Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/51abed00-ee6b-4edd-b643-a46a73076f17.roa
File: 51abed00-ee6b-4edd-b643-a46a73076f17.roa (raw, json)
Hash identifier: MphAxiQ1TeOwvCFM5xMXMg13AH9Y5qkquHZcVkx7jM4=
Subject key identifier: 6E:B3:4B:9C:1D:B9:C9:51:2B:53:C5:32:93:CB:9C:35:2F:A4:8C:02
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 737FA33C7FB359877C0D350A719770D780764EBF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/51abed00-ee6b-4edd-b643-a46a73076f17.roa
Signing time: Sat 05 Apr 2025 13:13:19 +0000
ROA not before: Sat 05 Apr 2025 13:13:19 +0000
ROA not after: Sat 10 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Apr 2025 13:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:7f:a3:3c:7f:b3:59:87:7c:0d:35:0a:71:97:70:d7:80:76:4e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 5 13:13:19 2025 GMT
Not After : May 10 23:59:59 2025 GMT
Subject: serialNumber=a1dfe79cc27b9cab9f46c8fb52131d30c1e904955c19bb9b2e2b529f8fed74c3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:82:1c:79:1e:01:73:82:3c:a2:7f:f3:ee:
1b:5c:84:a0:55:ce:fc:4b:34:ea:63:87:fd:0c:6c:
4a:01:47:e1:9a:c7:d7:ab:92:b5:61:f4:df:04:27:
91:98:cd:f4:87:39:fe:32:42:28:2b:07:dd:f0:2d:
00:a0:a8:61:6e:e2:92:7c:6b:ba:4e:87:e7:63:7e:
ef:f8:4c:9f:e0:a8:da:6b:87:2c:52:f1:5f:4c:dd:
0d:8f:9a:c3:98:47:a5:33:6c:92:d0:f1:17:6d:bd:
48:33:0b:29:95:d2:d2:46:a5:10:f2:dc:6c:f4:e7:
fd:2f:6d:35:bd:34:8c:ef:04:f8:b9:ba:8d:4f:c7:
a8:15:96:64:7f:69:c2:4a:fa:a9:79:9d:2c:c5:17:
47:4e:48:35:3c:2b:35:2a:30:06:e5:95:84:4d:bd:
8c:7d:bf:66:5d:99:87:77:4c:28:34:e6:f8:db:f0:
6f:d1:e3:ec:9f:9d:89:f3:c4:64:dc:d1:0c:d9:f0:
c6:b8:88:bf:ac:27:d2:42:80:8f:9b:10:0b:c4:d7:
64:cf:d1:70:de:3c:26:43:1c:c3:53:d3:01:84:31:
7f:03:ee:13:07:78:7b:f1:3d:a8:7e:b0:89:45:2c:
8d:8c:b8:23:76:98:16:1d:d8:a7:fd:d9:51:74:5b:
50:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B3:4B:9C:1D:B9:C9:51:2B:53:C5:32:93:CB:9C:35:2F:A4:8C:02
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/51abed00-ee6b-4edd-b643-a46a73076f17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
54:d3:c3:9e:07:3a:07:bc:f3:30:9e:17:b9:2c:05:42:8f:f2:
6b:93:9f:fa:02:81:b3:4a:d7:53:9d:aa:9d:b9:53:9a:89:de:
e2:ce:20:8d:6a:c2:53:35:35:ab:0f:d5:63:34:3f:7b:e6:f4:
cb:71:93:af:37:fc:3d:f5:12:6d:97:d4:92:0d:e7:b8:be:1f:
bb:9d:4b:ff:29:4a:de:43:dd:a5:13:e9:e1:10:b8:c0:98:33:
b4:a7:9f:5e:86:31:1e:8c:8e:75:dc:c2:ec:26:5f:f5:b2:fe:
34:cd:f2:e1:0d:36:ed:53:2e:39:e7:ed:a4:33:a6:4a:28:81:
46:d2:9a:82:33:c4:e5:e2:15:a2:9a:75:4e:58:b8:b4:ff:94:
92:bb:ff:ca:af:a6:d4:95:89:43:60:c5:79:d7:72:9d:a8:2a:
7a:a9:c9:28:9c:7b:84:af:84:75:31:96:85:8e:bc:fc:d9:bf:
17:45:70:41:25:14:54:24:a9:34:1b:9b:0d:a7:28:96:54:f8:
bc:08:6e:a8:a3:a7:09:be:7c:aa:45:52:44:89:e7:32:6e:bb:
c1:86:af:fb:3b:a5:6b:6c:42:ec:04:2e:1d:b9:0e:15:4b:a8:
42:1f:9f:3a:d4:5d:9e:7d:b0:0c:09:6e:74:8b:95:97:d1:d9:
2b:3a:05:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:46:46 2025 by rpki-client