Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/77fd2dd8-ced6-4771-8175-cf58ca76e424.roa
File: 77fd2dd8-ced6-4771-8175-cf58ca76e424.roa (raw, json)
Hash identifier: 4YzRdO3QKztigQCsVRP3+JJRUvvfZqf7CjPrWW3kF4M=
Subject key identifier: 7C:18:8F:C5:14:61:E2:79:7F:C9:83:62:F2:8D:09:C6:2B:2F:3D:A9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 59362C266CEAD11C05BDDA1ED58B8AD74EF7F083
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/77fd2dd8-ced6-4771-8175-cf58ca76e424.roa
Signing time: Sat 17 May 2025 19:58:17 +0000
ROA not before: Sat 17 May 2025 19:58:17 +0000
ROA not after: Sat 21 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 May 2025 20:18:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:36:2c:26:6c:ea:d1:1c:05:bd:da:1e:d5:8b:8a:d7:4e:f7:f0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 17 19:58:17 2025 GMT
Not After : Jun 21 23:59:59 2025 GMT
Subject: serialNumber=cc70956d9f84b884417d648107e165a65b59b5590390bf1a58f062521cc46c5a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c1:f7:e2:62:96:88:14:b7:32:54:ca:01:2c:
30:5e:a5:b4:64:e7:d3:a2:e3:7f:8b:c2:9a:77:ce:
57:17:1d:38:47:ea:31:69:4a:17:81:20:96:87:f2:
36:8e:8d:50:28:03:24:54:ae:21:88:25:98:71:7f:
ef:e3:1c:1d:54:06:9a:ba:3c:7f:f0:91:63:60:85:
18:c5:0e:70:62:34:65:7d:f9:ef:f4:c2:e3:04:a3:
8f:d6:f2:ab:de:6a:a3:6a:04:4d:43:e6:89:c1:cf:
1d:d0:aa:14:ba:82:a9:2e:dc:20:9b:6d:8b:a8:5f:
51:73:7f:24:6f:e0:2d:86:6e:13:93:f7:77:67:3c:
29:bc:b3:90:56:d5:7d:fd:14:f9:3d:06:31:4c:01:
e9:21:93:73:e3:14:69:78:3b:ef:82:78:9b:ba:50:
0c:e6:84:eb:50:63:e5:97:c2:a9:78:c1:83:1d:fe:
e8:23:e9:b7:26:f9:b8:4b:0c:e4:ad:02:d8:c4:b8:
cd:6d:2c:d3:a3:2a:60:31:bb:a5:49:39:10:67:41:
c4:a9:31:08:2e:ad:85:73:a2:1a:01:17:a6:31:1f:
d6:ac:16:09:60:02:4d:06:59:c6:07:ce:5e:f4:12:
1f:65:87:4b:79:a5:5e:c2:ee:cd:80:94:fc:da:0a:
fc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:18:8F:C5:14:61:E2:79:7F:C9:83:62:F2:8D:09:C6:2B:2F:3D:A9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/77fd2dd8-ced6-4771-8175-cf58ca76e424.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
40:fa:62:82:16:58:70:6f:6e:c1:8d:f0:8e:68:ac:ba:fe:69:
e9:92:ee:0c:25:9f:29:fb:b5:bd:79:af:01:58:c6:e1:c6:97:
46:c4:8f:36:c7:3b:1d:06:04:7b:88:d8:7a:e3:dd:47:c1:f1:
75:37:72:4d:79:25:8e:97:e7:66:65:e6:44:8a:ce:8e:21:35:
84:a4:6b:7c:e6:90:8a:c9:0e:2a:cc:ad:bf:6e:7f:1c:1a:bf:
2e:3c:5e:1b:89:76:32:97:37:69:dc:b6:0f:f5:ad:f3:cf:f0:
1a:a6:61:8a:b4:d5:76:9e:ce:83:98:13:b5:0f:1f:fd:88:95:
85:9d:ab:f0:52:ba:47:0a:00:89:28:a9:27:a8:3a:08:ac:4c:
ed:59:69:a6:02:9d:08:dc:ea:c7:81:cf:44:5b:ea:c1:3a:7c:
62:34:be:c5:e3:aa:98:59:4a:62:e9:a8:c9:03:73:2f:bf:bd:
65:b5:67:a5:d5:a3:0a:99:e8:ad:54:d7:bc:f2:3b:c7:88:8c:
0a:19:1c:a4:44:10:11:9d:cf:0a:20:16:8a:b7:36:63:a9:0a:
22:d7:e3:82:5c:d5:6b:7a:a1:e3:f3:eb:47:b1:fa:ad:28:0d:
75:9c:74:cd:8e:64:90:49:69:c6:8d:3b:cc:72:6a:84:f3:64:
11:b3:3d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:10:20 2025 by rpki-client