Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8f48f482-fb5d-49c1-a028-e74c3963dd1a.roa
File: 8f48f482-fb5d-49c1-a028-e74c3963dd1a.roa (raw, json)
Hash identifier: mJUkuI1UpQD0bcwfDaoreZw0vrwM/0dg5nyjXn8hPqM=
Subject key identifier: A7:5D:93:4A:BF:94:F8:3F:89:B7:EC:6F:45:7D:94:2C:32:58:70:AE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4EDA2C6EEA0E83368B6E469B75E14EF5A571087A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8f48f482-fb5d-49c1-a028-e74c3963dd1a.roa
Signing time: Mon 14 Apr 2025 18:08:18 +0000
ROA not before: Mon 14 Apr 2025 18:08:18 +0000
ROA not after: Mon 19 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Apr 2025 18:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:da:2c:6e:ea:0e:83:36:8b:6e:46:9b:75:e1:4e:f5:a5:71:08:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 14 18:08:18 2025 GMT
Not After : May 19 23:59:59 2025 GMT
Subject: serialNumber=5e1c980ac3fe5217ba3e994650cf197c9e067669f700d5cc213574c3ae331dd8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:d4:f5:95:27:06:13:0e:02:04:fb:bf:69:
8d:4d:fd:54:76:de:96:ef:f0:36:64:7c:22:5e:73:
11:fd:ad:87:64:73:46:b1:86:df:db:92:8b:75:c2:
a3:cc:ac:ac:66:2c:f2:b2:83:4f:61:e2:7b:c9:4d:
9c:6c:23:d0:a8:83:9d:7a:9a:91:48:c5:db:26:f2:
f1:08:03:f9:e3:95:1c:f8:de:0c:46:5b:80:29:be:
5b:29:c8:95:27:43:fc:d2:59:dd:d2:9e:b8:7c:09:
20:61:4f:4f:69:05:31:8b:e0:4c:99:91:d2:c7:b0:
73:6a:95:22:14:12:a0:61:4a:05:1c:8c:e9:cc:b1:
00:f6:d8:92:60:78:91:e8:75:d8:f9:fa:e8:55:d7:
1b:50:68:4e:fa:a0:55:6b:56:0e:72:da:ad:8a:50:
79:a4:82:1a:37:1a:de:4a:a2:81:a7:80:fc:7e:b3:
b0:70:95:0b:0e:19:bb:a7:19:fb:2b:e3:48:aa:22:
86:fd:b2:80:d3:22:80:fa:63:85:3e:e7:68:08:8b:
c7:9b:de:ec:3f:95:50:ba:12:72:5a:64:0b:7b:af:
f3:8b:64:7c:9c:dd:9b:a6:49:30:2b:70:5c:f2:91:
0f:09:02:ae:d6:d5:a5:08:c2:70:3b:d6:6e:ec:01:
0c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5D:93:4A:BF:94:F8:3F:89:B7:EC:6F:45:7D:94:2C:32:58:70:AE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8f48f482-fb5d-49c1-a028-e74c3963dd1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
35:fc:25:d9:30:8b:32:fe:62:e9:45:95:ad:3c:55:af:6e:ed:
69:67:b7:c9:c5:39:bb:76:ea:4c:b7:5d:14:d4:09:2c:54:dd:
94:45:b5:b6:81:86:ea:09:88:0c:11:ab:d8:2d:7c:2c:61:d9:
11:7d:7f:b5:07:69:e3:25:79:68:53:08:79:9b:96:b4:64:17:
e0:22:7f:0e:dc:2e:cc:11:ca:ba:de:af:dc:b5:ee:d0:57:e2:
59:f9:dd:6a:65:53:d2:db:be:12:44:4e:4f:81:9a:1c:e2:ac:
ab:a5:a8:c4:8d:9a:60:0e:39:11:ef:2d:5d:31:2a:80:0a:c8:
2e:bb:6c:be:36:1b:f3:40:8f:86:70:e1:0c:87:97:f6:84:7c:
01:86:e8:0c:5d:a0:b0:6a:64:97:c3:01:cf:9a:77:42:b4:2f:
6f:a1:bb:8c:e2:a2:c1:84:b8:70:39:d6:d3:7e:ed:61:6e:5c:
9f:88:a5:99:61:97:93:f8:f9:35:37:30:e9:ae:39:3d:2e:7a:
5b:ae:24:76:61:b5:89:0a:fe:f0:ba:95:d1:06:b4:28:31:5e:
b7:04:9d:89:6b:ea:5c:6b:84:3a:97:a1:11:47:b7:98:a2:9d:
81:5e:c8:c7:fb:c1:82:c9:63:bb:02:2b:39:0b:04:3c:d1:21:
3f:11:84:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:14:12 2025 by rpki-client