Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3e6bfcf5-e7eb-4c72-9913-3f16fd9f0854.roa
File: 3e6bfcf5-e7eb-4c72-9913-3f16fd9f0854.roa (raw, json)
Hash identifier: nDWpIhv90X257zn91E5ilSomyP5+5XMRYfvy68HXEMQ=
Subject key identifier: 6F:FF:B6:51:03:E2:95:C8:D9:CA:C9:7F:3A:5C:20:78:9A:FF:1D:A9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2BE3A02630F6EB5BAC6DA9C4F62E4D927B35D504
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3e6bfcf5-e7eb-4c72-9913-3f16fd9f0854.roa
Signing time: Thu 17 Apr 2025 13:13:19 +0000
ROA not before: Thu 17 Apr 2025 13:13:19 +0000
ROA not after: Thu 22 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 13:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:e3:a0:26:30:f6:eb:5b:ac:6d:a9:c4:f6:2e:4d:92:7b:35:d5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 17 13:13:19 2025 GMT
Not After : May 22 23:59:59 2025 GMT
Subject: serialNumber=46af2101524b01ee48239c76751b00ff7e67578670023e09b93d77eb527283af, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:ec:e3:53:74:9b:6e:04:3e:54:3c:be:e9:
48:bc:a4:a3:f0:77:98:08:be:5a:8e:4b:d0:3c:7d:
0a:46:d8:bb:0f:03:a3:3a:fd:f5:a4:4b:11:7d:57:
8c:2a:c6:55:ee:52:1e:81:83:a0:94:02:4c:bd:fb:
31:1c:0e:a1:eb:ff:d5:4b:94:51:ce:e9:17:1b:9a:
bf:88:d7:2c:04:4d:96:6c:04:d7:72:f0:79:43:65:
9f:e8:30:8d:57:08:7f:d1:f3:03:d2:76:2e:a6:83:
0c:34:3c:7a:12:f9:47:28:78:29:94:9b:b6:1e:9d:
c5:09:b4:8f:b2:c2:c8:82:27:2b:7e:af:16:91:2c:
bc:65:84:83:93:98:cf:5a:ae:bc:77:89:8a:e9:21:
21:16:88:31:15:f5:47:55:ad:87:22:3c:dc:48:84:
49:c6:ae:d6:84:a1:aa:ce:ad:d3:61:a5:4b:a9:06:
1c:40:f1:f8:db:3b:6d:bf:0c:13:54:81:bf:96:f5:
b9:8e:40:d2:21:d1:20:f1:e1:f1:7d:cd:84:a9:08:
c5:c0:b5:57:aa:d1:92:ab:40:fc:12:8b:47:9d:59:
3b:e2:a7:3c:c2:9e:54:ad:c1:5c:c8:57:df:ef:4d:
87:73:9d:e1:5d:5c:f1:26:9f:dd:6d:37:8b:00:3c:
ce:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FF:B6:51:03:E2:95:C8:D9:CA:C9:7F:3A:5C:20:78:9A:FF:1D:A9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3e6bfcf5-e7eb-4c72-9913-3f16fd9f0854.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
77:05:41:b6:40:28:4b:18:44:9d:ac:0d:c7:ca:5b:e7:2a:9f:
80:82:1e:9a:ca:82:d1:a7:6f:11:20:64:36:91:3a:36:f2:9c:
fa:47:ff:ee:b6:09:2b:33:5c:61:db:05:56:63:c7:75:9a:2c:
0c:bd:2d:7e:07:bb:b6:58:91:61:f9:ae:ea:24:83:79:3d:eb:
a2:64:df:c5:36:98:2e:ed:22:6a:4d:c4:65:89:9a:a4:bb:84:
a5:b3:cc:01:85:4a:7f:f0:7e:be:2e:eb:e8:7d:a3:aa:b4:fa:
0b:39:bf:d6:86:58:76:7d:82:b2:54:ed:85:6d:57:d6:fd:d3:
e9:bf:65:7d:3f:fb:97:ae:1d:11:0c:70:63:80:8c:ab:43:b9:
33:ca:f3:c1:d6:e9:f5:6e:d1:0a:c2:83:5c:5e:7d:b4:58:78:
45:2c:22:7c:80:ed:08:9a:5c:f8:6d:d5:44:af:1d:cb:2b:a2:
c4:9b:67:b0:12:17:1e:17:4d:7e:74:58:a2:04:4f:97:3f:f8:
9e:3a:1c:65:78:76:67:9e:b0:19:9e:96:77:44:4a:b6:b6:14:
f5:ce:75:5b:cc:38:60:90:10:90:3d:78:45:b1:e1:19:28:55:
d1:1f:9f:8c:23:1d:81:c5:da:a8:d2:9a:23:44:ab:39:c2:4f:
81:4d:c8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:13:54 2025 by rpki-client