Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7b00abca-380b-490b-a682-fb8ce7ae94b2.roa
File: 7b00abca-380b-490b-a682-fb8ce7ae94b2.roa (raw, json)
Hash identifier: vgospjuKW547+wxHL86JHC+WMmq1Rwk9A7nqhmnq1rc=
Subject key identifier: 21:33:07:30:45:0A:18:7F:C2:CE:F4:0F:BA:26:2E:9E:D7:D5:DE:E7
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3D905C69B6FE115DB79A08054F2A5AF6589D38F1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7b00abca-380b-490b-a682-fb8ce7ae94b2.roa
Signing time: Sun 25 May 2025 21:13:18 +0000
ROA not before: Sun 25 May 2025 21:13:18 +0000
ROA not after: Sun 29 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 May 2025 21:28:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:90:5c:69:b6:fe:11:5d:b7:9a:08:05:4f:2a:5a:f6:58:9d:38:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 25 21:13:18 2025 GMT
Not After : Jun 29 23:59:59 2025 GMT
Subject: serialNumber=f807b01650c54d7734ce1fb96779bd5c9132eda15b0b899447161e3260d3d28b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:22:82:86:3e:24:ff:5e:55:fb:39:d6:85:
04:b2:7c:b4:31:1b:9a:c9:7b:15:22:57:c7:23:92:
72:62:c2:d4:c5:c2:0d:59:a1:9d:b0:5a:d0:a8:c5:
fa:33:30:69:1c:05:9b:60:d6:3b:a7:99:51:c8:ed:
ad:2a:2a:a7:d2:c8:d2:49:5d:00:69:78:74:df:70:
da:4b:38:c8:62:d0:ae:9f:35:c4:a4:67:c8:12:71:
46:f2:cb:1f:f8:7a:db:ce:a6:21:c6:ab:d8:fd:02:
d5:b3:ce:90:e2:e9:85:02:64:9f:b7:18:61:c6:74:
86:99:84:24:8b:0b:62:5b:45:e6:6c:fa:61:21:ae:
01:50:7a:32:db:98:94:30:7c:4c:c4:29:b9:ad:94:
90:73:46:03:bb:8e:35:df:54:69:80:80:7e:95:fc:
fc:9f:7b:fb:c3:3c:ef:4c:37:9b:84:cf:8f:1b:94:
b5:e9:30:26:1c:2a:ba:76:8a:b4:95:4e:c9:b1:69:
00:9d:28:c1:b6:e1:8c:8c:1a:62:69:85:32:7c:f7:
f9:f1:38:13:0d:d6:91:1f:3e:4c:6a:74:99:33:fa:
18:77:ea:d7:ea:4e:b7:66:1a:ff:14:fc:d1:3a:b5:
4c:11:d2:d1:11:db:1b:f6:d7:c5:4c:b6:60:3d:6c:
19:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:33:07:30:45:0A:18:7F:C2:CE:F4:0F:BA:26:2E:9E:D7:D5:DE:E7
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7b00abca-380b-490b-a682-fb8ce7ae94b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
40:5a:e8:35:f4:43:c5:32:f2:42:cd:1b:4b:5c:8a:2d:14:b7:
9a:a3:1d:a1:30:3e:2f:69:05:a5:0d:d7:43:41:86:d5:db:b8:
cc:5b:0a:38:2a:6b:36:51:ca:b5:53:95:04:f9:d1:0b:fd:77:
21:1a:df:16:bf:e6:b5:28:8d:98:aa:5c:07:49:71:0b:b7:3b:
fa:b1:42:cf:8a:f3:9f:95:28:ee:16:03:73:d2:ad:8b:f6:93:
98:a1:a9:0a:84:70:67:17:1c:a9:4d:06:fb:47:d2:7e:85:92:
6c:7b:e1:c3:3b:84:55:2f:76:e8:92:54:7e:9c:84:17:0f:bf:
92:0c:fb:31:1d:6a:84:ed:d4:16:5f:68:88:c5:59:49:10:68:
90:f8:9a:e9:5b:7c:b5:ac:74:a4:77:77:12:1f:c3:0d:c4:9c:
e1:07:f4:50:0a:0c:bd:af:d7:d7:2d:c0:27:c6:96:5e:d9:92:
af:53:d3:1e:e7:e0:b9:62:82:ce:3b:f3:96:80:c4:a9:ba:bb:
d0:95:64:03:1e:ae:3e:db:b7:1d:03:e7:d3:de:e7:f3:c6:f1:
18:d5:66:ad:c2:95:6f:1a:13:82:b1:5a:a3:09:f2:8e:58:5a:
28:3f:3f:fe:1c:87:d2:f4:2e:e4:e7:33:d9:0e:fe:6a:57:1f:
a5:ea:86:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:09:46 2025 by rpki-client