Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8ca31990-3816-42b1-a3d3-7b7d96d4c40c.roa
File: 8ca31990-3816-42b1-a3d3-7b7d96d4c40c.roa (raw, json)
Hash identifier: 3noxV5/DlzMkDxOk9guQ0RPbHOR/si5M1tPq12QRTO0=
Subject key identifier: B3:F7:C4:2A:DA:13:31:5A:5F:A6:92:EE:1E:44:37:81:F1:00:CC:21
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 33E8585EF13B76F5B2BF9B4D9B4891AD71506A85
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8ca31990-3816-42b1-a3d3-7b7d96d4c40c.roa
Signing time: Thu 17 Apr 2025 21:28:18 +0000
ROA not before: Thu 17 Apr 2025 21:28:18 +0000
ROA not after: Thu 22 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 21:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:e8:58:5e:f1:3b:76:f5:b2:bf:9b:4d:9b:48:91:ad:71:50:6a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 17 21:28:18 2025 GMT
Not After : May 22 23:59:59 2025 GMT
Subject: serialNumber=6f3c299d652d3ab41382fa549e89b23212d7022e049fa20e7fe655d7c3819336, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:de:a0:79:6e:c0:59:f6:47:16:0d:b4:6e:27:
67:0d:bc:1a:69:c9:84:b1:13:49:ae:ad:91:bf:49:
23:0a:3b:24:f1:24:de:79:f8:5a:10:53:be:96:54:
15:28:ca:19:e1:cc:69:29:f9:22:fe:ac:19:7c:0e:
2c:8e:19:4e:41:87:54:11:a7:ba:62:3a:fc:8d:c8:
20:2b:52:c2:cc:a0:0d:fe:83:8f:97:3a:ac:20:a0:
c5:b0:33:b9:2b:8e:6c:2b:d4:2d:f0:c7:27:34:e6:
3a:f9:3b:15:68:95:29:2b:8e:83:70:42:c0:f8:34:
c6:cb:3c:62:78:43:04:e4:99:6e:66:10:b4:60:af:
0c:62:54:06:e0:1d:03:b1:a8:9c:c5:f9:7f:89:d4:
94:3c:8c:54:91:84:78:48:d2:01:0f:69:2a:f8:6b:
1d:37:ae:73:74:9b:a8:c2:f9:47:32:56:a5:bd:a5:
4d:7d:e1:fb:1e:3d:1a:10:a4:38:e5:d8:86:30:e2:
7a:d8:65:5d:48:30:7f:64:87:8f:b6:f9:82:58:17:
91:85:c5:6f:d1:d9:fb:a2:62:db:52:db:fb:9a:a2:
c5:e8:a6:cc:3f:50:9a:ab:4b:84:98:95:0e:65:c4:
41:d3:bd:af:1b:9e:34:2b:a0:9d:be:ed:f9:90:1c:
b7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F7:C4:2A:DA:13:31:5A:5F:A6:92:EE:1E:44:37:81:F1:00:CC:21
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8ca31990-3816-42b1-a3d3-7b7d96d4c40c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
23:65:cc:02:90:8d:77:24:58:ab:a5:84:4d:4f:b6:f2:b8:b2:
ae:5c:58:b2:2f:32:90:19:f5:55:e5:d8:01:5d:b2:87:77:55:
ae:bf:0e:52:0a:a1:65:b9:90:65:43:ba:97:59:23:00:f3:cb:
bc:86:23:c1:c7:bb:6e:f2:0f:62:18:ec:b9:eb:96:be:a5:eb:
04:b2:75:d4:eb:79:e7:62:b1:ed:62:e4:ae:59:ce:72:c0:76:
f6:50:68:da:67:2b:93:cc:26:75:69:c9:ea:ed:e3:a3:b7:6a:
9f:11:75:65:cd:ff:a8:f1:41:c0:a9:a0:2a:fc:62:14:52:2b:
e9:d7:8c:57:19:c8:d6:3b:76:99:b4:cb:07:54:b5:85:e1:1b:
ea:13:68:fa:33:23:cb:c9:51:06:6d:71:15:a2:1d:fd:67:61:
45:00:58:83:ad:73:cd:0b:b9:f8:40:c6:06:09:1a:22:62:d6:
98:fc:51:51:86:47:e5:7d:64:7f:90:07:a2:89:58:c5:36:55:
55:4a:44:f4:5e:47:14:23:9e:29:fc:3c:bf:0c:cd:f9:4c:bf:
7e:40:4b:f6:02:a8:c8:36:96:31:11:43:77:3d:ef:02:c3:44:
9b:55:b1:21:4c:9d:7f:79:35:5b:bd:df:84:33:4f:8e:9e:ad:
fe:1b:b5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:43:35 2025 by rpki-client