Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f27b1e7-64d1-4bf0-8a78-88e4d5e935ed.roa
File: 7f27b1e7-64d1-4bf0-8a78-88e4d5e935ed.roa (raw, json)
Hash identifier: dwxy2D/ZUCyUiqMQ9Pbdd/Rft3tvU7qcyTZvP+cklHI=
Subject key identifier: 9E:D7:CF:1E:88:6D:0C:37:A1:2E:DD:B7:43:6E:AB:8B:EF:04:46:6B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 35765C755A1A35166F6C4B16400913E850066C01
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f27b1e7-64d1-4bf0-8a78-88e4d5e935ed.roa
Signing time: Thu 10 Apr 2025 13:13:18 +0000
ROA not before: Thu 10 Apr 2025 13:13:18 +0000
ROA not after: Thu 15 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 13:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:76:5c:75:5a:1a:35:16:6f:6c:4b:16:40:09:13:e8:50:06:6c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 10 13:13:18 2025 GMT
Not After : May 15 23:59:59 2025 GMT
Subject: serialNumber=bbe12d870ae0d640a5832f60d515c820e08faa8413001d71d087c2841002a776, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:2e:80:b9:cb:bf:ee:7a:f1:a1:e8:fc:53:
d0:95:2b:75:66:24:c0:09:39:b3:ef:22:eb:44:4d:
11:03:67:72:2a:40:c4:4f:84:ef:54:fd:d8:ba:44:
6d:e2:41:03:74:52:2e:b4:35:b4:5d:b6:f5:81:88:
cb:6e:5f:1c:62:2a:fe:8b:52:ce:de:01:52:a8:c4:
d2:b6:2e:7c:b5:cf:61:2f:c7:c0:20:df:ab:eb:23:
d6:a4:02:7d:d6:69:e9:03:94:25:44:11:7e:d2:ea:
7a:6a:fd:7d:e0:09:a0:05:75:00:aa:30:b9:3b:23:
5b:d0:52:05:3d:00:df:f9:2c:8f:16:28:c0:72:30:
2a:cf:c1:9e:50:bd:17:07:b8:c9:0d:e6:36:88:67:
ec:b1:16:49:02:63:11:30:27:b5:a9:6d:73:79:15:
ce:97:c9:d8:7c:49:21:c2:2e:27:58:fb:72:6a:4a:
36:a3:67:26:76:5c:81:ab:30:95:5a:06:1e:49:32:
11:10:21:6f:a9:8c:18:9c:93:e7:86:a1:f7:e7:d0:
d0:a8:f5:23:c1:48:74:5a:58:d7:11:6d:86:a9:79:
5c:2e:51:91:d8:24:93:1b:fe:7e:ca:57:2e:25:01:
11:42:c5:e1:56:f0:74:66:01:af:3d:1e:f8:28:b7:
7a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D7:CF:1E:88:6D:0C:37:A1:2E:DD:B7:43:6E:AB:8B:EF:04:46:6B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7f27b1e7-64d1-4bf0-8a78-88e4d5e935ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:9c:70:af:3b:0f:48:15:90:42:a7:b2:e1:94:a8:44:77:a2:
d7:75:5f:2c:b3:6c:e2:40:a4:19:b1:7e:ea:7d:c0:fa:a9:e7:
96:c8:8b:02:c4:7e:4f:41:65:71:44:56:7f:99:8a:82:29:0e:
2c:d3:5e:d6:67:da:89:09:b4:90:b8:7e:96:3d:c2:48:11:e4:
22:d8:c2:96:e2:49:84:6d:f6:fd:57:fe:17:dd:b8:36:ef:87:
20:e9:8e:e2:ec:ba:a4:ea:ea:00:e5:e4:83:01:b9:9f:69:d7:
e5:25:82:6f:86:40:ef:94:d1:6c:cf:fe:98:81:74:71:92:90:
c3:6d:f0:96:1b:7b:b6:89:b3:52:06:86:83:71:36:8c:1a:40:
0b:8b:29:90:ac:2b:0d:12:c0:48:40:57:4b:27:0b:80:6f:b9:
74:fd:c6:10:9d:2a:65:56:87:67:fc:d2:ae:b8:04:1c:5a:31:
74:34:cb:e1:6d:ac:4f:dd:ef:6a:5e:9b:5d:6d:7e:1c:cf:60:
a3:61:91:c0:75:cd:ba:4c:6e:25:18:4e:ec:c6:37:6e:bb:34:
86:14:2d:e2:6b:f6:34:c2:aa:f0:ee:9c:82:a3:56:5f:3e:1f:
a2:52:a7:21:4d:59:3e:b3:8b:c7:ed:20:f0:b0:0e:41:b4:7f:
ac:30:20:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:54:50 2025 by rpki-client