Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8f037f69-7b83-41d3-82f7-f8b2274b78f6.roa
File: 8f037f69-7b83-41d3-82f7-f8b2274b78f6.roa (raw, json)
Hash identifier: KdggcZ6JYWvYdv223LffjyfKd6yhmhtbflz3AhJpU1U=
Subject key identifier: F0:47:D4:CD:CF:94:B4:0D:97:3B:E0:15:A5:C4:BA:6D:77:19:F2:DD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3084E88E8473E64DFD46E84AF99CF8CDEC17A383
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8f037f69-7b83-41d3-82f7-f8b2274b78f6.roa
Signing time: Sun 30 Mar 2025 07:38:19 +0000
ROA not before: Sun 30 Mar 2025 07:38:19 +0000
ROA not after: Sun 04 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Mar 2025 07:53:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:84:e8:8e:84:73:e6:4d:fd:46:e8:4a:f9:9c:f8:cd:ec:17:a3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 30 07:38:19 2025 GMT
Not After : May 4 23:59:59 2025 GMT
Subject: serialNumber=d148f5463ebd9d9584a9d8ee6aa37f655f75a8ed95f77ff1a2a7711cf4c5c5f8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:58:5b:a3:a8:91:18:3d:26:0b:65:77:9e:2c:
91:f1:79:cb:ce:f5:23:a5:64:bc:06:f3:3e:c1:f0:
9a:18:6a:c0:be:6f:66:61:44:d2:e1:02:24:d4:f8:
2f:d2:fc:46:1c:8e:3f:b3:d2:6a:37:eb:f0:9b:79:
f9:7f:73:a5:21:b2:05:b1:ab:5f:4f:16:85:e8:5e:
3d:6c:75:f6:98:90:6a:6d:87:03:66:08:d0:84:7e:
d1:3d:27:4d:91:b4:80:98:3f:d4:ab:b8:7c:31:96:
c1:a2:93:a1:dd:fc:41:8f:00:a8:b9:d5:d4:3c:70:
bc:80:87:cb:7d:ba:72:5a:ef:bd:36:34:92:54:bc:
b3:74:df:7c:ac:15:ae:63:98:2f:8c:9c:49:f4:4b:
77:ad:33:84:7a:0f:ea:6c:d9:1e:11:90:ee:7b:a7:
13:00:28:58:72:ba:b0:d8:4b:ef:e3:ac:c6:6b:87:
c9:93:37:11:0d:12:82:0e:c4:c5:a4:96:23:4e:5f:
b8:1b:a5:ff:29:f4:a8:33:39:a0:8e:b2:eb:20:4b:
62:28:af:45:9f:c7:8f:43:c3:3d:c3:e0:be:b7:85:
2a:db:ea:19:4b:4a:e0:d9:19:dd:e6:ef:ec:0b:5f:
d0:21:4b:ad:57:72:56:ec:a8:0c:bf:f0:b5:97:d4:
ae:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:47:D4:CD:CF:94:B4:0D:97:3B:E0:15:A5:C4:BA:6D:77:19:F2:DD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8f037f69-7b83-41d3-82f7-f8b2274b78f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
52:a9:1a:3e:40:01:af:77:7b:56:71:0b:6d:1d:6d:3d:67:80:
58:cb:19:45:13:7e:ef:89:fd:b4:ff:c5:7e:92:87:48:1e:f9:
84:35:cf:04:fd:88:8f:91:54:d8:85:61:da:53:56:bb:81:5f:
e7:06:5b:1f:8f:5b:63:89:93:37:65:c4:87:e8:cc:cc:30:65:
f2:36:6c:6f:4b:2f:f0:52:0e:f3:71:7c:c4:f4:78:12:d8:3b:
c1:ac:c4:39:61:ac:71:99:55:99:a3:84:ed:7b:52:4e:a9:11:
06:13:b7:bf:ca:08:26:c7:df:b0:24:22:37:cd:32:21:81:a7:
ce:e6:ac:6d:b8:22:9b:ae:bd:1d:e0:bc:92:8c:74:ce:c3:3e:
74:84:c0:76:5f:0f:da:a3:4e:f9:6f:4c:6b:d4:3a:a3:f6:dd:
b4:bd:fb:73:ca:a3:c9:eb:a3:d6:e3:df:20:7c:94:ea:7b:99:
87:68:01:0f:aa:e2:64:32:90:b8:96:1e:30:f3:7f:6a:36:ea:
96:e7:8d:2b:25:a2:55:47:97:e7:18:ee:f9:8d:88:75:ad:bf:
66:a4:b4:a5:9d:d6:75:a8:a7:f1:ce:64:05:4c:ce:77:fc:a4:
db:32:22:1d:ad:60:d6:e2:22:de:4b:00:dc:83:19:83:20:11:
06:d3:ca:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:50:28 2025 by rpki-client