Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3a252d7d-373f-49fc-aa6d-d143ed723f6a.roa
File: 3a252d7d-373f-49fc-aa6d-d143ed723f6a.roa (raw, json)
Hash identifier: 06PeWpJwdxxHgrKu9qIvyZ4TV42rhVLI/XwvzwiWdTU=
Subject key identifier: E0:15:49:50:85:86:CF:6C:17:16:6E:A8:AB:C8:22:13:C3:34:90:39
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7C97E4087A1AE2CF16471E499728CC1163D307DD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3a252d7d-373f-49fc-aa6d-d143ed723f6a.roa
Signing time: Tue 22 Apr 2025 23:58:17 +0000
ROA not before: Tue 22 Apr 2025 23:58:17 +0000
ROA not after: Tue 27 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Apr 2025 00:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:97:e4:08:7a:1a:e2:cf:16:47:1e:49:97:28:cc:11:63:d3:07:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 22 23:58:17 2025 GMT
Not After : May 27 23:59:59 2025 GMT
Subject: serialNumber=a5bc5b22f9053dfb419b4aff82aa92f0d319939306c6ca880b5aef7f39834faf, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b6:e4:4d:63:71:da:b7:94:7f:0d:d3:3f:f9:
38:7d:dd:c9:f4:7f:30:64:51:8b:f9:94:2a:63:55:
5d:c9:31:9c:82:01:f2:c5:71:ac:28:a2:ec:68:df:
dd:b9:31:c8:39:1b:de:3b:4e:9a:6c:3d:1a:b4:3c:
bd:69:a8:2a:d0:a1:5a:6f:58:f4:e1:14:9c:78:13:
13:57:0e:db:68:38:be:26:67:6c:6b:71:db:dc:79:
90:ad:04:31:ff:06:21:a3:ae:a4:57:4e:49:4d:36:
df:ef:0e:fb:d7:a0:81:c7:74:b4:2f:0c:06:70:76:
35:33:75:fe:fd:5c:5a:4f:93:9d:d0:ac:4e:13:be:
35:70:17:d0:5b:7e:1e:c5:36:eb:ff:26:b0:61:25:
fe:cd:f8:b2:16:f7:a7:60:64:5f:7d:fb:7e:f7:26:
15:06:5a:51:d9:98:e3:06:98:b4:4c:27:6b:69:9b:
28:a1:6b:66:76:ee:f0:57:75:91:a0:cf:ab:c0:b7:
68:d2:6b:30:70:1f:2d:41:32:d5:94:c0:e4:7e:9c:
1f:ba:95:e5:8f:a5:34:45:89:81:c7:3f:e9:63:9b:
9c:c7:55:0f:49:38:f0:27:bc:70:7a:c6:3c:07:e1:
be:8a:dc:e2:5e:dc:da:bb:4c:47:ac:85:bf:5c:16:
6b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:15:49:50:85:86:CF:6C:17:16:6E:A8:AB:C8:22:13:C3:34:90:39
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3a252d7d-373f-49fc-aa6d-d143ed723f6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
72:44:22:c2:da:1f:ba:e1:41:9e:2c:41:75:96:52:39:83:89:
06:6a:e6:fe:4f:d9:e6:1c:6d:16:29:ab:1d:6c:0d:c7:1e:5e:
a2:67:a3:54:2b:d0:f4:e1:b2:2e:f2:53:57:1e:19:b7:4d:49:
48:f0:04:a5:db:db:5e:42:7b:ec:7c:c1:e0:06:95:4a:a1:52:
0a:d8:3f:78:bf:89:c8:14:cd:cb:51:91:3a:3c:57:bb:eb:8d:
52:28:fb:a8:4f:47:84:b7:c5:d2:a7:f3:e2:d1:87:8b:61:88:
cf:3d:5f:a9:70:90:13:7e:36:4d:63:24:b6:32:1e:ef:3d:a6:
75:7a:53:9f:c2:0b:41:6e:7a:7b:26:ba:27:61:6d:82:46:c6:
20:ab:44:69:92:d7:6d:4d:e6:b2:be:0b:96:3e:c1:90:5f:a3:
8c:b3:b6:7f:34:34:7b:36:80:70:9f:02:fd:19:2f:85:fb:73:
ab:1c:74:00:58:34:d8:fe:a8:f1:e3:73:2e:6f:be:50:35:c5:
ed:8f:a2:15:68:0a:8a:43:83:53:51:4c:04:8d:9b:51:f1:8d:
4b:36:20:fe:ff:a9:0c:58:87:28:e8:f8:c9:92:e0:d8:d3:7d:
a9:52:54:9a:89:03:4e:a6:a2:c9:2f:a4:88:b9:ff:fc:15:e3:
69:18:c2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:29:57 2025 by rpki-client