Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/974eea7c-a42b-4b5c-af5b-1b7c100474cc.roa
File: 974eea7c-a42b-4b5c-af5b-1b7c100474cc.roa (raw, json)
Hash identifier: Hv0SscwA0HhSTTYJIpaC10mVSAa6QATZr3M6Hqy2NBM=
Subject key identifier: 55:8B:3B:5A:44:70:05:27:B6:33:E7:C0:13:E6:E1:9F:0A:1D:A0:99
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6AEF9A21B8F10ECECDDFDBC1D1C994AB159D54B9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/974eea7c-a42b-4b5c-af5b-1b7c100474cc.roa
Signing time: Sat 24 May 2025 14:03:18 +0000
ROA not before: Sat 24 May 2025 14:03:18 +0000
ROA not after: Sat 28 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 May 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:ef:9a:21:b8:f1:0e:ce:cd:df:db:c1:d1:c9:94:ab:15:9d:54:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 24 14:03:18 2025 GMT
Not After : Jun 28 23:59:59 2025 GMT
Subject: serialNumber=05eaece0865ebdd5f9c9b5f27dde1a8ca46e4fb4cff36e2bb2138300ada5e6e4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c5:20:ff:39:7b:46:84:4d:56:dd:f1:fa:c0:
95:bc:72:0e:d2:3b:9b:52:56:7f:57:28:4f:78:9b:
85:89:da:03:f1:b6:cb:ad:42:16:f7:12:6d:d9:08:
b5:1a:fb:4d:ee:0a:70:94:b9:56:43:11:d0:20:f5:
6c:d3:64:50:c5:b5:ff:89:b5:79:71:dd:2d:8a:83:
7f:23:67:df:08:68:d8:d4:c4:8c:8b:3e:0e:d4:87:
a3:69:f3:49:8e:3e:7e:03:f4:45:1b:4f:f1:8a:75:
3e:88:7a:8c:c8:17:35:62:d4:06:5d:1d:69:5d:ab:
04:bb:85:7f:d5:27:01:76:00:96:36:20:9a:3d:14:
58:2f:12:cc:93:00:f7:5a:f5:9d:09:c2:ee:02:81:
01:2a:f5:6f:41:c3:b4:64:16:b0:93:3f:1f:81:bc:
53:07:45:7b:27:59:a4:46:ae:f3:8e:28:b8:ae:89:
f0:a2:27:67:b3:4f:9b:b0:a6:01:00:b0:b8:6b:55:
56:20:1a:6c:7d:05:dd:4a:51:62:4e:f5:f6:7d:90:
b4:39:97:c4:f8:77:2c:ca:a6:90:ca:57:b5:a0:f4:
3c:19:98:25:ff:95:2f:9c:ec:f4:76:0a:9a:7f:cd:
8a:8a:3d:f2:98:6f:6e:6e:aa:a2:ce:16:c5:6f:a9:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8B:3B:5A:44:70:05:27:B6:33:E7:C0:13:E6:E1:9F:0A:1D:A0:99
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/974eea7c-a42b-4b5c-af5b-1b7c100474cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
31:12:6b:84:1f:ec:9b:75:70:cd:8e:77:51:c3:be:21:1b:8c:
2f:cb:b9:1c:07:48:08:18:6c:ba:e5:cb:38:63:03:b3:db:64:
90:77:f9:0e:61:cd:de:2c:f8:c7:b5:9e:cd:92:58:fe:be:7b:
81:c6:9d:24:c7:73:c0:ad:ad:b3:77:63:8e:6d:89:8b:ff:e1:
3b:c3:35:5d:fd:dc:80:cf:fb:69:94:23:2c:ca:5a:e0:a6:d0:
ec:64:93:0f:33:57:a2:63:9d:e2:04:c2:5b:86:45:17:4d:4e:
a3:c9:6d:a8:6c:e9:3a:c8:da:16:13:6f:13:bb:69:16:cc:16:
69:d6:4d:88:16:5f:0b:14:95:cd:47:95:a9:06:bf:8a:b0:57:
4d:7c:f8:9d:a2:51:52:46:c8:25:eb:a7:74:df:96:ac:7c:9a:
01:ea:ec:f7:20:e6:25:8b:8f:71:82:bf:8e:01:a5:09:92:59:
04:13:32:75:8e:45:ca:36:b6:4a:50:72:c0:0b:5c:1f:6c:85:
e2:c9:fe:c2:23:62:44:b8:bc:e4:ac:a8:fe:c7:64:a4:68:ba:
0f:24:e5:15:15:b9:7b:9c:45:86:83:77:fd:15:6e:cf:2e:94:
1d:c4:86:d2:ba:0e:de:47:9d:53:d6:17:24:54:88:48:f0:da:
03:20:86:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:55:15 2025 by rpki-client