Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/40456c49-5127-4101-9b08-58742ab23793.roa
File: 40456c49-5127-4101-9b08-58742ab23793.roa (raw, json)
Hash identifier: tNv+SrBysxzbkzlwqp/QTiz0KuMamOKO8fN+SF7xxXQ=
Subject key identifier: 67:04:86:6C:8D:CF:5A:1D:81:1B:05:DE:C0:D8:E7:8A:23:AB:EE:86
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 51BEB85749DA3BE53F1C6846689F27102AB601CC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/40456c49-5127-4101-9b08-58742ab23793.roa
Signing time: Wed 02 Apr 2025 07:08:19 +0000
ROA not before: Wed 02 Apr 2025 07:08:19 +0000
ROA not after: Wed 07 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Apr 2025 07:28:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:be:b8:57:49:da:3b:e5:3f:1c:68:46:68:9f:27:10:2a:b6:01:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 2 07:08:19 2025 GMT
Not After : May 7 23:59:59 2025 GMT
Subject: serialNumber=ad9665b93a0201798ee5daf41dd36bba39f00d73cf4746091f83bd538a5a2fa4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:ae:ec:48:bc:32:f6:e7:aa:8b:d9:30:7e:
3a:41:ef:f8:01:d7:68:84:15:c9:1f:c0:78:5e:e1:
26:fd:aa:c4:70:d4:c3:61:d7:58:6b:f1:20:d6:0c:
86:c0:c3:d3:40:f6:24:c2:f8:23:9a:96:df:dd:49:
ca:21:2a:ee:8e:f7:11:16:bd:d8:ce:a6:9d:a7:c5:
1b:68:46:0f:c4:14:a0:50:d5:10:75:2e:6b:c6:f3:
b3:0e:65:fa:63:30:84:ae:7b:e1:0b:c8:c1:fc:0e:
97:f8:c4:b0:09:69:bd:e6:5f:71:b1:de:e1:76:3b:
36:63:c1:c6:a0:1f:ae:11:ea:ac:b6:4f:89:99:50:
0a:b2:9f:7e:6c:31:52:29:59:ca:20:0f:51:73:29:
fd:95:ec:0c:ae:66:7d:70:cd:e6:14:d6:9f:72:0e:
6c:ac:f8:ba:3b:7b:31:31:c6:d2:14:c0:2c:cd:67:
f6:30:03:fe:de:6a:f1:11:d0:95:0a:14:03:b5:7d:
b7:cf:19:5a:51:a0:88:89:2d:24:1f:d9:3e:e5:bf:
12:83:7e:12:e8:5a:0b:bc:57:29:65:72:9a:f2:2a:
a0:9c:ad:74:50:47:c7:11:f7:e5:f8:a8:ff:dc:78:
5a:a0:a2:41:b3:d1:77:71:ed:6b:ac:25:8e:17:4d:
1a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:04:86:6C:8D:CF:5A:1D:81:1B:05:DE:C0:D8:E7:8A:23:AB:EE:86
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/40456c49-5127-4101-9b08-58742ab23793.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:33:12:67:1c:4d:65:27:2a:35:b4:96:7c:29:32:fd:ef:a1:
7f:d1:0d:ab:6b:5e:dc:8c:f4:1d:06:72:02:86:2f:40:5d:52:
f5:82:47:65:30:99:fc:9c:73:a9:83:da:ed:05:7c:c7:be:12:
64:2f:8e:71:3c:bb:41:ab:ee:1d:dc:77:d6:f5:f5:98:2c:2e:
6f:cb:60:52:a6:75:73:54:56:56:99:81:6b:9f:23:8f:56:a2:
d6:39:0e:56:b9:80:64:23:c7:05:ae:e9:98:a8:14:f9:40:f0:
ab:d0:ef:e1:32:50:4f:e1:22:a9:cf:e3:b2:75:fd:40:79:a2:
c5:0c:6d:5b:09:5e:d7:a2:a3:61:c1:b3:c0:6e:59:81:b4:34:
ff:30:fc:83:de:dd:b1:3c:40:7c:f9:fd:a6:a7:94:4e:9a:f5:
c8:50:f2:14:b6:70:35:31:00:09:9f:40:90:35:c2:d5:dc:5f:
c8:33:24:a9:31:fa:13:45:8b:aa:c5:fe:b1:aa:a7:ae:de:e7:
4f:10:bb:1a:41:03:cd:f6:aa:ac:24:5e:09:7d:e4:76:10:89:
56:c2:c3:82:d5:73:8e:cb:0f:07:aa:da:c0:62:7c:01:87:c8:
52:b8:c3:89:76:75:be:33:fd:dc:2f:ed:e6:3c:72:e1:b4:06:
7c:c5:80:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:06:20 2025 by rpki-client