Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/753cdffd-2ac5-42be-bd0b-2c57d57cb497.roa
File: 753cdffd-2ac5-42be-bd0b-2c57d57cb497.roa (raw, json)
Hash identifier: ItCrj3QYLMMRuwlOgeGI1L2dqqSC7Y1fhLk9OdvnfH8=
Subject key identifier: AF:74:83:14:07:75:F4:1E:07:41:A7:96:19:61:F4:39:81:B3:58:21
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 45BA5408D8FD2D5BAF2EC6ADF7782F12C405BBF4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/753cdffd-2ac5-42be-bd0b-2c57d57cb497.roa
Signing time: Fri 23 May 2025 01:43:20 +0000
ROA not before: Fri 23 May 2025 01:43:20 +0000
ROA not after: Fri 27 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 May 2025 01:58:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ba:54:08:d8:fd:2d:5b:af:2e:c6:ad:f7:78:2f:12:c4:05:bb:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 23 01:43:20 2025 GMT
Not After : Jun 27 23:59:59 2025 GMT
Subject: serialNumber=e67226792bd635f347f1d6bf74809b2748fdde1750599358feb14538ed91fbd1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6b:79:47:85:b0:4c:cd:e8:e0:65:c6:2f:ff:
f7:bd:41:a3:06:a1:8b:f0:71:a5:6f:eb:b3:d5:5b:
61:e8:bd:98:c0:de:82:4c:21:8f:1d:2c:be:48:af:
ef:03:8d:0d:47:fa:fa:06:1e:ea:3e:7f:39:00:6a:
14:3a:86:2f:5e:53:9e:cb:55:f7:20:bc:c5:6b:7f:
8e:ec:48:77:b9:3a:19:d3:3b:73:60:df:55:28:fd:
80:ee:3a:9f:2c:e6:1d:2b:14:a4:37:c1:33:8e:1e:
e6:3c:1d:99:55:58:6d:f2:6b:ce:27:41:c7:0a:09:
2e:1a:62:aa:b9:00:61:fd:42:8d:0d:98:ff:b1:f5:
c5:c1:2f:e4:ea:01:f5:18:fa:15:f8:5e:2d:5a:3e:
95:a5:32:21:8c:de:7e:dd:25:9b:1b:b7:25:ef:2d:
29:ee:a6:75:86:21:fd:ba:04:ff:f5:57:de:4c:a0:
cd:91:e0:e5:cd:df:f4:84:dc:2d:5f:b0:10:ed:7f:
11:b9:d1:db:87:68:87:48:a9:f5:fc:7a:34:b4:fb:
40:c2:43:8c:c3:85:77:c9:6b:3b:c0:df:ca:04:b6:
49:bc:de:a3:88:5b:58:75:a3:a3:76:15:74:f0:2e:
2f:b2:2e:ec:d9:03:9e:02:00:03:eb:a5:a3:a0:08:
81:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:74:83:14:07:75:F4:1E:07:41:A7:96:19:61:F4:39:81:B3:58:21
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/753cdffd-2ac5-42be-bd0b-2c57d57cb497.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
73:da:2e:b0:c7:ed:5d:72:a4:ce:21:57:f9:3f:72:e0:8f:5f:
66:89:75:28:8a:80:a1:ed:ea:fe:48:d3:93:d6:1c:83:f1:13:
5f:57:82:85:36:04:74:4a:e1:51:d0:be:3e:a5:ae:51:e3:30:
82:3d:ee:66:9e:6a:54:47:91:b8:7d:6d:83:9b:ea:34:df:45:
3c:60:b2:37:3f:53:f2:9e:8b:06:d4:59:7f:bb:02:00:68:10:
a0:63:4f:cc:5b:11:21:17:b6:16:ac:c0:5b:5b:6a:c2:6c:45:
9f:23:c3:8c:68:c7:48:fb:03:b2:27:2d:9f:7e:c9:ac:e6:1b:
ac:ea:d4:a1:1b:b8:78:20:fd:98:d8:6f:77:44:6e:c4:e9:82:
97:48:82:d1:e1:27:f7:d8:57:62:52:d3:66:31:0f:cf:c9:b3:
e5:b5:63:d6:36:92:0b:d6:7f:64:53:71:8a:50:62:1f:cf:53:
4b:aa:f0:af:bc:08:66:96:7d:b6:9b:14:b6:64:10:e3:25:2b:
09:d1:38:9d:ec:31:1b:52:a7:6c:4d:2e:a3:aa:80:e6:6a:e7:
eb:45:21:73:67:c2:6a:47:76:68:37:1f:a6:fd:cf:fd:f8:5a:
80:34:83:b8:de:65:38:6a:66:12:d3:48:5a:ff:37:fe:9a:50:
ab:78:fa:79
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURbpUCNj9LVuvLsat93gvEsQFu/QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNTIzMDE0MzIwWhcNMjUwNjI3MjM1OTU5
WjB6MUkwRwYDVQQFE0BlNjcyMjY3OTJiZDYzNWYzNDdmMWQ2YmY3NDgwOWIyNzQ4
ZmRkZTE3NTA1OTkzNThmZWIxNDUzOGVkOTFmYmQxMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJa3lHhbBMzejgZcYv//e9QaMGoYvwcaVv67PVW2HovZjA
3oJMIY8dLL5Ir+8DjQ1H+voGHuo+fzkAahQ6hi9eU57LVfcgvMVrf47sSHe5OhnT
O3Ng31Uo/YDuOp8s5h0rFKQ3wTOOHuY8HZlVWG3ya84nQccKCS4aYqq5AGH9Qo0N
mP+x9cXBL+TqAfUY+hX4Xi1aPpWlMiGM3n7dJZsbtyXvLSnupnWGIf26BP/1V95M
oM2R4OXN3/SE3C1fsBDtfxG50duHaIdIqfX8ejS0+0DCQ4zDhXfJazvA38oEtkm8
3qOIW1h1o6N2FXTwLi+yLuzZA54CAAPrpaOgCIF7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUr3SDFAd19B4HQaeWGWH0OYGzWCEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2Lzc1M2NkZmZkLTJhYzUtNDJiZS1iZDBiLTJjNTdkNTdjYjQ5Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHPaLrDH7V1ypM4hV/k/cuCPX2aJ
dSiKgKHt6v5I05PWHIPxE19XgoU2BHRK4VHQvj6lrlHjMII97maealRHkbh9bYOb
6jTfRTxgsjc/U/KeiwbUWX+7AgBoEKBjT8xbESEXthaswFtbasJsRZ8jw4xox0j7
A7InLZ9+yazmG6zq1KEbuHgg/ZjYb3dEbsTpgpdIgtHhJ/fYV2JS02YxD8/Js+W1
Y9Y2kgvWf2RTcYpQYh/PU0uq8K+8CGaWfbabFLZkEOMlKwnROJ3sMRtSp2xNLqOq
gOZq5+tFIXNnwmpHdmg3H6b9z/34WoA0g7jeZThqZhLTSFr/N/6aUKt4+nk=
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:50:51 2025 by rpki-client