Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3a2b0148-e57a-4f56-bbe2-68694044176a.roa
File: 3a2b0148-e57a-4f56-bbe2-68694044176a.roa (raw, json)
Hash identifier: x5bMX7RywTMhOWE1rCBVGNEWLkOYVY6P/9vz92aNFVg=
Subject key identifier: C3:73:CF:02:85:28:BC:B1:C2:B1:5E:AB:78:A5:52:EE:C0:F4:D7:4E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 011AD37AE320DC20C0AC4B13271C3BBA0872E7C8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3a2b0148-e57a-4f56-bbe2-68694044176a.roa
Signing time: Wed 23 Apr 2025 17:03:21 +0000
ROA not before: Wed 23 Apr 2025 17:03:21 +0000
ROA not after: Wed 28 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Apr 2025 17:18:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:1a:d3:7a:e3:20:dc:20:c0:ac:4b:13:27:1c:3b:ba:08:72:e7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 23 17:03:21 2025 GMT
Not After : May 28 23:59:59 2025 GMT
Subject: serialNumber=798fb85c72ad188e2badef055e76f0e0d136e07dfad4a8fb856ad804ee36a661, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:83:7c:05:63:ed:65:2f:67:27:72:8f:f6:
b1:21:85:43:f1:0b:41:b6:e9:fe:b2:46:7f:b4:bb:
72:a8:23:55:94:ba:83:34:85:57:f0:bc:8f:f3:d9:
cb:76:28:bc:b0:43:ff:86:97:28:cf:48:aa:48:fa:
ea:cc:36:9e:3e:fb:5c:e5:2c:8b:82:3f:57:97:ce:
e8:ae:12:c3:90:ea:5c:94:90:41:a4:31:93:83:94:
43:81:d1:19:a2:e7:9f:d5:70:ef:fd:87:2c:67:f2:
4f:5c:7f:48:dc:41:9b:3b:12:d7:43:b3:5f:98:b4:
57:5c:84:36:d6:86:22:6c:1a:60:13:fa:a8:ab:d0:
9f:ef:ae:2c:de:ab:44:50:78:fd:88:04:a9:4e:94:
38:58:c6:54:c4:dc:51:f7:d6:15:2a:a9:1d:d2:18:
27:43:0b:a7:c8:5d:dc:c6:4f:66:04:fe:1f:ea:fe:
43:ad:ca:35:69:fc:db:9f:fe:f9:c5:92:9a:dd:63:
f6:86:51:10:a0:a6:9a:c9:f4:24:c4:cb:ed:06:d0:
40:88:7c:15:8b:4e:5b:2d:21:2f:6d:9b:d7:13:f3:
c1:29:cd:b8:e2:51:8e:5f:7c:df:e2:84:6a:36:81:
d6:6d:30:17:aa:cb:93:c8:d8:d3:6c:a7:26:37:15:
54:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:73:CF:02:85:28:BC:B1:C2:B1:5E:AB:78:A5:52:EE:C0:F4:D7:4E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3a2b0148-e57a-4f56-bbe2-68694044176a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:85:8d:70:77:d2:8c:61:53:ed:ed:20:8b:0d:2f:85:65:96:
e5:b1:5d:75:79:2b:21:91:61:30:1b:25:4b:ed:00:fc:c9:09:
2e:4f:af:15:b3:97:b3:60:6e:69:a3:f1:d1:a9:a6:83:03:80:
04:a9:3c:26:b3:67:85:fb:d4:42:f7:c4:ca:94:c6:4c:b8:75:
a6:29:2e:77:33:51:db:aa:dd:59:dd:cb:e2:21:d8:dc:00:67:
75:02:59:6a:48:81:f3:76:aa:9a:c6:5d:79:66:b2:bf:e6:d7:
a1:00:18:09:3c:39:66:69:59:72:b4:93:3e:92:55:90:67:b1:
35:e7:39:0f:32:b4:14:a2:e7:1f:53:c2:b4:ff:af:73:5e:7f:
eb:b8:e3:1b:e2:04:18:46:c3:5c:0c:5c:73:04:2b:18:62:c7:
bd:99:01:b6:4f:cc:a7:cc:53:07:8c:8a:23:36:1d:ba:b2:34:
7b:e2:4d:f0:ec:8e:f4:6f:06:94:a8:32:bc:e9:c3:d6:1c:a2:
08:28:4e:6e:97:39:ca:e5:ea:4a:27:7e:cf:65:9b:a7:e9:15:
2e:d9:be:8c:87:4e:b7:f3:b2:55:9f:cc:ac:5d:11:bb:fb:ba:
e5:f2:ce:0e:bd:bd:3f:94:cc:69:6f:7e:7a:2a:8c:a8:0c:3e:
43:e6:20:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:20:06 2025 by rpki-client