Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/67bc0356-bede-445b-8771-8328adedb085.roa
File: 67bc0356-bede-445b-8771-8328adedb085.roa (raw, json)
Hash identifier: tYVsjPpsBHpI6F0QXRaAZtPk0th72nUOWUu+6dZq3qU=
Subject key identifier: 9F:62:5F:7C:BC:16:75:81:CA:13:3E:F5:5F:94:0B:DC:12:77:D9:24
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5331077F9B79C64FCE826946D499C54D35F92DA5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/67bc0356-bede-445b-8771-8328adedb085.roa
Signing time: Thu 03 Apr 2025 21:48:19 +0000
ROA not before: Thu 03 Apr 2025 21:48:19 +0000
ROA not after: Thu 08 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Apr 2025 22:08:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:31:07:7f:9b:79:c6:4f:ce:82:69:46:d4:99:c5:4d:35:f9:2d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 3 21:48:19 2025 GMT
Not After : May 8 23:59:59 2025 GMT
Subject: serialNumber=988ab00f0e30273c013aaf684be654ad7ab94987cae79b5e555d89cee30cd854, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:44:74:57:9e:5f:a8:46:d4:0a:20:cd:83:95:
71:71:c5:66:5b:7b:fb:82:28:b9:03:c2:a2:3e:ed:
34:19:ca:8e:72:93:d6:29:f6:0f:a9:c6:e4:05:0a:
8b:a2:31:8f:19:3d:0d:e4:ff:a0:65:b2:e6:e7:d1:
e5:8f:52:ff:6f:e1:22:4d:c1:37:ab:0f:f7:5c:fc:
af:97:3e:4e:47:ff:b5:cd:59:36:fc:88:36:15:60:
1a:85:ca:26:5c:00:64:cb:16:5c:2c:32:a4:52:a6:
79:e2:f0:ed:bd:85:4e:6e:a0:20:a4:29:c9:95:83:
19:a1:6a:cf:49:46:be:62:42:62:bd:84:44:d2:84:
14:ca:52:fc:a7:48:06:e0:a1:8e:b0:ad:cb:c7:c5:
b2:0e:33:ff:45:58:2d:a9:c0:4d:db:64:53:b4:28:
ce:59:67:6d:30:9a:38:65:00:ec:65:3b:86:45:e6:
86:56:d4:f1:b7:64:5c:da:b8:61:36:94:f0:dd:5f:
d5:89:4f:78:97:27:18:5e:77:56:c7:9b:91:80:53:
1a:e9:8c:ea:6b:d3:64:2f:c6:0e:e4:b5:b3:11:c1:
d8:3e:a9:74:2a:79:27:39:6b:f2:6e:5f:3b:9b:68:
88:f1:4c:25:44:d9:06:81:08:b0:74:fd:c8:fc:e0:
26:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:62:5F:7C:BC:16:75:81:CA:13:3E:F5:5F:94:0B:DC:12:77:D9:24
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/67bc0356-bede-445b-8771-8328adedb085.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:96:7f:a1:19:80:76:eb:ac:95:2f:e1:b9:d7:db:eb:24:23:
ed:a1:43:f5:ac:0a:ff:62:b7:53:55:ce:1c:ad:b9:80:94:86:
86:58:94:d9:d8:13:3e:70:f4:0d:3d:7f:9f:08:e1:5a:65:b8:
43:53:da:8e:c8:57:ce:e8:4f:cb:d1:25:bd:7b:61:33:39:cd:
3e:e0:94:f2:19:5a:4a:25:d9:08:e5:b4:ca:59:c1:7b:c2:83:
84:c9:25:0f:78:bb:3c:93:1c:43:65:7c:dc:eb:ae:d8:69:11:
d2:c4:d8:75:49:90:a9:59:7d:53:67:33:25:51:31:80:82:f5:
04:13:fb:df:59:06:90:88:ab:99:93:28:98:25:58:94:3a:a4:
fb:49:37:64:ce:3f:cb:4f:be:dd:f8:3a:10:09:54:86:6c:4b:
a3:34:95:ad:e8:7a:46:e3:3f:eb:53:fc:2b:3b:1e:ef:87:6a:
2c:5b:69:4f:b2:32:f1:45:06:66:f9:26:4c:c2:9f:d9:52:d3:
48:92:5e:7f:00:2b:c3:18:ab:86:b1:45:7c:54:e6:8a:03:10:
32:f8:aa:3b:1e:93:95:b9:4f:10:80:72:90:4a:8b:d9:82:bf:
fc:37:22:ae:cb:dc:54:7d:f2:b7:13:63:9c:67:57:f2:82:a7:
e7:fa:a0:55
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUzEHf5t5xk/OgmlG1JnFTTX5LaUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNDAzMjE0ODE5WhcNMjUwNTA4MjM1OTU5
WjB6MUkwRwYDVQQFE0A5ODhhYjAwZjBlMzAyNzNjMDEzYWFmNjg0YmU2NTRhZDdh
Yjk0OTg3Y2FlNzliNWU1NTVkODljZWUzMGNkODU0MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDrRHRXnl+oRtQKIM2DlXFxxWZbe/uCKLkDwqI+7TQZyo5y
k9Yp9g+pxuQFCouiMY8ZPQ3k/6Blsubn0eWPUv9v4SJNwTerD/dc/K+XPk5H/7XN
WTb8iDYVYBqFyiZcAGTLFlwsMqRSpnni8O29hU5uoCCkKcmVgxmhas9JRr5iQmK9
hETShBTKUvynSAbgoY6wrcvHxbIOM/9FWC2pwE3bZFO0KM5ZZ20wmjhlAOxlO4ZF
5oZW1PG3ZFzauGE2lPDdX9WJT3iXJxhed1bHm5GAUxrpjOpr02Qvxg7ktbMRwdg+
qXQqeSc5a/JuXzubaIjxTCVE2QaBCLB0/cj84CbZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUn2JffLwWdYHKEz71X5QL3BJ32SQwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzY3YmMwMzU2LWJlZGUtNDQ1Yi04NzcxLTgzMjhhZGVkYjA4NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBALaWf6EZgHbrrJUv4bnX2+skI+2h
Q/WsCv9it1NVzhytuYCUhoZYlNnYEz5w9A09f58I4VpluENT2o7IV87oT8vRJb17
YTM5zT7glPIZWkol2QjltMpZwXvCg4TJJQ94uzyTHENlfNzrrthpEdLE2HVJkKlZ
fVNnMyVRMYCC9QQT+99ZBpCIq5mTKJglWJQ6pPtJN2TOP8tPvt34OhAJVIZsS6M0
la3oekbjP+tT/Cs7Hu+HaixbaU+yMvFFBmb5JkzCn9lS00iSXn8AK8MYq4axRXxU
5ooDEDL4qjsek5W5TxCAcpBKi9mCv/w3Iq7L3FR98rcTY5xnV/KCp+f6oFU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:36 2025 by rpki-client