Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9f61b8db-b89d-4eac-9e75-39d5a960cd9b.roa
File: 9f61b8db-b89d-4eac-9e75-39d5a960cd9b.roa (raw, json)
Hash identifier: WQIxZNTF33FQ7tpiT0Or0/lNkZEJToPTDFDyxe4LoP4=
Subject key identifier: 3A:47:F8:7D:BF:28:30:72:0F:00:A5:80:F5:4E:09:74:04:9F:E6:36
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7425C1C5A4212F49D3AC798CA0229BA195B7C65F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9f61b8db-b89d-4eac-9e75-39d5a960cd9b.roa
Signing time: Tue 08 Apr 2025 05:53:18 +0000
ROA not before: Tue 08 Apr 2025 05:53:18 +0000
ROA not after: Tue 13 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Apr 2025 06:08:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:25:c1:c5:a4:21:2f:49:d3:ac:79:8c:a0:22:9b:a1:95:b7:c6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 8 05:53:18 2025 GMT
Not After : May 13 23:59:59 2025 GMT
Subject: serialNumber=4e058f7c29c0924ac30631b9b9679cfde9cdbaf0c05a692b8eb60cf66b5fc82e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:72:62:b6:cf:a6:57:17:a2:3b:6d:b6:2f:d0:
92:05:eb:d4:3a:3f:06:9a:a3:d6:1b:91:b9:65:1c:
8a:ce:c2:9f:80:33:10:65:50:99:79:23:47:bb:ed:
13:df:e9:6c:ba:62:5d:1c:2f:12:42:2d:b6:0d:b4:
50:75:64:43:62:bf:69:ea:8c:f8:15:1d:b4:5e:d7:
9a:2c:e5:a2:cb:a0:3f:7e:c4:65:3a:8a:08:e7:34:
03:02:2d:67:30:03:c2:85:05:eb:f8:5f:1f:9b:89:
06:c9:e2:90:c3:bb:c7:86:e9:2e:31:32:bf:67:5d:
6e:22:17:13:05:34:19:5c:e5:f4:7f:ba:fb:21:8b:
20:65:90:49:60:39:f6:42:32:78:8f:88:a6:9a:20:
3b:52:ef:2f:7f:1a:50:8b:b2:d0:56:4c:75:61:92:
cc:21:d9:36:75:98:b5:27:43:97:34:58:89:24:0e:
4c:5e:76:6d:58:d1:67:66:fe:03:0d:bb:55:12:2a:
e8:1a:a2:22:53:99:2a:ca:13:7f:98:9b:dd:d5:a6:
06:74:94:de:62:7d:2c:0e:ac:b4:e7:d6:a7:e8:3a:
36:12:3a:2a:45:be:13:18:fa:e3:c8:89:f0:6c:19:
e7:ff:0c:25:02:8a:b9:a8:3b:5d:cd:c8:ca:0a:fd:
42:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:47:F8:7D:BF:28:30:72:0F:00:A5:80:F5:4E:09:74:04:9F:E6:36
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9f61b8db-b89d-4eac-9e75-39d5a960cd9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:11:54:94:ec:fe:bc:ff:96:00:b3:8c:1b:14:d0:47:83:cb:
7b:c2:f3:37:ac:63:05:ec:8e:37:e0:f4:c9:a8:54:90:56:0e:
19:61:91:ad:a2:8e:6d:94:f9:2a:6a:90:d5:d5:80:46:87:b4:
11:e1:db:2f:75:cd:ae:c3:8a:0c:a4:4a:28:91:3f:60:bc:d9:
0d:96:ac:ba:e0:fd:20:10:1a:02:d9:8f:c6:d1:50:35:af:3f:
58:b2:6f:54:1d:57:f4:00:57:22:52:bc:89:43:30:c2:bb:8e:
73:3e:49:db:f6:e6:fb:16:17:70:95:14:b1:cb:c0:65:fc:b5:
6e:2f:8c:04:a9:39:c8:42:a2:e8:a6:79:de:ec:3b:15:7c:e0:
37:c0:2c:38:15:7e:6f:b3:b8:d8:c7:2e:ec:e8:5b:17:e1:16:
51:46:f1:b2:21:3b:aa:ee:bd:b7:b9:46:fd:36:52:77:91:51:
36:8f:0c:d5:3d:b5:4b:84:20:2d:5b:6f:08:90:1e:60:64:72:
2a:8f:a9:31:9b:6b:84:fb:81:e4:c2:0a:4b:4e:1c:1e:04:eb:
41:d1:4e:68:50:fe:9a:e4:19:74:7c:9b:ef:0e:76:e4:45:45:
16:cd:99:20:8e:ff:a2:72:d4:0c:6b:4c:03:23:25:48:4a:f6:
40:96:a4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:33:17 2025 by rpki-client