Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/558f7ae7-effc-4908-9c9d-2af5e3bde58b.roa
File: 558f7ae7-effc-4908-9c9d-2af5e3bde58b.roa (raw, json)
Hash identifier: hAwIrnF2lVHebSl12UcnEau1LUuH7SKCLRC27lfo0jY=
Subject key identifier: 35:F3:4A:35:6D:7E:06:1E:17:3D:52:74:4C:0D:50:19:D7:B7:8C:F3
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7CDE9D596B8674D2541F3FE571A902B1B3D54EBF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/558f7ae7-effc-4908-9c9d-2af5e3bde58b.roa
Signing time: Thu 17 Apr 2025 02:38:17 +0000
ROA not before: Thu 17 Apr 2025 02:38:17 +0000
ROA not after: Thu 22 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 02:53:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:de:9d:59:6b:86:74:d2:54:1f:3f:e5:71:a9:02:b1:b3:d5:4e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 17 02:38:17 2025 GMT
Not After : May 22 23:59:59 2025 GMT
Subject: serialNumber=c8d32166b3ea6b923a9932e24070faae8f225c052ccbb1f4691ff005a32f8f75, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2b:fa:85:76:7e:8a:5f:10:fd:40:23:54:c2:
57:c1:94:0b:76:aa:d1:59:28:f9:74:5b:95:b8:35:
5f:3b:a6:0d:bb:b5:94:ff:2e:a5:d3:c0:d3:09:aa:
e5:5f:cf:4f:3a:8b:90:b3:5b:d2:2b:74:8d:f1:a4:
d5:19:71:b3:60:37:f8:91:b7:05:9d:2e:21:a6:ca:
a4:55:c7:06:3d:25:e2:96:8d:c5:8d:bf:60:f1:a5:
2a:2c:04:80:39:84:66:9c:aa:56:26:30:4d:07:4a:
66:18:77:a1:f0:3b:c7:db:7f:24:c3:1f:3b:a2:62:
0c:8d:c2:b1:d4:ee:0c:8c:bb:a9:ba:d5:2c:6b:1e:
5a:97:36:1e:00:6b:b4:24:6b:1a:38:9f:48:0d:36:
0e:d3:71:40:c4:e6:47:22:4b:9c:74:47:a5:72:54:
3f:05:5c:88:b5:96:aa:87:03:ed:27:7f:68:51:19:
2a:3c:ba:74:8c:97:ad:d9:60:55:da:61:49:3c:54:
0e:1c:0b:b8:9d:6b:3e:ac:35:f3:ab:59:9d:50:ef:
60:86:12:3b:ac:ab:08:51:9e:dc:85:66:88:dc:45:
02:99:af:04:b5:fc:0f:77:7a:9d:71:ee:67:23:9a:
d4:92:0b:ca:45:4d:cc:5e:c8:e6:79:a4:fe:af:73:
41:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F3:4A:35:6D:7E:06:1E:17:3D:52:74:4C:0D:50:19:D7:B7:8C:F3
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/558f7ae7-effc-4908-9c9d-2af5e3bde58b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:44:ac:34:fa:d5:58:dd:f1:d0:55:3e:1a:2b:ae:cf:6a:c2:
df:5d:a9:71:f8:a4:1f:f6:c4:90:1d:a7:f9:6b:16:de:c0:7e:
28:99:a7:47:3f:ee:f5:05:42:fd:bb:e8:50:6b:23:d5:99:85:
e0:9a:0c:d8:3b:1f:67:51:a8:bb:6e:c2:f8:b3:0f:a2:23:8b:
d5:bb:21:f7:2c:20:06:ea:36:87:92:ba:cc:d3:c7:db:90:20:
5a:41:95:b3:8e:22:2d:db:42:58:15:ed:de:25:c2:90:4f:9f:
77:50:f4:8a:62:a3:04:0d:0e:f0:5c:41:49:18:f5:da:9f:81:
53:0c:cb:0b:e9:09:91:99:01:9d:b3:dc:1e:cc:35:66:4f:74:
00:26:39:37:0b:e9:05:be:09:29:6a:73:5c:bb:ff:59:44:6b:
98:3a:d5:b3:ea:7b:06:65:c0:a0:ae:2e:9b:a9:e8:96:5a:03:
fb:26:14:73:9a:2f:bb:c9:ec:8c:42:70:c8:7e:a1:b9:ff:38:
63:3b:1d:a4:0c:fe:2c:9d:86:7e:95:ce:9e:89:0d:c1:88:c0:
f2:83:0a:1b:e1:86:e3:84:a9:3b:85:74:7e:56:e7:14:f5:58:
f2:02:87:57:fc:5f:6e:ef:ea:bf:e2:9f:62:83:5a:79:5a:0b:
d8:f8:1a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:00:10 2025 by rpki-client