Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6ec33ea4-4369-4901-8a39-919e6308e8a4.roa
File: 6ec33ea4-4369-4901-8a39-919e6308e8a4.roa (raw, json)
Hash identifier: LgUcH7sRIa3s+nFks3zcSrFjypcWzSEWSsJsJf37pzY=
Subject key identifier: B9:8B:C4:7A:A7:D8:41:60:3F:A4:0A:40:65:9F:B7:10:D2:11:92:CD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3E787BFEBAC20DD979505876A343E67DF84534CF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6ec33ea4-4369-4901-8a39-919e6308e8a4.roa
Signing time: Tue 15 Apr 2025 17:18:19 +0000
ROA not before: Tue 15 Apr 2025 17:18:19 +0000
ROA not after: Tue 20 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Apr 2025 17:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:78:7b:fe:ba:c2:0d:d9:79:50:58:76:a3:43:e6:7d:f8:45:34:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 15 17:18:19 2025 GMT
Not After : May 20 23:59:59 2025 GMT
Subject: serialNumber=c739d4bd9caf68e3d8856b1d0ff3563dd73249698eb4e63346e9f4ab4198a473, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:09:a7:3d:08:2a:b2:95:c2:64:aa:a7:f1:5b:
76:52:6e:e6:7b:16:44:7a:f9:36:65:a6:7a:bd:c2:
3e:e8:6f:9e:99:76:d3:c3:2e:5d:42:28:89:f7:8f:
be:3c:e7:ac:b2:b1:ab:f2:d2:8f:79:b4:ec:5a:98:
88:ed:3e:fd:97:9a:96:40:13:c3:29:c9:2b:17:35:
e3:bb:61:9f:2d:f4:61:f0:d8:f4:69:12:92:57:04:
0d:ee:7b:cb:71:b0:ad:5a:58:dc:b0:29:de:93:ac:
d2:2d:db:37:ff:bc:f1:bd:c2:67:e3:2e:d8:3e:94:
3d:57:75:19:57:84:4e:b9:ac:ce:d0:21:f1:34:6c:
c3:c3:ff:b7:0e:5d:fa:b4:50:bc:2d:15:7f:8c:29:
77:e5:51:32:54:fa:5c:fb:97:7e:84:22:4e:1e:25:
58:52:00:e0:97:30:3b:27:5e:39:8e:3b:28:b2:fc:
29:bc:2d:f8:50:04:eb:9d:84:5d:0a:09:31:84:05:
1b:2a:81:ee:b5:1b:3e:af:d6:fa:31:67:3f:8b:ec:
03:30:9b:c0:42:3a:5c:c0:98:f3:02:c1:2b:e5:53:
5b:9e:44:54:c4:69:97:de:f1:88:e0:a1:97:e7:57:
c2:41:72:41:a3:5e:ad:d6:4c:c0:06:b5:60:3e:46:
61:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8B:C4:7A:A7:D8:41:60:3F:A4:0A:40:65:9F:B7:10:D2:11:92:CD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6ec33ea4-4369-4901-8a39-919e6308e8a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:24:fd:fa:b1:a1:87:42:7e:5c:65:b7:b5:df:03:f3:60:90:
a3:92:ba:d5:bc:24:41:eb:e3:6c:24:a4:5b:cf:61:2f:4c:15:
08:ca:f2:42:1c:93:d4:f9:74:df:57:af:67:59:21:9c:bb:31:
5b:3b:97:ac:6b:f2:7b:eb:b8:02:63:61:cb:aa:d7:0d:32:50:
67:57:e4:a0:de:9a:6b:b3:4b:b7:9a:c8:1e:f5:43:c0:aa:12:
00:99:2b:bc:e4:cb:02:76:48:4f:c2:12:4e:a1:8c:c3:ef:86:
9f:2f:5b:f6:28:36:b1:dd:8c:b3:72:e4:b9:70:a8:0a:8f:0d:
94:8f:ed:f2:37:fd:6e:0b:2d:e6:f2:4e:fd:8f:a3:29:d8:c1:
65:cb:43:c3:06:f4:e3:12:32:26:a9:af:c3:30:f8:38:51:0f:
aa:75:4d:b2:eb:e4:ad:b1:79:b2:d0:c5:76:75:07:15:db:56:
c0:d0:55:0e:8c:d9:34:0a:99:61:0e:85:5e:1b:2d:09:ab:32:
b2:8d:6b:bf:cb:dd:e3:2a:60:09:e2:03:fd:08:cf:c3:70:ec:
16:7c:70:0c:4e:06:60:ac:af:1a:48:9d:dd:6d:da:51:47:be:
48:ba:67:89:1e:f6:39:2a:cf:9c:04:ad:b9:e3:30:2d:0b:01:
e7:5f:7f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:09:23 2025 by rpki-client