Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6cffed79-79c3-4cbf-8e03-2698969cd579.roa
File: 6cffed79-79c3-4cbf-8e03-2698969cd579.roa (raw, json)
Hash identifier: NlWWR6eyKav/xT+9VzQM6sIo/bqDZvTTEyijdVIjSLI=
Subject key identifier: FB:74:3D:BB:7C:04:9B:15:BF:36:57:13:C5:4C:B2:C7:5D:C4:CC:A4
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 44E1F5AC0EF4408C153EA0D307D0DACF4E17556B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6cffed79-79c3-4cbf-8e03-2698969cd579.roa
Signing time: Thu 10 Apr 2025 01:33:18 +0000
ROA not before: Thu 10 Apr 2025 01:33:18 +0000
ROA not after: Thu 15 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 01:53:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:e1:f5:ac:0e:f4:40:8c:15:3e:a0:d3:07:d0:da:cf:4e:17:55:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 10 01:33:18 2025 GMT
Not After : May 15 23:59:59 2025 GMT
Subject: serialNumber=6445fe1c55b8579af4e0d6af57b7f7d26bca1516fb438a2a5cffd0b9d39663fe, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bc:f4:20:44:13:d1:89:f6:53:ec:a7:69:94:
22:18:1c:a1:1e:54:c5:ad:54:d8:aa:a8:70:26:b5:
93:45:5e:5f:21:3e:e7:8a:8b:45:10:6e:1b:7d:31:
cf:eb:87:f6:fb:7b:70:6d:60:20:bd:ee:80:6a:86:
d2:ca:2a:40:50:b0:86:e4:dd:7d:30:7f:48:e9:07:
5d:8b:77:19:a0:eb:eb:c8:ae:8d:2a:a7:9a:57:71:
3b:d8:b4:70:97:d2:90:52:87:ed:26:45:ec:50:58:
d8:41:b5:32:a7:57:64:57:2f:f3:c1:4d:55:38:dc:
97:91:9b:e4:8c:c1:68:ef:04:ec:2e:2f:95:4b:90:
d4:8b:e4:14:b3:87:2e:41:fb:76:ea:fa:56:69:a1:
0a:3a:29:25:ce:97:43:08:76:5f:cf:62:2e:ef:1e:
88:03:0f:03:4d:2c:ee:00:cd:b4:2e:fe:57:0d:1c:
79:58:41:4b:87:3f:c7:19:ef:15:b3:b4:37:b6:69:
31:d1:3f:e4:40:11:bb:ee:67:b0:31:2a:7d:82:4c:
d1:ab:df:d2:f3:3e:50:a7:0f:a9:93:79:da:e4:cf:
ce:87:48:0c:bf:cf:4b:d0:08:af:2e:74:21:a0:96:
61:8b:83:b5:fe:5f:09:03:c3:47:5f:fd:1d:53:46:
3a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:74:3D:BB:7C:04:9B:15:BF:36:57:13:C5:4C:B2:C7:5D:C4:CC:A4
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6cffed79-79c3-4cbf-8e03-2698969cd579.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f4:1a:09:dd:4a:8c:55:3a:22:2b:b3:e5:f8:5f:0d:a9:04:
9c:e1:d5:51:84:66:58:b2:4b:f6:05:4b:35:44:d1:fb:a0:fe:
41:8a:56:5d:bb:4d:ff:58:0d:d8:5c:e4:54:9f:f0:82:98:5d:
12:ab:43:0c:8e:4f:36:8b:72:88:4f:84:d9:03:85:9a:ea:c9:
40:31:14:b8:1a:e7:64:c0:18:99:51:a3:00:c3:c6:9d:d2:1b:
68:52:bb:86:d4:a0:29:5f:3b:d5:13:0c:d5:cf:e1:33:de:77:
57:fc:38:d3:d5:c9:70:1c:8e:f7:98:0f:f8:ad:01:e7:99:97:
08:0b:2a:34:30:49:5c:a0:d0:68:a3:b7:5d:c3:cc:40:6d:d2:
b4:1d:50:58:2c:18:e4:0f:89:5a:7d:7f:32:1f:61:86:8e:dd:
56:b7:b6:a6:b1:cb:61:86:91:80:45:ac:4a:18:ec:f5:e4:29:
2a:e2:51:7a:5d:35:33:30:da:eb:30:51:91:74:8e:e2:5d:14:
64:ac:08:6b:c4:6a:16:7b:d9:f2:32:a5:79:6f:6b:7f:5e:ab:
a2:ee:44:f6:ee:3d:28:9e:2a:86:ce:23:22:5c:4e:d3:6d:11:
86:59:79:8d:e7:bd:d8:ee:9a:7f:6a:b7:be:df:3c:ea:92:4d:
9f:a3:cc:b6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUROH1rA70QIwVPqDTB9Daz04XVWswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNDEwMDEzMzE4WhcNMjUwNTE1MjM1OTU5
WjB6MUkwRwYDVQQFE0A2NDQ1ZmUxYzU1Yjg1NzlhZjRlMGQ2YWY1N2I3ZjdkMjZi
Y2ExNTE2ZmI0MzhhMmE1Y2ZmZDBiOWQzOTY2M2ZlMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDDvPQgRBPRifZT7KdplCIYHKEeVMWtVNiqqHAmtZNFXl8h
PueKi0UQbht9Mc/rh/b7e3BtYCC97oBqhtLKKkBQsIbk3X0wf0jpB12Ldxmg6+vI
ro0qp5pXcTvYtHCX0pBSh+0mRexQWNhBtTKnV2RXL/PBTVU43JeRm+SMwWjvBOwu
L5VLkNSL5BSzhy5B+3bq+lZpoQo6KSXOl0MIdl/PYi7vHogDDwNNLO4AzbQu/lcN
HHlYQUuHP8cZ7xWztDe2aTHRP+RAEbvuZ7AxKn2CTNGr39LzPlCnD6mTedrkz86H
SAy/z0vQCK8udCGglmGLg7X+XwkDw0df/R1TRjo/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU+3Q9u3wEmxW/NlcTxUyyx13EzKQwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzZjZmZlZDc5LTc5YzMtNGNiZi04ZTAzLTI2OTg5NjljZDU3OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADD0GgndSoxVOiIrs+X4Xw2pBJzh
1VGEZliyS/YFSzVE0fug/kGKVl27Tf9YDdhc5FSf8IKYXRKrQwyOTzaLcohPhNkD
hZrqyUAxFLga52TAGJlRowDDxp3SG2hSu4bUoClfO9UTDNXP4TPed1f8ONPVyXAc
jveYD/itAeeZlwgLKjQwSVyg0Gijt13DzEBt0rQdUFgsGOQPiVp9fzIfYYaO3Va3
tqaxy2GGkYBFrEoY7PXkKSriUXpdNTMw2uswUZF0juJdFGSsCGvEahZ72fIypXlv
a39eq6LuRPbuPSieKobOIyJcTtNtEYZZeY3nvdjumn9qt77fPOqSTZ+jzLY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:23 2025 by rpki-client