Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9b27af6e-9b8c-44b9-8cd1-dc99cca86a3d.roa
File: 9b27af6e-9b8c-44b9-8cd1-dc99cca86a3d.roa (raw, json)
Hash identifier: LYaXoalqnsCL4wBqYBl2rmujLijsrwrfcqqeBghXOoo=
Subject key identifier: 20:FC:E9:97:FD:34:48:3D:3E:1E:0F:72:55:05:34:C6:9B:F8:7D:FA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 797B7AEEAB5CB82B2E5F560B324223E6F4B974ED
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9b27af6e-9b8c-44b9-8cd1-dc99cca86a3d.roa
Signing time: Mon 21 Apr 2025 08:03:20 +0000
ROA not before: Mon 21 Apr 2025 08:03:20 +0000
ROA not after: Mon 26 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 08:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:7b:7a:ee:ab:5c:b8:2b:2e:5f:56:0b:32:42:23:e6:f4:b9:74:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 21 08:03:20 2025 GMT
Not After : May 26 23:59:59 2025 GMT
Subject: serialNumber=36bbb585772f3b7aa5b42e4d1238eddd407f1290aab959559a8453e8b017119b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:65:0f:2d:8b:ef:95:c6:ae:4d:e6:a6:d6:c2:
cd:d2:6d:4c:b4:dd:5d:e2:87:c5:98:22:89:7e:9a:
f7:2b:ec:a3:6d:9c:4c:74:42:a6:40:50:07:64:46:
06:10:c9:57:5c:b8:44:d5:31:cf:a7:f0:b1:25:9e:
02:5c:1a:91:ae:1b:de:2f:92:65:e3:9a:73:f3:3e:
06:2c:28:52:74:ea:60:55:c5:2f:07:cc:2c:f7:60:
7b:27:d3:ad:58:6a:f9:10:94:07:a9:5f:8f:b5:04:
c9:d7:b6:3a:fc:2b:ab:0c:e7:86:e9:f3:fb:62:7e:
26:2e:55:ed:2b:f3:cd:11:3d:6e:cf:24:58:78:0c:
d0:51:07:0f:c6:e8:d3:67:3e:bb:ab:4c:5f:6e:39:
aa:c3:98:57:d1:20:e3:30:99:9f:e1:bb:c2:5c:3f:
75:41:13:9e:04:a5:61:52:6f:29:bb:e0:42:e1:c9:
46:7d:c2:9c:aa:99:20:5f:de:7f:56:ce:c8:b1:f3:
40:34:94:25:f4:19:a2:f5:80:da:0a:5e:b8:10:44:
2e:0e:9c:b6:d0:2f:20:1b:b2:9e:37:9f:90:db:78:
22:9b:35:5a:66:05:4a:15:b1:c2:1e:d6:bb:4b:24:
4c:8a:bf:f4:51:e9:41:7b:f2:75:1d:a6:fc:b8:5f:
5b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FC:E9:97:FD:34:48:3D:3E:1E:0F:72:55:05:34:C6:9B:F8:7D:FA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9b27af6e-9b8c-44b9-8cd1-dc99cca86a3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:f0:99:f5:b3:e1:7f:50:24:27:56:b4:27:95:e8:80:27:bc:
e4:dd:a9:1e:7f:8b:0d:cb:02:f4:91:40:31:3e:e5:33:3e:77:
74:41:59:92:eb:cc:58:70:06:6a:10:b3:5b:5a:03:1b:5d:10:
0c:e5:ed:56:2d:b3:63:9f:d8:c2:8a:8b:da:3a:cb:4b:24:76:
a0:94:47:86:ad:1f:2a:75:e8:44:87:83:c9:37:af:3f:ca:ac:
53:36:a3:51:ed:72:6e:b8:1b:c7:30:75:7c:6f:cd:64:24:b4:
57:f2:35:d3:c5:b0:1d:3a:44:83:80:11:6b:a9:8e:f3:5c:d7:
e3:3e:c2:ea:5c:0a:d3:01:dc:3c:68:39:57:24:3e:32:af:2c:
02:c8:75:51:09:bf:24:20:d9:83:3b:fc:47:9f:13:af:ec:4b:
b8:2f:6a:2d:3e:da:36:f5:92:13:c1:2d:31:97:fb:03:e9:93:
e8:2c:66:75:b8:a6:60:b9:9d:4f:28:43:f3:eb:86:14:74:75:
fc:8e:d7:80:c5:5e:86:ce:e2:0b:46:3f:d7:7a:3a:f3:f4:b3:
00:a5:af:3f:0b:99:a8:ed:74:58:11:92:cc:9c:6b:90:51:f6:
d5:09:93:6d:f6:9c:33:ad:cf:0a:bf:a8:cc:a2:a8:ee:ce:f8:
f8:39:f0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:32:13 2025 by rpki-client