Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/70c4bc27-5017-47d1-a5f4-d13aa6c1ce2d.roa
File: 70c4bc27-5017-47d1-a5f4-d13aa6c1ce2d.roa (raw, json)
Hash identifier: TSkf/7Mt3whZuBNwyw2x6LHKQRe0Kk4C5hAicatKH98=
Subject key identifier: 1B:A2:62:D6:67:1F:48:A1:94:36:AD:77:7D:B4:68:EB:8F:5E:A1:0E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 56798E01304D058AF411754278BF524C7D28D9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/70c4bc27-5017-47d1-a5f4-d13aa6c1ce2d.roa
Signing time: Mon 21 Apr 2025 22:33:21 +0000
ROA not before: Mon 21 Apr 2025 22:33:21 +0000
ROA not after: Mon 26 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 22:53:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:79:8e:01:30:4d:05:8a:f4:11:75:42:78:bf:52:4c:7d:28:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 21 22:33:21 2025 GMT
Not After : May 26 23:59:59 2025 GMT
Subject: serialNumber=f9508269a21460881bef18cc32c1677c1bfd1015e87356e3b42252b8b730a1d1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0f:79:48:cd:db:13:74:9f:ed:96:96:50:70:
5f:ae:1b:9b:c5:a9:8b:62:8f:1f:14:e0:9e:4f:14:
c8:4f:90:3e:66:23:87:5a:40:16:19:37:50:d6:b2:
c9:57:46:88:2c:f9:27:b2:02:b7:d1:0c:a2:6c:26:
32:fc:6f:a7:05:dd:24:07:fd:a2:bb:ad:c2:3d:88:
93:76:34:17:6a:bd:69:a0:26:b6:73:aa:69:77:50:
9d:ba:51:82:2e:90:de:34:f6:17:34:6d:81:65:4d:
4e:aa:5a:77:fd:58:fc:56:6c:94:dc:81:13:8c:2f:
d5:37:bb:1e:01:32:99:98:c5:5b:e7:61:ac:43:c3:
78:3d:c3:e7:c8:33:96:06:c5:03:44:04:2d:e3:f7:
8b:13:c1:f1:c8:36:d3:aa:d8:ef:c0:5d:2d:f2:27:
5f:da:ad:2a:23:86:41:72:ea:3e:e2:51:c5:ad:80:
d6:05:7d:05:fb:92:f1:15:c1:16:12:bc:35:e6:f9:
84:ef:84:8d:0f:64:f3:b1:89:d5:c1:de:13:42:67:
6d:81:bd:08:cb:0d:34:aa:34:04:c5:1c:c0:e0:69:
e2:5d:f0:be:03:18:45:38:73:37:2d:76:ad:4c:88:
e2:19:25:ae:f7:28:f7:fa:8a:c7:f6:08:d1:d4:93:
97:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A2:62:D6:67:1F:48:A1:94:36:AD:77:7D:B4:68:EB:8F:5E:A1:0E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/70c4bc27-5017-47d1-a5f4-d13aa6c1ce2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
12:4a:eb:37:87:ea:e0:ae:31:6c:eb:6e:30:a7:58:9b:63:70:
b4:5d:45:b2:ad:c9:5f:f5:b7:04:92:21:6d:b1:53:72:20:6f:
32:fb:f2:0a:fd:7a:5a:51:a5:5b:6e:a5:1b:6f:25:46:d7:a7:
09:3d:a9:a5:ad:c5:6b:30:33:cf:18:25:b6:a2:70:9a:be:f9:
0c:f8:5a:be:6e:62:8e:66:1a:ed:73:57:bc:9a:5a:f6:6c:e2:
02:ae:2e:bf:e3:a8:64:0b:16:48:85:14:4d:2f:96:ad:00:0b:
b4:1d:f9:df:9b:53:88:7c:60:11:4e:34:29:5c:81:fd:b6:7c:
53:28:5d:0d:88:84:05:6a:ee:6b:24:a8:ab:d0:b6:fb:4c:9f:
c5:5c:4e:fa:51:8a:bc:a8:66:61:2f:55:e9:40:f6:ab:a8:7d:
bd:00:f5:a0:06:70:30:c6:00:30:8c:58:50:d4:da:eb:e4:8c:
8a:e1:10:8d:dc:be:05:5b:9e:70:39:8a:2d:37:ce:01:3b:60:
2d:1f:12:8d:15:8a:9f:c4:7f:7c:a6:85:10:c4:08:16:1b:1c:
cb:bb:6c:d3:1e:27:9f:1a:1d:f0:7b:b0:28:c7:7a:c6:44:9b:
26:5d:4c:d6:1a:56:2e:ec:4e:ff:2f:43:d9:2e:65:34:e2:65:
40:99:01:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:35:34 2025 by rpki-client