Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5248e218-dafa-4730-87c7-a83f51ef5844.roa
File: 5248e218-dafa-4730-87c7-a83f51ef5844.roa (raw, json)
Hash identifier: OfcY5c5CjZne5c9YM+xOqA0D9Pns5eRUHWYq5JfRJvI=
Subject key identifier: 49:D1:40:89:34:B2:FA:72:55:F9:8C:11:4A:A1:FE:DB:35:AB:D8:BB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5B725B583BA671A054D2A1E6D3B2E056A5C2C3D9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5248e218-dafa-4730-87c7-a83f51ef5844.roa
Signing time: Tue 22 Apr 2025 11:33:17 +0000
ROA not before: Tue 22 Apr 2025 11:33:17 +0000
ROA not after: Tue 27 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Apr 2025 11:53:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:72:5b:58:3b:a6:71:a0:54:d2:a1:e6:d3:b2:e0:56:a5:c2:c3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 22 11:33:17 2025 GMT
Not After : May 27 23:59:59 2025 GMT
Subject: serialNumber=023818f13e4c46c9c47953997cf018be91d81066b65941a103dd19b70c894e6e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f9:8a:95:fb:4e:fd:df:f1:76:e2:11:a1:a4:
ee:5d:3e:e3:a4:d3:ac:57:91:94:9e:b5:e9:14:1d:
a8:ef:d3:f0:14:b7:2b:34:6a:55:ee:40:3f:a4:19:
f3:30:8f:22:fb:00:5d:3e:ac:16:7f:58:bc:5d:b3:
d6:99:50:0e:56:f0:ef:47:26:09:b2:7b:2a:8c:c0:
61:a2:57:28:3f:75:1c:81:2b:22:1b:a1:c5:6d:c3:
52:84:c5:db:d7:1b:3a:fd:7e:29:61:c0:ee:23:5e:
9f:b0:be:f7:27:29:58:59:04:17:74:d5:f9:1d:d4:
21:d3:35:06:df:00:73:70:8d:2b:e0:31:92:bc:d1:
75:76:7f:70:67:a5:55:42:d4:0e:20:0d:ae:ea:de:
31:a0:ab:32:03:f6:b0:be:08:a1:90:67:d1:6f:e3:
81:30:f1:6f:40:23:74:e3:d8:a3:3f:c3:e7:75:21:
b9:1b:2b:2a:83:d7:09:79:f5:0b:f0:e2:e2:4e:23:
df:34:8b:d5:67:c4:e9:cd:52:ed:f6:55:8f:83:21:
04:6b:2f:22:b1:8a:22:e9:aa:71:2b:3b:52:13:45:
7e:97:8c:24:ba:ef:e5:bb:c8:dc:cd:bb:12:8c:54:
2d:3e:0b:ac:12:1a:4c:26:f2:0c:81:5a:19:5f:8f:
03:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D1:40:89:34:B2:FA:72:55:F9:8C:11:4A:A1:FE:DB:35:AB:D8:BB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5248e218-dafa-4730-87c7-a83f51ef5844.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
37:44:b0:b4:09:27:a8:a8:e4:5c:ba:db:f2:0b:a2:98:66:e4:
12:27:50:47:70:67:ae:30:9d:28:df:47:10:08:46:e8:72:b1:
d6:57:3b:7a:9e:5a:e1:ea:3a:78:1b:cf:0d:a0:8f:7f:ab:ff:
3b:44:6c:f2:cd:31:8c:bf:18:d5:ff:a0:03:bc:71:a3:d9:7c:
71:c8:67:32:77:ea:bd:9f:07:36:a1:7c:91:b3:4c:84:32:49:
01:48:af:34:2c:c4:21:21:36:98:c9:da:8b:8a:21:ab:6b:6d:
17:2c:a1:c2:95:e7:a1:d6:94:a0:0e:a5:f6:76:a2:88:9d:9f:
cd:cc:2f:cc:07:65:22:4e:c2:61:e5:c7:0f:f5:60:6b:9f:c5:
75:26:7a:57:d3:ab:f1:8e:da:ff:a4:47:ce:3d:6a:69:85:64:
08:67:b4:b7:ff:53:69:62:a1:29:be:52:3e:8e:f0:f8:d8:fa:
21:0c:0f:7e:85:17:ad:b4:94:37:53:fb:cf:db:3e:bc:82:dc:
8b:29:52:3f:8a:20:78:61:6c:7f:0a:15:a8:2b:38:54:47:36:
8e:3b:89:bd:4c:68:ca:fd:77:17:b7:65:ee:8d:c8:f3:70:b1:
71:b0:03:5c:e5:5c:5a:5d:4a:58:d9:2c:84:ce:7c:1a:bf:33:
7c:32:8a:27
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUW3JbWDumcaBU0qHm07LgVqXCw9kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNDIyMTEzMzE3WhcNMjUwNTI3MjM1OTU5
WjB6MUkwRwYDVQQFE0AwMjM4MThmMTNlNGM0NmM5YzQ3OTUzOTk3Y2YwMThiZTkx
ZDgxMDY2YjY1OTQxYTEwM2RkMTliNzBjODk0ZTZlMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2+YqV+0793/F24hGhpO5dPuOk06xXkZSetekUHajv0/AU
tys0alXuQD+kGfMwjyL7AF0+rBZ/WLxds9aZUA5W8O9HJgmyeyqMwGGiVyg/dRyB
KyIbocVtw1KExdvXGzr9filhwO4jXp+wvvcnKVhZBBd01fkd1CHTNQbfAHNwjSvg
MZK80XV2f3BnpVVC1A4gDa7q3jGgqzID9rC+CKGQZ9Fv44Ew8W9AI3Tj2KM/w+d1
IbkbKyqD1wl59Qvw4uJOI980i9VnxOnNUu32VY+DIQRrLyKxiiLpqnErO1ITRX6X
jCS67+W7yNzNuxKMVC0+C6wSGkwm8gyBWhlfjwORAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUSdFAiTSy+nJV+YwRSqH+2zWr2LswHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzUyNDhlMjE4LWRhZmEtNDczMC04N2M3LWE4M2Y1MWVmNTg0NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADdEsLQJJ6io5Fy62/ILophm5BIn
UEdwZ64wnSjfRxAIRuhysdZXO3qeWuHqOngbzw2gj3+r/ztEbPLNMYy/GNX/oAO8
caPZfHHIZzJ36r2fBzahfJGzTIQySQFIrzQsxCEhNpjJ2ouKIatrbRcsocKV56HW
lKAOpfZ2ooidn83ML8wHZSJOwmHlxw/1YGufxXUmelfTq/GO2v+kR849ammFZAhn
tLf/U2lioSm+Uj6O8PjY+iEMD36FF620lDdT+8/bPryC3IspUj+KIHhhbH8KFagr
OFRHNo47ib1MaMr9dxe3Ze6NyPNwsXGwA1zlXFpdSljZLITOfBq/M3wyiic=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:33:27 2025 by rpki-client