0c93339fa543.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:b3:ab:a1:57:eb:2a:cd:d8:fe:2c:55:27:d6:91:06:98:ed:
c6:ba:00:83:71:04:85:70:72:b7:fb:bd:ba:4a:7e:55:7e:5e:
21:67:53:07:12:58:fd:4b:a3:c2:6a:0e:9c:55:db:37:6d:c3:
4a:b3:6c:0a:b8:68:dd:42:60:23:db:df:e3:3c:9b:07:fe:9d:
94:cb:3d:5b:fc:6d:95:f3:92:a0:8d:1e:7d:1a:32:01:0e:3a:
63:7e:39:9d:d1:5d:65:e8:29:a2:16:4a:98:19:46:bb:e4:9c:
0d:26:81:6b:a6:0d:7e:e2:89:18:93:7f:3c:41:76:6d:d8:01:
eb:55:85:c3:7f:fc:fb:0a:98:c9:81:3d:6f:f5:81:22:de:30:
e8:be:29:29:9c:bd:95:c7:b4:54:89:18:b3:1d:83:24:1b:20:
17:22:4e:ee:d2:05:c7:66:ed:3f:f6:84:50:c8:5d:6e:3f:ea:
a8:ae:22:1b:46:f7:3d:17:df:6a:7d:50:4c:a6:aa:7e:38:5e:
f4:d3:28:15:69:91:dd:58:ad:48:d6:cc:36:c0:54:d8:66:cf:
89:ee:06:ec:9b:92:18:4d:97:10:5c:e5:28:79:45:cb:58:e9:
2c:24:9b:e7:4e:18:c8:e8:e9:a6:02:8d:09:74:2b:61:42:31:
69:07:36:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:42:13 2025 by rpki-client