Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a0e3f952-7447-4699-ace2-ef04d7d42199.roa
File: a0e3f952-7447-4699-ace2-ef04d7d42199.roa (raw, json)
Hash identifier: 6eRqrDO/LwigXWpcCvB7PfAPo+URvDVY15S2507eFyk=
Subject key identifier: A2:F0:CA:3E:AC:50:43:BE:17:D1:0C:44:46:5D:BA:07:0D:D3:07:FC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 044A450216A572DBCC9D02DB98F9FA14A7B21A52
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a0e3f952-7447-4699-ace2-ef04d7d42199.roa
Signing time: Sat 22 Mar 2025 16:18:19 +0000
ROA not before: Sat 22 Mar 2025 16:18:19 +0000
ROA not after: Sat 26 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Mar 2025 16:38:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:4a:45:02:16:a5:72:db:cc:9d:02:db:98:f9:fa:14:a7:b2:1a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 22 16:18:19 2025 GMT
Not After : Apr 26 23:59:59 2025 GMT
Subject: serialNumber=0359f33a963e2359231674d52c4a1496fdc1cb1cf6f10a348b0f7d459c12c859, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:15:eb:0b:35:25:2d:ae:8f:a7:dc:67:33:
b0:12:86:67:6d:56:e5:d2:91:58:48:1e:af:14:23:
72:a9:6a:4d:b4:7c:78:ad:28:63:21:58:bd:c4:ef:
a0:a3:f5:bb:29:17:27:cb:8c:78:bb:be:cb:8e:d9:
ff:f6:9d:ad:2a:8f:c6:54:61:ac:46:7d:10:ad:08:
61:ba:49:de:13:15:d2:aa:ab:1f:d6:ce:9c:56:96:
40:4b:0a:91:46:eb:3a:e6:28:ad:f3:65:ee:1b:4d:
d4:bf:13:cf:7d:cf:98:be:ad:52:60:10:dc:ca:7c:
a8:f4:68:1c:db:29:1e:fa:6b:6c:8b:4e:6a:9f:e4:
94:d3:09:84:bb:43:3a:05:d7:45:1d:0e:e1:24:21:
42:3e:33:a2:20:37:b7:3d:88:00:1c:6c:b5:46:6c:
5e:5c:51:be:ce:4a:54:a4:d8:9e:cb:03:ae:a8:a2:
65:bf:e3:a9:ff:da:b6:b4:1a:35:b9:26:7f:8b:a9:
e1:27:61:d7:7d:cf:51:56:10:af:a7:90:3b:85:46:
2c:1d:39:79:5f:a2:53:98:8f:85:52:ac:00:45:51:
e2:80:95:76:73:3c:5c:a9:bf:79:06:61:f2:29:08:
cf:20:24:5c:5b:39:f3:60:26:ad:09:d3:ea:c0:d7:
1b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F0:CA:3E:AC:50:43:BE:17:D1:0C:44:46:5D:BA:07:0D:D3:07:FC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a0e3f952-7447-4699-ace2-ef04d7d42199.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
69:90:ba:be:87:35:34:66:30:9d:ab:79:8f:7d:c0:7f:3c:4e:
45:b7:60:13:61:5f:34:dc:bb:96:8b:19:2f:ec:d7:ac:80:02:
51:7c:19:e7:71:e9:9a:f1:d9:9b:9b:1a:34:bb:f7:8e:17:f8:
55:19:8b:59:c1:b9:fd:ba:c7:13:c7:fa:22:cf:ed:82:c2:02:
cc:90:5e:49:da:fc:81:d4:22:df:f2:4a:f1:74:99:15:c7:a2:
69:03:57:47:1c:fe:6c:fa:85:a3:5a:2b:4b:64:ca:7c:3b:d9:
52:44:2b:d9:72:e2:d3:ff:26:33:2c:0b:21:0e:96:b2:fb:65:
be:34:a2:25:72:cb:00:66:39:1d:7d:92:86:e8:37:67:1c:35:
3c:db:5a:19:bb:70:3b:a1:6b:62:ff:aa:97:d2:6c:fc:e4:6a:
00:5e:a2:c1:cd:36:15:c5:61:5b:ba:30:96:78:50:c3:3d:f0:
fd:1d:f1:2f:63:12:de:e4:5f:5e:4b:26:52:62:a4:01:4f:4f:
8a:aa:5f:58:9d:1e:bf:bd:54:a6:32:c8:66:af:2e:be:f4:70:
71:e7:c0:9a:9e:78:1b:d6:70:b7:b0:5e:be:1f:fc:41:06:8c:
78:c8:fb:41:70:3a:4c:e7:7c:e8:8c:f6:27:6d:5d:bd:2f:79:
29:77:42:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:46:40 2025 by rpki-client