Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5d76e2ae-887b-4716-b91c-97ece82bfc6b.roa
File: 5d76e2ae-887b-4716-b91c-97ece82bfc6b.roa (raw, json)
Hash identifier: N80URKYEtIVN/v6mu99Uf3xXaV4qHJOKZorJS7m+12o=
Subject key identifier: AC:DC:CB:B4:EF:11:C1:44:13:8C:35:75:0F:86:62:ED:86:11:5C:28
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7BE7AC628A22DF7F4B8DD1382628B4F5AB2A4170
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5d76e2ae-887b-4716-b91c-97ece82bfc6b.roa
Signing time: Mon 21 Apr 2025 02:38:19 +0000
ROA not before: Mon 21 Apr 2025 02:38:19 +0000
ROA not after: Mon 26 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 02:53:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:e7:ac:62:8a:22:df:7f:4b:8d:d1:38:26:28:b4:f5:ab:2a:41:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 21 02:38:19 2025 GMT
Not After : May 26 23:59:59 2025 GMT
Subject: serialNumber=ebd9d944ccfba169a1c4f3d9ec4a588b27defdfe7cf884a67e895a05c0bb5a3c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a9:57:42:18:5f:5f:bf:70:94:38:ce:94:a6:
da:1d:ea:08:13:63:bd:95:72:5f:6c:b1:13:e5:74:
1a:8e:e4:d1:5d:42:f8:4f:93:a0:1c:5e:c9:42:f6:
fd:6e:e7:2b:e8:60:80:ac:ea:29:2e:36:d3:d2:a9:
00:3e:73:3a:ce:0b:27:06:34:60:9e:1e:4a:99:0f:
c0:1c:09:e0:db:2b:9e:18:82:76:d8:47:83:29:d3:
9b:4f:c0:b3:80:12:b6:59:2f:96:df:f9:3a:6b:dd:
ff:23:61:eb:84:cc:8e:4b:16:de:e9:40:77:b2:af:
60:2d:b3:e6:00:36:62:b1:c1:21:35:ff:d2:50:f3:
22:ba:57:c7:25:03:d3:43:17:61:7b:8d:49:6a:7f:
55:2c:35:3e:c1:91:44:98:00:0e:f1:cf:ee:d2:64:
6c:17:36:4f:cc:e5:08:91:fe:7e:1c:55:bf:3c:2f:
36:4e:10:e8:00:7a:ba:da:18:95:65:ee:11:00:fc:
1a:2f:8f:0d:90:20:e4:94:0a:eb:b7:dd:78:18:b9:
17:2b:ce:a7:87:73:11:3d:3d:1f:e7:d5:22:83:a4:
9a:13:27:ce:ee:57:10:b6:ac:69:6e:89:1b:56:e3:
43:9a:e9:8e:8a:1d:14:af:d5:17:be:e0:09:73:b3:
1f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DC:CB:B4:EF:11:C1:44:13:8C:35:75:0F:86:62:ED:86:11:5C:28
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5d76e2ae-887b-4716-b91c-97ece82bfc6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
16:fd:f4:00:d7:9f:d1:4f:e0:88:32:b3:f5:eb:9c:4e:74:09:
f1:f6:45:b0:69:02:38:61:a9:6f:af:03:31:ab:d4:fa:87:fd:
60:0a:5f:b3:e9:97:55:80:7c:14:6a:07:06:b4:52:f3:ef:0a:
5e:12:50:71:b8:54:3f:39:50:f3:e9:1a:3c:42:d0:6e:62:e5:
3e:7b:d4:f3:34:88:e5:4c:b4:b3:df:b1:38:c6:51:51:de:3d:
ef:46:9a:22:04:30:f0:c9:b2:c6:d5:3f:96:2f:d8:0a:5e:3a:
d6:88:fd:16:b6:d5:6a:12:1d:0d:c4:e4:9b:61:23:75:b6:04:
9b:24:4f:25:c2:67:ee:ec:29:c6:b5:ce:87:d4:9f:c7:fd:20:
fa:97:8a:a0:15:97:7d:20:dc:d9:47:4e:b9:9d:1b:73:f1:2b:
e5:6d:e7:24:dd:db:d6:36:4c:de:d0:29:f9:b4:27:6a:d2:08:
62:1e:9b:ec:f3:3a:ca:61:47:a6:71:f8:f2:6a:fc:e7:6f:f4:
25:ec:f3:63:54:2c:13:17:89:df:89:d5:fd:0c:5f:72:73:83:
57:62:4b:2d:8d:95:06:16:b1:63:d6:72:3d:72:ef:c4:41:7e:
34:26:92:3a:a9:7e:36:8d:09:8e:f0:75:01:b8:45:fa:ce:f6:
a8:fe:c7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:02:16 2025 by rpki-client