
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2f1d1b23-2078-48d6-b2e4-c399dcc62daa.roa
File: 2f1d1b23-2078-48d6-b2e4-c399dcc62daa.roa (raw, json)
Hash identifier: SFx70UMGxla3s9/1XDW3btlIsWlgDeftlGBAfqJBgfY=
Subject key identifier: 04:06:01:E7:4E:99:AF:05:FB:21:86:B2:21:2A:94:5A:E0:67:61:8F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7E53F961876E1D7FB74BC28E71414F20B5A3CAAA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2f1d1b23-2078-48d6-b2e4-c399dcc62daa.roa
Signing time: Tue 27 May 2025 01:33:17 +0000
ROA not before: Tue 27 May 2025 01:33:17 +0000
ROA not after: Tue 01 Jul 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 May 2025 01:53:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:53:f9:61:87:6e:1d:7f:b7:4b:c2:8e:71:41:4f:20:b5:a3:ca:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 27 01:33:17 2025 GMT
Not After : Jul 1 23:59:59 2025 GMT
Subject: serialNumber=d9de647bc24bc81722b4e38480361bb1f13e2f3f88229035200ece2daaebf7c4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:3c:ea:31:bf:24:8f:07:31:fb:bf:8c:cf:
3e:26:25:54:af:a8:bb:c1:2e:86:ac:f5:f8:2d:3c:
18:19:43:0d:80:48:37:21:f5:69:5f:44:03:30:c9:
fb:c8:ae:b3:a3:29:07:90:6f:88:6e:6c:d5:c8:6e:
5b:9d:6d:24:c5:aa:6a:be:23:e0:c9:00:3e:d8:95:
7c:93:cb:82:d0:87:5b:b9:ca:23:34:b5:96:ac:e4:
b5:bd:0e:ef:02:42:11:7c:b0:24:a9:71:17:ac:1e:
9e:b8:ab:af:db:86:6e:f2:be:2e:29:03:a5:2c:a7:
dd:e6:e9:04:0c:85:67:39:ea:83:f3:85:4a:1f:72:
ce:eb:36:77:49:96:31:44:47:91:49:79:cf:46:f9:
d0:81:39:5b:6d:fe:56:c3:cd:49:a5:af:ee:fb:8d:
97:d9:26:be:ed:f0:7a:30:8e:6c:72:32:f5:58:00:
c2:6b:0e:b4:52:3c:8c:a6:bb:a7:25:bd:ff:16:69:
7d:81:7f:a8:f5:34:2e:91:e3:3f:8d:1a:7d:9e:46:
d5:14:8b:02:68:43:e6:e2:2a:7c:af:29:67:e7:0c:
8d:05:5c:0c:e4:de:41:a7:55:74:88:5a:74:92:53:
01:19:ae:e7:b3:7a:3d:db:d9:8f:c8:06:77:93:05:
12:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:06:01:E7:4E:99:AF:05:FB:21:86:B2:21:2A:94:5A:E0:67:61:8F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2f1d1b23-2078-48d6-b2e4-c399dcc62daa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:f2:5c:9d:e7:09:89:70:c7:8b:47:64:ae:c6:ed:be:c2:ea:
e6:1a:d8:54:88:ed:34:b9:06:64:38:4e:fb:e5:30:c7:4f:ec:
e0:d8:96:b9:50:8e:c9:6f:28:ac:d8:ef:44:21:fe:68:0f:7a:
b1:88:20:9a:0c:35:db:a9:9e:22:f8:bf:59:be:1b:8b:a9:86:
53:3b:f5:4b:55:32:aa:06:d0:74:08:8f:c7:27:c2:47:4f:e8:
bb:c2:7e:1b:1a:38:d7:07:89:7b:5c:57:1b:df:75:af:54:db:
0e:60:22:96:68:4a:44:65:a9:b6:0b:34:87:e4:2b:f2:52:a0:
72:9e:d7:d0:79:70:f8:0e:f5:02:50:31:6b:71:88:9e:71:3f:
54:a4:88:0a:56:2c:60:68:02:ba:2c:75:38:4c:40:c0:cd:32:
7e:ef:d7:41:34:1a:6e:37:74:be:80:38:83:8b:ae:75:7c:f1:
d5:44:67:b2:33:00:e6:62:6d:07:5c:a0:88:02:c1:cd:c2:92:
13:b9:7e:a5:de:81:ea:7f:fb:8c:22:81:59:30:fc:8f:cb:03:
8d:71:1a:97:4a:c0:be:6d:a1:54:5d:0a:35:50:a5:64:52:3f:
ee:3a:74:8d:56:9b:a9:24:d3:8f:84:d5:06:cc:f7:1b:18:a7:
ed:1f:bf:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:22:42 2025 by rpki-client