Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/824aa31f-2d88-4ae2-be1b-26b09ba163c1.roa
File: 824aa31f-2d88-4ae2-be1b-26b09ba163c1.roa (raw, json)
Hash identifier: 8DPJ8uvft3poDEOLApXziNCZ7h9D3X/Xio+ss740NfA=
Subject key identifier: 0E:C7:4E:12:0E:24:D0:8F:E1:2C:A5:F0:78:EF:2E:97:A8:DB:BC:42
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4FB3B3596D8A6FFE1F122C87E9DB475CA5EC2B8C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/824aa31f-2d88-4ae2-be1b-26b09ba163c1.roa
Signing time: Thu 17 Apr 2025 20:28:14 +0000
ROA not before: Thu 17 Apr 2025 20:28:14 +0000
ROA not after: Thu 22 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 20:43:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:b3:b3:59:6d:8a:6f:fe:1f:12:2c:87:e9:db:47:5c:a5:ec:2b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 17 20:28:14 2025 GMT
Not After : May 22 23:59:59 2025 GMT
Subject: serialNumber=31184dc596871c228a1babd318d0de2a24a3cfc0b7c6f54dd5d8360c0755b4e1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:79:39:18:eb:be:d6:bf:b4:33:a0:e8:e0:e3:
26:3f:c6:f4:1a:ec:3f:62:a1:dc:e2:99:1a:3b:90:
5f:1c:46:d5:af:36:5c:c8:63:c6:1c:79:6b:80:c5:
cc:21:d3:10:6f:18:2f:05:ea:f3:c5:85:a6:13:c3:
fd:9e:d4:b7:d7:c6:05:87:91:c5:4a:4a:59:73:b3:
b1:11:6e:72:69:26:db:9d:3a:0b:9e:05:23:05:9c:
c5:b0:a7:b9:ea:2e:35:c6:88:66:53:f9:eb:99:e8:
2e:ab:46:72:d1:fe:8b:d0:16:f6:14:7f:d4:50:23:
9b:50:3e:17:91:09:7d:58:11:23:0b:90:02:11:de:
5c:a5:ed:22:43:0f:2c:5b:27:76:41:3a:9f:52:9e:
a8:71:87:dc:6d:5a:41:41:de:a2:8f:8b:78:e6:72:
d5:8e:76:65:be:fe:37:37:ec:ea:19:13:a9:ef:e0:
dc:4e:47:35:fc:87:0a:c6:22:2b:c4:b8:45:19:f6:
fb:69:b3:7f:6a:47:b4:a5:4b:8b:7c:a2:45:82:f2:
39:52:f9:a5:f8:29:47:ac:2d:a1:37:38:19:56:2e:
76:59:cc:aa:60:af:20:00:3e:f7:8d:90:a3:df:3b:
ea:37:10:71:62:e3:18:31:8c:ac:af:86:4e:35:de:
3b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C7:4E:12:0E:24:D0:8F:E1:2C:A5:F0:78:EF:2E:97:A8:DB:BC:42
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/824aa31f-2d88-4ae2-be1b-26b09ba163c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
48:25:73:be:60:f1:8f:81:00:71:a6:c4:4e:cf:b3:6c:c7:59:
35:90:07:7a:30:6a:db:d1:6d:20:23:1f:22:cc:94:de:c3:2b:
9d:ad:47:d2:94:ee:47:e1:40:dc:a2:f7:ab:02:d0:47:43:ea:
8f:01:5a:ad:96:c3:cc:68:ce:52:85:73:f1:09:4d:8c:62:31:
19:94:1e:48:c7:b0:42:ce:cc:d8:87:f1:4b:a6:68:9a:37:a8:
3e:1b:c0:c4:bb:9f:bd:1b:2c:a5:51:9c:01:3f:06:1d:c7:45:
92:22:f4:39:5c:4f:b6:54:26:35:2e:a1:36:b0:5e:bc:45:cf:
84:fe:a8:d8:93:32:6f:d3:1e:ed:9c:67:e7:a6:fd:55:13:5b:
4b:22:c1:ab:bb:7c:97:4f:08:5e:6d:f3:41:dd:8c:7c:6c:a9:
21:5c:70:79:f1:20:0c:2c:89:c3:b4:51:ef:cd:ff:c4:07:89:
b6:d6:d4:62:01:e6:0f:3c:3f:fc:fb:cc:6d:4f:a2:d1:9f:5c:
91:85:aa:3c:34:20:16:17:81:0f:67:29:ca:b7:37:48:e7:76:
40:d2:f2:f1:c8:88:e1:bb:ea:35:8e:d7:40:97:c8:60:72:45:
5c:66:00:95:9b:f9:71:fa:33:e5:cb:74:ba:05:79:40:81:89:
bd:3c:9e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:06:12 2025 by rpki-client