Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7798d2eb-8ad9-4ed1-83f4-0bdb965720ba.roa
File: 7798d2eb-8ad9-4ed1-83f4-0bdb965720ba.roa (raw, json)
Hash identifier: eZcdNkjD+mLRx+nz3njqu1A2vPWDH87CNSMnp2VKrX0=
Subject key identifier: C5:82:97:92:18:60:FA:AD:B3:2C:3E:9D:B2:B6:62:E3:D2:CC:69:23
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2C5A28E4C7E46C7DDA146DC52D72827333DECCEE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7798d2eb-8ad9-4ed1-83f4-0bdb965720ba.roa
Signing time: Tue 13 May 2025 11:58:20 +0000
ROA not before: Tue 13 May 2025 11:58:20 +0000
ROA not after: Tue 17 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 May 2025 12:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:5a:28:e4:c7:e4:6c:7d:da:14:6d:c5:2d:72:82:73:33:de:cc:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 13 11:58:20 2025 GMT
Not After : Jun 17 23:59:59 2025 GMT
Subject: serialNumber=f9ab54cfdf66f93e21d990fd1b332d7e30d1cb3833dcab5e96ee3f904e6833a0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5d:04:6e:26:89:a5:4c:a8:d4:c6:e0:6e:38:
bb:15:17:53:44:fc:bb:6c:0f:cd:2e:5d:33:d2:9c:
8b:b6:6e:b5:f9:78:87:5e:14:90:c8:bb:4b:76:2c:
71:8c:b4:3c:f7:30:bf:b8:6a:ec:e6:82:a6:f8:45:
02:2f:98:1c:0e:44:b6:d2:95:1c:46:4c:fb:3c:d0:
27:b3:98:5d:5e:7b:9c:a1:c1:c4:54:a5:ed:a8:96:
08:41:09:0b:94:7c:05:86:df:09:77:0c:8a:cb:84:
d7:86:55:a1:01:ee:7e:d9:29:09:f3:28:57:15:b0:
ca:79:8b:c2:c0:c6:a0:09:01:d3:b7:05:dd:f8:03:
83:c1:60:94:45:09:33:9b:be:d9:82:2b:49:63:56:
65:40:a0:4e:f2:53:43:16:ba:2c:cb:33:ce:58:df:
77:e2:b3:1e:c7:2b:f5:8f:50:72:35:90:55:43:d2:
f6:87:f6:f2:16:ff:a0:26:36:25:2b:c0:dc:56:40:
0e:eb:41:e9:c3:1d:0f:a4:b8:f9:2f:e5:29:39:26:
58:1d:40:1b:24:a5:94:9b:99:2a:14:35:86:53:6a:
14:e0:ea:d7:ad:ad:04:51:f4:91:10:f1:82:3b:e5:
0b:3a:c1:c2:9a:4c:4a:1c:46:dc:e5:c1:d9:16:9a:
91:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:82:97:92:18:60:FA:AD:B3:2C:3E:9D:B2:B6:62:E3:D2:CC:69:23
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7798d2eb-8ad9-4ed1-83f4-0bdb965720ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:4a:77:3b:11:71:f9:5f:58:8d:4d:1e:c2:15:6b:8d:9b:1a:
71:51:48:53:a4:88:b3:56:c3:f2:89:b9:92:25:43:53:a1:a5:
ad:19:8a:e3:36:a9:c2:58:b1:cb:44:f1:02:22:91:b1:70:11:
16:cb:92:02:43:c6:c0:62:d6:b9:7b:60:ed:cd:05:47:ee:8f:
6a:d0:a8:84:e7:b4:c1:28:fb:01:a9:21:05:d9:3e:07:d8:0d:
e2:8f:10:89:11:e5:d7:8e:8e:ae:37:dc:4a:bf:34:83:88:bd:
5d:af:d1:34:79:53:74:46:38:62:48:87:49:12:de:a0:6c:0d:
c4:ac:1d:33:ed:e7:d0:6f:eb:53:82:9a:e5:27:3c:7b:a5:35:
44:fb:34:23:e7:c3:06:65:dc:70:4f:36:d0:18:2b:8d:19:1f:
15:29:48:73:13:de:6e:d1:98:1c:91:39:dc:4c:c9:b1:47:b1:
26:76:06:d3:b7:44:94:04:80:2a:99:33:a4:e6:65:0c:b0:82:
8a:31:1c:2e:f3:0c:b8:08:0f:2e:94:9b:b2:bf:b7:9f:41:33:
fd:96:0b:be:5a:53:da:15:11:fe:3f:ce:bc:38:ec:23:c2:14:
20:78:f9:0d:62:ad:08:51:dd:72:24:6a:d9:93:eb:9f:c9:e4:
d0:8f:49:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:17:23 2025 by rpki-client