Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2aad2d28-704a-4e1e-9606-3bd0b8a0a7be.roa
File: 2aad2d28-704a-4e1e-9606-3bd0b8a0a7be.roa (raw, json)
Hash identifier: 72so/R3WBgne/gruK9he6T6zpHXicTEVPBFFW+8ZKxQ=
Subject key identifier: 53:D1:EC:84:73:3F:CE:7A:33:1E:67:36:26:2E:B9:9F:65:54:C5:69
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2D3DA2A7789AFDEAE00489431544D2C18B87AAEF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2aad2d28-704a-4e1e-9606-3bd0b8a0a7be.roa
Signing time: Tue 22 Apr 2025 10:28:19 +0000
ROA not before: Tue 22 Apr 2025 10:28:19 +0000
ROA not after: Tue 27 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Apr 2025 10:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:3d:a2:a7:78:9a:fd:ea:e0:04:89:43:15:44:d2:c1:8b:87:aa:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 22 10:28:19 2025 GMT
Not After : May 27 23:59:59 2025 GMT
Subject: serialNumber=697de0703eaa35eb0d63726902e9f3721714f0467a72616b748e37ea63a2a9a1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2d:d1:27:0f:60:0e:49:f0:86:4e:83:35:01:
82:07:61:ac:8e:92:3f:1c:67:9b:f3:cf:f4:9a:98:
6d:d5:ab:df:24:a5:7f:24:fd:7f:1f:76:ba:3e:af:
dd:f4:20:01:9f:7a:00:ce:13:23:3b:7b:10:48:8e:
e6:79:a5:3f:57:f3:af:ff:8e:ac:11:52:12:43:71:
f8:dc:f3:20:23:5e:fa:92:ee:ad:ca:2e:4e:70:90:
65:ff:50:22:88:33:44:13:5d:f8:8d:fe:bb:9e:50:
ad:7f:4c:9f:ca:30:4a:ba:43:79:be:54:75:82:d5:
7a:a1:0e:a7:30:74:12:df:62:2d:01:8e:00:d5:b4:
e0:c5:0f:b7:4b:0d:4e:00:af:bd:ff:ea:98:c4:b3:
9d:b7:7d:9f:1b:a5:d7:66:f7:1f:4d:c5:ea:88:e3:
bc:f1:90:07:ad:84:7e:96:85:56:bf:ff:a5:5b:ec:
fa:27:1a:f9:c6:6f:4c:72:a7:6b:74:c8:d6:b5:12:
43:dc:18:c5:b1:bd:5a:ba:22:b8:97:2d:7d:ad:4b:
4f:3b:ae:58:ab:40:b4:ce:bd:a7:c5:ed:2b:fd:fc:
da:be:c2:af:e7:57:b6:27:13:36:0d:2d:e0:97:09:
a9:81:5d:7c:6a:01:71:d4:7a:b7:bd:93:20:1f:66:
68:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D1:EC:84:73:3F:CE:7A:33:1E:67:36:26:2E:B9:9F:65:54:C5:69
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2aad2d28-704a-4e1e-9606-3bd0b8a0a7be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
04:8d:9f:ac:b9:03:b1:e5:cc:ea:e7:3e:03:12:db:bb:cd:44:
77:c5:15:8f:d3:71:fe:2f:2a:52:19:d7:13:90:49:de:fe:5d:
39:19:85:96:55:19:cf:f9:a9:3a:0b:dd:5c:75:e0:5c:86:b3:
ab:38:9b:76:c1:0f:f2:06:8e:c6:58:04:38:8d:de:e6:a5:52:
28:7b:11:8e:9c:9b:ec:45:96:f7:20:0b:21:47:d8:2f:ce:62:
29:df:6e:e9:44:c1:db:b1:94:fb:90:75:4d:19:e2:92:77:47:
e6:91:14:0e:e4:43:4f:03:78:87:b2:c8:10:75:06:e2:01:46:
ff:ea:9c:09:78:07:c4:09:d3:92:da:d7:0e:84:21:ee:30:57:
80:04:8a:08:7c:14:72:08:2b:3a:54:32:28:84:4a:4b:d4:7c:
b1:c5:39:e6:4e:a5:c5:75:37:14:d9:2f:52:dc:17:a8:3b:e6:
f4:ab:7b:ac:e1:db:e8:f3:cf:aa:32:43:90:79:77:3b:dc:2b:
54:e3:a2:72:73:a6:90:bc:97:07:72:13:e1:87:b3:68:43:d0:
55:d5:8f:13:ff:39:e7:40:4e:e5:24:22:a8:99:a4:8c:1e:79:
28:ca:cf:b3:fb:c8:22:9f:ad:a5:5a:9d:01:ab:b1:0a:5e:7f:
7e:e4:2d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:04:11 2025 by rpki-client