Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/581772a0-065b-40f2-9667-5dbc787f003c.roa
File: 581772a0-065b-40f2-9667-5dbc787f003c.roa (raw, json)
Hash identifier: EmuwuyNsxR1NriEb16j5Qb63BaMmc/QEyBpBQ+QWwxE=
Subject key identifier: FC:3D:5A:FB:95:80:BF:BC:84:FB:2D:5C:1D:8D:A3:81:8A:08:48:14
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 020FE2FFFD1FB71A6F191C14363AA3F238C805DD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/581772a0-065b-40f2-9667-5dbc787f003c.roa
Signing time: Sat 19 Apr 2025 06:13:20 +0000
ROA not before: Sat 19 Apr 2025 06:13:20 +0000
ROA not after: Sat 24 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Apr 2025 06:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:0f:e2:ff:fd:1f:b7:1a:6f:19:1c:14:36:3a:a3:f2:38:c8:05:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 19 06:13:20 2025 GMT
Not After : May 24 23:59:59 2025 GMT
Subject: serialNumber=42b918718b8889b00d2c953ec4f3c14512099a7a87a41df2736e2910caaa26f7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cf:25:45:21:6d:b4:ab:42:5c:e2:b9:70:9d:
fc:ac:3c:01:36:f7:5d:c0:84:08:38:7c:b1:ac:19:
be:b7:72:b4:ef:c6:d0:7b:2b:69:7e:7d:22:05:30:
4c:1f:2b:b4:cc:54:79:7f:b2:01:0a:de:0d:88:0b:
57:3a:de:75:22:34:ce:8e:e5:02:51:f8:ea:02:e7:
b4:20:5a:b7:9c:b7:d2:4d:f5:63:4b:31:8e:28:3b:
36:2a:e9:54:11:e2:f7:0d:0a:56:91:44:4c:aa:e2:
f4:1f:1f:d0:63:81:12:e0:cf:16:79:ea:44:d0:4a:
23:b1:d0:62:f9:af:d4:c7:3c:d4:10:33:73:5d:33:
ae:26:4d:6b:4d:bf:38:90:3b:2d:9c:1d:ca:98:d6:
9a:53:5c:e7:70:a2:b3:90:9d:29:56:dc:71:c9:1d:
de:7d:b3:11:c0:c2:2d:88:c1:72:f3:19:dd:3b:a6:
44:d9:16:62:0c:dd:ec:96:99:04:98:aa:05:97:0b:
87:82:20:92:61:ac:63:f2:54:22:00:56:21:ba:a6:
2d:87:93:54:5d:51:fd:dc:71:a3:8d:2c:a0:ca:5f:
4e:8f:e6:36:b7:e8:0c:74:86:b3:5c:65:af:2a:33:
b9:df:68:7a:da:6e:00:a3:c7:b1:0f:29:a3:15:98:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3D:5A:FB:95:80:BF:BC:84:FB:2D:5C:1D:8D:A3:81:8A:08:48:14
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/581772a0-065b-40f2-9667-5dbc787f003c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:4b:1c:37:47:ea:b6:b8:3e:88:e7:77:9d:53:18:43:22:51:
51:e3:6b:98:26:cd:34:5e:cf:9c:d9:a5:92:08:df:57:85:6f:
39:17:1e:be:85:ca:d2:f5:4e:b5:c1:a2:38:df:07:c3:9e:44:
b3:67:de:64:64:31:28:90:55:50:ef:b8:89:8b:cc:3c:6a:d3:
92:94:42:19:07:86:53:82:b9:7b:5a:2d:7a:fa:b8:51:ff:12:
22:ae:20:c4:05:ac:d8:29:9c:47:7d:7d:c3:41:44:25:7d:f4:
39:23:99:a4:34:68:0b:48:57:a7:32:89:3b:6b:b8:a5:77:0e:
3e:16:4f:43:14:84:66:ff:59:ac:54:5e:68:1c:5f:47:69:cd:
1f:96:22:a8:9d:82:1f:31:77:0d:47:19:5a:1a:5e:a1:0e:8f:
c0:73:70:c2:98:a6:2d:12:60:6a:41:2d:d3:d7:9f:6a:0a:19:
f0:b7:e5:58:fe:2f:dc:ff:35:80:88:34:ac:a5:3b:de:5b:3c:
3c:03:5d:78:c2:ab:61:ae:a3:0d:8e:ae:24:47:10:7f:70:9f:
3a:f7:9b:ec:ba:f3:de:01:02:77:89:00:d4:b4:5e:f5:24:fc:
92:b3:98:82:d0:af:80:8f:1c:e3:ea:33:ca:3a:79:05:dc:49:
73:db:41:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:31:18 2025 by rpki-client