Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3d0494d7-2763-435a-a238-935c9d167039.roa
File: 3d0494d7-2763-435a-a238-935c9d167039.roa (raw, json)
Hash identifier: IDHH6jcwZrVIU9rCG25z55uCfut8zg3uOYtfolkVBOY=
Subject key identifier: 8E:0C:7D:67:07:11:6F:F7:57:02:48:A2:9D:F6:3E:B9:D7:32:7D:ED
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2EB8273A7ACC26B1F706DDF6AAE7498A595E9412
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3d0494d7-2763-435a-a238-935c9d167039.roa
Signing time: Fri 25 Apr 2025 21:58:14 +0000
ROA not before: Fri 25 Apr 2025 21:58:14 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Apr 2025 22:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:b8:27:3a:7a:cc:26:b1:f7:06:dd:f6:aa:e7:49:8a:59:5e:94:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 25 21:58:14 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=c719f4b6ace43244d376d5812d27305a847775cb59058809c3e70a48257d747a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:34:d4:3a:e6:de:9c:c2:ce:c9:67:17:06:16:
56:01:29:8b:5a:3a:62:1c:21:df:92:e9:ee:6f:f3:
69:b9:f0:5d:3b:5f:7a:10:3b:38:91:58:58:01:fc:
e0:32:88:c2:2a:e1:cf:c6:ba:e6:18:ee:3a:9c:fc:
94:52:95:26:a4:82:2c:63:a8:4b:8a:14:96:60:cd:
f0:0c:6b:41:5d:df:e1:05:fc:61:3c:c5:5c:b9:4a:
52:09:1c:9a:12:f5:bd:85:3a:d1:8a:e5:69:d5:b3:
de:da:8d:cf:1a:02:55:1a:31:bb:46:30:be:9b:e3:
27:1c:e3:9e:7b:1f:b7:06:4a:38:5a:eb:a5:bb:0c:
e2:fa:c2:8b:d7:e8:90:a8:ea:8a:8f:7b:bb:b5:d5:
31:fb:74:fa:fe:ab:80:bb:8c:43:8c:2e:78:db:74:
6a:39:c6:c1:79:5f:a2:fe:a2:19:3f:16:1a:b7:11:
81:a2:b6:14:64:0d:95:3c:93:e6:c7:dd:87:40:00:
36:1a:e6:df:cb:d0:92:33:8e:63:10:d9:13:76:41:
ea:57:a5:e3:6c:86:66:ea:82:13:53:7d:3b:8c:6c:
c6:b2:97:f1:fd:cc:77:62:93:d4:8a:41:7c:84:c4:
c2:97:ae:8f:31:1f:10:65:f6:88:0f:fc:b5:d1:74:
62:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0C:7D:67:07:11:6F:F7:57:02:48:A2:9D:F6:3E:B9:D7:32:7D:ED
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3d0494d7-2763-435a-a238-935c9d167039.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:10:a2:b0:bd:84:2e:84:77:02:36:0f:d4:7b:11:ab:c9:bc:
0b:c1:cd:21:78:7e:8d:f7:da:9e:6c:65:90:ae:3b:eb:84:5a:
bc:9e:9d:e2:eb:be:6a:38:ce:47:e1:a3:3f:42:44:70:c9:11:
ab:79:4d:52:97:cf:d3:ad:b7:02:1b:31:78:d9:4c:dd:4f:df:
3e:b3:7b:16:c2:e0:46:71:de:21:ae:40:72:f6:18:77:f7:9a:
58:94:04:60:35:b0:b3:cf:8b:35:c4:13:9a:55:e3:37:18:68:
68:b9:0f:83:71:51:f0:cf:48:bb:d1:64:03:df:a0:b1:7e:32:
07:80:f2:6a:e1:3e:66:a2:fc:13:ae:d7:7b:47:97:93:03:7b:
64:55:5e:35:e0:80:ae:20:73:7f:da:01:ca:86:12:98:8b:db:
63:13:1a:57:cb:f2:be:c3:4e:f7:07:5e:45:65:d2:8d:cb:bd:
da:cd:46:5f:c2:2c:20:37:ac:60:37:5a:df:ab:fa:46:c1:c3:
1c:7a:7a:b0:59:9f:3c:90:d2:1f:bf:e6:a5:e6:2e:6b:c7:6a:
a5:b0:8f:5f:8b:5d:53:3d:12:3e:3e:6a:a2:0b:3a:31:29:32:
51:52:b9:c1:70:6c:29:b5:d9:d6:ed:85:30:b6:f1:5c:65:48:
e1:04:52:85
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULrgnOnrMJrH3Bt32qudJillelBIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNDI1MjE1ODE0WhcNMjUwNTMwMjM1OTU5
WjB6MUkwRwYDVQQFE0BjNzE5ZjRiNmFjZTQzMjQ0ZDM3NmQ1ODEyZDI3MzA1YTg0
Nzc3NWNiNTkwNTg4MDljM2U3MGE0ODI1N2Q3NDdhMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCdNNQ65t6cws7JZxcGFlYBKYtaOmIcId+S6e5v82m58F07
X3oQOziRWFgB/OAyiMIq4c/GuuYY7jqc/JRSlSakgixjqEuKFJZgzfAMa0Fd3+EF
/GE8xVy5SlIJHJoS9b2FOtGK5WnVs97ajc8aAlUaMbtGML6b4ycc4557H7cGSjha
66W7DOL6wovX6JCo6oqPe7u11TH7dPr+q4C7jEOMLnjbdGo5xsF5X6L+ohk/Fhq3
EYGithRkDZU8k+bH3YdAADYa5t/L0JIzjmMQ2RN2QepXpeNshmbqghNTfTuMbMay
l/H9zHdik9SKQXyExMKXro8xHxBl9ogP/LXRdGJLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUjgx9ZwcRb/dXAkiinfY+udcyfe0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzNkMDQ5NGQ3LTI3NjMtNDM1YS1hMjM4LTkzNWM5ZDE2NzAzOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKoQorC9hC6EdwI2D9R7EavJvAvB
zSF4fo332p5sZZCuO+uEWryeneLrvmo4zkfhoz9CRHDJEat5TVKXz9OttwIbMXjZ
TN1P3z6zexbC4EZx3iGuQHL2GHf3mliUBGA1sLPPizXEE5pV4zcYaGi5D4NxUfDP
SLvRZAPfoLF+MgeA8mrhPmai/BOu13tHl5MDe2RVXjXggK4gc3/aAcqGEpiL22MT
GlfL8r7DTvcHXkVl0o3LvdrNRl/CLCA3rGA3Wt+r+kbBwxx6erBZnzyQ0h+/5qXm
LmvHaqWwj1+LXVM9Ej4+aqILOjEpMlFSucFwbCm12dbthTC28VxlSOEEUoU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:32:44 2025 by rpki-client