Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6d496a99-6c0b-46a5-bf81-b1d0f808539c.roa
File: 6d496a99-6c0b-46a5-bf81-b1d0f808539c.roa (raw, json)
Hash identifier: /27g/fGTrjMZma19bnI1wQAY9D0gI7rOVf5iqMETG90=
Subject key identifier: 35:50:4B:78:2A:BC:74:CE:53:7D:77:EE:8D:F7:79:AB:C5:2D:F5:DA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7C0216F5C25396ADA07EFA2A8081087B8A30278A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6d496a99-6c0b-46a5-bf81-b1d0f808539c.roa
Signing time: Sat 05 Apr 2025 03:03:17 +0000
ROA not before: Sat 05 Apr 2025 03:03:17 +0000
ROA not after: Sat 10 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Apr 2025 03:23:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:02:16:f5:c2:53:96:ad:a0:7e:fa:2a:80:81:08:7b:8a:30:27:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 5 03:03:17 2025 GMT
Not After : May 10 23:59:59 2025 GMT
Subject: serialNumber=e8dd5b2a4483d593cfd75e75ead4b9ca6c81b07dfd7e21ccac957b08b714b405, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:36:b8:e5:6f:31:62:31:ce:b9:22:55:ea:f5:
c2:4d:03:76:11:c6:b1:f7:c0:8e:de:be:98:17:b1:
b7:eb:47:a2:97:54:55:fe:56:8a:78:c9:2d:6d:28:
f9:1a:f4:f6:78:38:9a:dd:66:69:63:19:3a:6c:e0:
76:6a:a2:15:7e:c7:c7:7c:cb:ed:6b:5c:47:1b:0a:
dd:1a:49:57:d5:fd:12:cf:da:ea:bd:7c:5a:05:34:
74:31:dc:b8:87:74:cd:22:5d:93:36:1f:a1:7c:80:
2a:49:48:18:20:1e:4a:de:6b:58:bd:ed:12:a8:04:
df:f3:0b:6f:30:df:a1:2a:88:47:bd:00:57:11:e7:
89:6c:76:e1:1c:0c:4a:a6:28:1e:2b:85:38:82:5c:
39:7a:15:5e:6f:44:66:f5:60:59:fc:99:62:22:0a:
86:d4:ab:9f:e3:c8:f6:ea:be:06:2f:73:64:a6:4f:
84:85:a7:e9:5b:7e:5b:92:32:88:f9:92:44:e3:35:
8c:90:5b:32:e4:27:bc:6c:9c:a2:dc:c5:56:70:84:
f0:37:80:d8:b1:78:e8:2e:d4:a9:44:4c:81:c3:ba:
cf:70:34:76:22:a7:cd:87:2c:0a:73:60:71:2f:bd:
8c:68:eb:df:b8:77:5b:bd:02:dc:18:52:c3:9c:06:
42:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:50:4B:78:2A:BC:74:CE:53:7D:77:EE:8D:F7:79:AB:C5:2D:F5:DA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6d496a99-6c0b-46a5-bf81-b1d0f808539c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
af:7b:bb:d3:10:d2:ad:f6:21:f9:4a:37:35:28:07:b2:2e:f4:
e9:1c:06:eb:d1:47:16:de:33:06:b8:7e:20:ff:3a:2c:e2:cf:
07:d8:cc:af:1f:f8:69:60:40:ca:1b:3c:be:d2:12:12:c8:ec:
d1:6b:65:e8:c1:0c:d9:bd:08:8c:ee:de:b1:a8:32:fa:9c:4b:
a9:d9:5d:4e:65:23:f2:a1:25:1e:29:3c:39:fd:4e:37:5e:dd:
e5:59:87:f7:a7:a0:0a:18:ee:df:95:5a:61:3b:32:35:fe:5e:
4b:18:fc:24:8f:4d:d6:37:6e:ce:e8:0c:07:d1:87:8d:09:3c:
f8:7f:a2:4b:82:6f:20:8f:bd:cf:1a:3c:2c:f5:e6:61:a7:98:
d0:54:04:87:e9:85:71:89:63:bf:ae:30:3c:af:5c:2b:db:b3:
61:7d:12:18:bf:9f:58:d5:3b:d3:e6:4d:13:28:50:a0:c7:70:
ed:65:96:d5:6c:9a:9d:77:26:7b:02:fe:d1:ce:35:4f:ac:9b:
e9:0f:ce:bb:37:1d:d0:3c:a4:f2:14:09:16:b9:b7:0d:89:21:
82:c7:76:d0:a6:01:33:29:cb:8c:73:b4:48:48:47:bb:16:75:
e8:fe:a9:78:19:ed:dd:96:33:48:67:1c:4f:64:c9:90:f7:a7:
65:d0:f6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:54:42 2025 by rpki-client