Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/64f3d2e7-e908-4299-b4a7-8592b9ef52dc.roa
File: 64f3d2e7-e908-4299-b4a7-8592b9ef52dc.roa (raw, json)
Hash identifier: 2idiaE7ByYW6XaqayljEUG8lWVWHJvhKJAR/EkYvcJE=
Subject key identifier: BE:95:61:6B:15:85:2A:A5:9B:8A:2A:2F:98:75:BB:E1:AE:BB:FE:F6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0B72A3CC4F52DE33031E85E93292E57FA387117F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/64f3d2e7-e908-4299-b4a7-8592b9ef52dc.roa
Signing time: Thu 10 Apr 2025 18:48:17 +0000
ROA not before: Thu 10 Apr 2025 18:48:17 +0000
ROA not after: Thu 15 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 19:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:72:a3:cc:4f:52:de:33:03:1e:85:e9:32:92:e5:7f:a3:87:11:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 10 18:48:17 2025 GMT
Not After : May 15 23:59:59 2025 GMT
Subject: serialNumber=db0d3acf8a9c0d04e37e433465192a96c4bf71c8dd1e47c4e113b79081fc7d6d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3a:88:fc:70:c4:c5:ae:3d:d1:11:ba:f6:ff:
39:48:ed:b6:e0:6f:5b:fe:c3:bd:ce:dd:3d:dd:d3:
78:61:09:c0:d1:35:d9:5d:55:85:21:98:e6:75:19:
00:ea:6c:64:0b:84:11:45:79:98:23:32:8a:e2:18:
7b:61:a6:15:54:ab:9e:7f:23:c7:70:64:f3:43:00:
9a:fc:6e:5f:a3:d6:1d:39:15:80:5b:16:08:0d:97:
af:07:aa:f2:5d:5e:29:18:70:03:41:8b:04:fb:13:
34:d8:48:3d:66:ad:ec:cd:fc:1a:af:f9:d8:a1:45:
5f:85:3c:14:91:8e:d3:1c:5a:8f:e6:63:04:d9:85:
16:a0:b4:a6:74:ed:a1:1e:3e:45:81:ec:64:b9:51:
aa:8e:c6:bc:01:ca:99:e1:62:a9:b9:ee:9c:77:68:
8d:43:5c:6f:bf:f0:ee:72:ba:56:ee:43:11:0f:f9:
bd:8c:97:d1:16:1b:25:24:c4:55:0c:09:44:d4:92:
58:f9:43:c1:94:5e:ca:6d:7d:52:42:c2:5a:e1:fa:
ee:20:d3:a4:d7:df:08:bb:b1:6b:38:d9:f6:a2:f9:
53:ea:89:c1:80:17:fb:f9:fb:1d:92:fd:6a:00:a9:
a9:e5:00:3c:75:3b:6a:50:a3:b8:94:9e:56:19:11:
69:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:95:61:6B:15:85:2A:A5:9B:8A:2A:2F:98:75:BB:E1:AE:BB:FE:F6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/64f3d2e7-e908-4299-b4a7-8592b9ef52dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e3:cb:a7:02:31:47:cf:33:5c:45:f8:de:3d:8d:fa:dc:6e:
25:4e:b9:4b:f8:9b:69:5d:df:f2:90:27:ed:b0:a4:0b:04:34:
b5:34:ad:ab:12:11:a2:35:34:d1:1c:7f:23:54:a7:6d:e1:1b:
22:3b:87:f7:7f:24:76:48:1f:d5:00:3b:b2:57:3c:62:79:71:
f8:37:f9:a5:0a:4f:89:27:66:91:f1:65:0e:09:af:52:65:cf:
87:2c:6e:99:48:a7:57:30:20:ee:6e:61:e5:be:23:41:34:8d:
af:0e:23:50:87:56:de:a1:fc:d1:d2:9f:05:68:c9:43:45:9e:
3e:e8:c4:42:07:64:21:36:ed:b2:33:77:b9:db:fc:6c:1d:98:
fa:83:e1:cc:7b:03:67:f2:3a:48:b1:9a:6e:53:69:0b:8a:44:
da:34:9b:53:be:5c:87:c1:33:f4:df:83:f2:28:ed:d2:fe:31:
65:89:1e:e3:53:cc:83:b1:f0:89:37:35:03:19:06:ee:35:3f:
c1:87:7f:7d:0a:0e:73:08:4e:be:30:fa:4e:29:1d:a0:57:dd:
38:6d:7f:04:c8:70:bc:34:a2:18:ee:a2:5b:07:90:c1:96:85:
c1:40:79:51:38:64:d1:d3:5c:c4:18:3a:af:e8:70:07:6c:44:
15:5c:3e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:40:43 2025 by rpki-client