Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7ce5ff24-3bfc-44ee-8cd3-671593ae9b6d.roa
File: 7ce5ff24-3bfc-44ee-8cd3-671593ae9b6d.roa (raw, json)
Hash identifier: fb/llltKPju3y8Tr7VhVxK1N/gHCx+/UyEst/9Nk4c0=
Subject key identifier: 25:94:4E:C9:34:62:8F:DF:DB:1B:5D:11:EB:5D:1B:81:39:A8:10:9C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2A0A25894A288EB60BD10F5CF54261354A69CAFD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7ce5ff24-3bfc-44ee-8cd3-671593ae9b6d.roa
Signing time: Mon 21 Apr 2025 10:38:19 +0000
ROA not before: Mon 21 Apr 2025 10:38:19 +0000
ROA not after: Mon 26 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 10:53:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:0a:25:89:4a:28:8e:b6:0b:d1:0f:5c:f5:42:61:35:4a:69:ca:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 21 10:38:19 2025 GMT
Not After : May 26 23:59:59 2025 GMT
Subject: serialNumber=0ed376c286134f040ab1ddad62763ad3d267d048e2db2fafa59f298ada036656, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:48:b0:be:57:1a:cc:0a:98:91:8e:d2:73:b7:
2b:f2:fe:67:a4:21:4d:19:c1:b3:c1:df:46:e0:88:
3e:ff:b0:b8:9f:fb:ce:0c:96:73:c4:c7:cb:7b:36:
03:c8:d5:93:69:8c:ee:f2:aa:61:8e:83:bc:a6:b5:
0e:04:aa:d6:d0:9c:14:3c:7b:d4:dd:39:ac:6c:23:
63:0b:78:1b:9c:69:97:32:d9:79:39:fb:00:6d:c7:
76:39:4b:95:12:83:0f:d0:42:17:87:30:62:8a:a7:
b5:38:85:4a:0c:2d:d6:fe:c0:57:55:20:cf:3a:9f:
18:42:ab:2b:20:f0:95:ac:82:ff:ef:3c:34:6a:97:
92:b5:66:e2:22:ee:6f:ef:f5:c3:c0:e2:93:e8:80:
8c:26:f5:35:ee:91:9d:a2:cd:1d:28:f9:57:a0:a1:
91:35:7f:32:ec:97:75:e1:88:d4:f2:33:98:4d:9e:
41:ec:c0:36:c5:5e:69:ea:1c:e3:cc:99:7a:eb:7e:
d1:22:d7:a6:96:6e:2f:13:0b:0d:08:e4:bb:a1:2d:
8b:61:e2:5a:e1:de:67:73:f4:13:64:dd:38:6d:95:
0f:94:ae:c1:b6:6a:64:56:df:e3:fb:3d:f9:65:24:
a7:93:17:9e:9e:34:8b:46:04:ed:c9:ec:5b:c0:b7:
b1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:94:4E:C9:34:62:8F:DF:DB:1B:5D:11:EB:5D:1B:81:39:A8:10:9C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7ce5ff24-3bfc-44ee-8cd3-671593ae9b6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:c1:ba:a4:4b:19:a0:a4:4f:5b:33:c3:90:79:11:68:f8:3f:
ce:5c:32:9e:41:86:f1:99:e0:fb:4a:69:51:b9:b5:3c:1c:7a:
72:b3:b6:d0:d5:53:04:7d:89:42:88:c6:38:a5:c9:67:b1:eb:
8f:14:10:f6:5b:cd:83:3e:48:4a:46:78:9e:e6:ca:0f:06:b7:
09:45:06:45:91:28:7d:b0:99:db:d6:30:59:74:9a:e5:9d:df:
fa:21:09:92:60:bc:68:cd:b4:80:52:32:89:ad:5c:e7:9f:61:
32:06:5d:37:b4:be:dd:bb:08:a3:2d:dd:d2:31:70:87:b0:ab:
50:fc:72:4d:51:ce:a2:2d:13:06:d4:92:1a:65:7e:4f:c8:46:
fb:95:d4:fa:ed:06:50:27:58:03:ab:71:45:e0:02:87:63:20:
51:ec:1e:7c:e1:c0:e3:b8:7e:9b:eb:b1:91:7f:a4:2a:68:2d:
66:28:7f:08:70:a8:62:2d:56:d1:7a:df:ea:24:e2:55:18:82:
7e:f1:8f:24:ee:fb:7a:0f:c3:bf:8c:8e:5e:4c:0e:3a:f7:4a:
a7:eb:7c:42:a0:f4:4b:27:e0:fc:60:20:f8:d2:5a:d6:57:48:
da:f0:a8:cb:28:0d:d7:81:b0:82:97:d2:a5:34:95:05:9e:9c:
33:da:e2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:13:13 2025 by rpki-client