Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/42f4b48a-8109-42c1-b62d-35630df3e405.roa
File: 42f4b48a-8109-42c1-b62d-35630df3e405.roa (raw, json)
Hash identifier: fTDBNO0kQ+HIdIQwJ1b8YdqPooKan3xXPop2SZn38Vs=
Subject key identifier: 97:92:E7:08:25:B8:AC:42:2D:1D:50:0C:E2:08:D1:D8:6E:AB:1B:83
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 26BBD375BC329E70F771C047A39726A4F6C3A189
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/42f4b48a-8109-42c1-b62d-35630df3e405.roa
Signing time: Thu 05 Jun 2025 06:53:32 +0000
ROA not before: Thu 05 Jun 2025 06:53:32 +0000
ROA not after: Thu 10 Jul 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 07:13:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:bb:d3:75:bc:32:9e:70:f7:71:c0:47:a3:97:26:a4:f6:c3:a1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 5 06:53:32 2025 GMT
Not After : Jul 10 23:59:59 2025 GMT
Subject: serialNumber=2eb032295e8b6722e6c35cbe7f9bdf1b9e543c19a88bee34806c1af4a1ddf6a6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0b:97:7c:55:fa:51:7f:e7:8d:fa:fd:8d:c1:
ba:d9:3c:c4:50:e9:0a:3f:aa:72:68:31:79:0c:84:
b4:5c:87:07:a8:32:0c:eb:c0:4f:5e:37:83:92:4c:
bf:40:96:47:f9:99:42:96:bc:36:de:3d:e6:93:ef:
47:b3:5c:78:85:b2:a9:e6:57:92:30:dc:65:ff:46:
20:86:f3:f6:dd:75:ff:0f:cb:69:0c:a1:49:c3:03:
9c:c5:02:ae:99:8b:2b:17:34:a8:2c:d6:7b:30:42:
51:5e:6a:59:49:2b:9e:9e:d8:f3:57:53:4f:50:15:
81:51:00:95:1c:58:9c:9f:9e:b0:e5:c3:0c:11:81:
fe:98:81:b7:fc:03:01:e7:81:44:06:a0:3e:7b:7d:
6c:cb:21:df:09:a5:2d:78:44:8b:2d:7e:8b:3f:02:
24:04:d1:f9:e6:84:b0:b9:2a:8f:5b:4d:da:3b:34:
28:bd:bb:69:65:44:88:b6:db:19:86:59:a5:59:39:
a4:fb:9e:1d:49:32:36:3b:28:86:5d:dd:69:6a:75:
fe:d0:38:dd:5d:41:cf:40:52:46:cb:b0:f0:4d:0c:
7a:24:26:78:02:35:ae:9b:a8:73:b6:d6:33:a7:85:
a2:ce:93:ef:69:c1:31:f7:2d:2f:6b:68:68:ed:48:
6c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:92:E7:08:25:B8:AC:42:2D:1D:50:0C:E2:08:D1:D8:6E:AB:1B:83
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/42f4b48a-8109-42c1-b62d-35630df3e405.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:9b:15:ea:07:ea:1e:2c:83:c5:1a:aa:8f:bd:30:45:bd:c4:
63:49:9f:3f:46:98:b3:d0:2c:6b:08:d1:85:18:42:a8:de:a0:
a2:17:25:5b:7a:39:e2:b9:3f:22:12:e3:f6:d9:0c:b2:14:71:
0c:91:2e:f9:61:69:42:87:56:6d:f0:3f:60:c2:ac:be:d7:8c:
a2:26:b3:af:ff:8d:b8:e2:3e:47:b8:52:60:a7:10:f0:d2:56:
81:69:eb:20:3a:57:3e:e5:8f:7d:2f:89:3e:80:99:15:3f:ab:
25:10:cd:1b:a1:5e:4d:f0:4a:7f:6b:e7:26:e3:12:6d:c8:88:
69:14:d2:16:51:f1:ef:fa:6b:f3:e7:23:24:53:64:db:32:a9:
77:d8:98:ec:9b:c3:fe:28:17:86:a6:96:b9:4a:1c:88:03:80:
91:f4:17:3d:b3:3d:58:46:e5:00:ff:b8:d0:f5:5f:1e:df:fe:
71:ed:1f:e6:79:52:f8:5d:cb:4d:d5:4d:bf:0f:3e:bb:d5:72:
17:f0:81:4a:cf:4b:b7:05:64:f2:27:5d:2c:b6:98:6d:f5:ee:
c6:03:ee:da:c7:8c:0f:ab:80:48:56:77:2f:f2:45:88:c3:f8:
8a:3d:77:4f:a0:21:33:96:d5:c2:09:d6:48:af:ae:98:a1:f7:
72:fb:ae:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:53:49 2025 by rpki-client