Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2ea7d5ee-ce46-41c0-b4f5-0a27e75a41a7.roa
File: 2ea7d5ee-ce46-41c0-b4f5-0a27e75a41a7.roa (raw, json)
Hash identifier: qQnQSPPiHe79JYDAd2dlbfnNfeRLE1fKMH3MP0l9fJY=
Subject key identifier: 76:94:D1:34:B6:CC:95:F4:00:0B:44:D1:06:47:0E:F0:C0:71:2F:E1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3517B615F95351EFB1E36EFDD6DE6A73B1500451
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2ea7d5ee-ce46-41c0-b4f5-0a27e75a41a7.roa
Signing time: Fri 11 Apr 2025 04:03:19 +0000
ROA not before: Fri 11 Apr 2025 04:03:19 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Apr 2025 04:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:17:b6:15:f9:53:51:ef:b1:e3:6e:fd:d6:de:6a:73:b1:50:04:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 11 04:03:19 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=09f202ea02aadbb39cd775960327878d174bf40238df85b768c73c0be1ea7183, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0c:2d:ac:3d:43:3b:3e:88:9d:75:8b:91:12:
06:be:a6:e8:10:a7:5d:92:dc:47:44:cf:a4:e8:0b:
df:b5:c2:84:22:c0:92:bd:bb:5f:d7:c3:72:f5:48:
61:58:9f:ab:6c:5d:be:54:ac:9e:62:fe:51:4d:2c:
76:1b:fe:ef:6e:08:9e:7c:b0:09:a6:66:03:34:03:
a4:0f:d4:c0:3a:82:16:02:b5:c2:8b:2d:ed:93:2a:
ff:d4:60:40:92:db:01:7d:c5:d1:66:14:ae:b0:fc:
f5:33:f8:6f:2e:44:12:4a:f9:47:f8:e1:e0:52:a2:
94:20:48:fd:8a:49:6c:b6:87:bb:be:c0:1a:9c:b4:
ef:12:87:19:4f:1b:fb:3d:0e:c8:5c:72:e3:5b:4b:
49:a0:5b:08:30:ec:9b:ec:d0:d4:2c:e0:eb:a7:26:
af:1f:16:e1:cd:45:04:7d:76:c9:e6:69:aa:50:71:
67:6e:18:94:88:da:42:60:b4:95:b8:74:ab:5a:3f:
08:26:e4:15:16:69:62:af:4b:1e:2a:2e:b5:21:ec:
f0:87:77:06:ec:68:8f:c6:47:e9:51:05:83:85:fb:
05:b3:05:42:95:0e:e8:99:85:81:9b:b7:56:ed:6e:
fc:1b:0b:ec:76:51:eb:08:04:05:0a:83:23:fd:bf:
0c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:94:D1:34:B6:CC:95:F4:00:0B:44:D1:06:47:0E:F0:C0:71:2F:E1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2ea7d5ee-ce46-41c0-b4f5-0a27e75a41a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
80:0d:5d:31:24:4a:b6:3a:23:9d:6c:0e:70:55:0c:f9:06:03:
5d:ef:66:ec:40:c8:0f:96:a6:ec:74:53:a8:7f:da:f8:a7:60:
d0:78:14:e7:59:32:a7:22:67:a2:e8:38:5d:e9:3b:85:3f:f3:
1d:df:ea:d4:bf:ec:1c:a0:85:73:4b:9a:0b:6c:cf:4a:62:fe:
45:cb:61:a6:e0:b9:e7:e9:14:2e:9b:25:2f:3b:fc:f9:87:e6:
5f:bd:a9:ff:9a:73:c9:7b:57:ae:9d:07:25:dd:85:0d:63:e6:
c4:e5:fa:77:d9:09:13:d4:62:68:e6:82:c3:1d:d0:82:bd:c7:
7c:da:5d:e8:b6:8b:e7:00:38:fa:d9:1c:e8:d9:4a:90:90:e6:
fc:45:8f:2d:de:bd:d3:78:c3:8e:6e:8d:e6:ae:56:fe:bf:36:
83:6c:91:8d:aa:6e:40:d3:46:0b:fb:76:2a:55:85:75:38:5b:
07:c1:ef:11:a5:94:41:14:c9:f1:d0:25:3b:d9:ce:77:b6:6d:
fd:cd:f2:d2:eb:ff:43:1d:a2:9a:15:1d:d7:f3:29:c8:6f:49:
c6:2e:06:34:fe:79:d7:c6:11:fd:46:e1:9b:4d:71:13:22:f9:
9c:f5:c3:25:58:86:88:ea:d0:55:ef:ea:f6:8a:25:2f:71:a6:
74:44:fa:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:51:59 2025 by rpki-client