Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a28c2f0c-1dcb-4f00-81fb-aa7489d2e06e.roa
File: a28c2f0c-1dcb-4f00-81fb-aa7489d2e06e.roa (raw, json)
Hash identifier: on8oBaGnu0cYd9eWoQaqWlnUoTYhaJI3+hf6P2nvvMA=
Subject key identifier: 8E:F4:BB:B3:CC:49:2F:37:8D:9E:5D:D2:48:C1:1F:19:4A:EF:9B:AF
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0DF7254EDE4A772DD22615692ED27CA3C5C718E2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a28c2f0c-1dcb-4f00-81fb-aa7489d2e06e.roa
Signing time: Sat 07 Jun 2025 10:48:18 +0000
ROA not before: Sat 07 Jun 2025 10:48:18 +0000
ROA not after: Sat 12 Jul 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Jun 2025 11:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:f7:25:4e:de:4a:77:2d:d2:26:15:69:2e:d2:7c:a3:c5:c7:18:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 7 10:48:18 2025 GMT
Not After : Jul 12 23:59:59 2025 GMT
Subject: serialNumber=6055d0dbf22ffa470b7c8cc86b0ea6d5128a95472bf89cc14d53579ce39945be, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:ea:20:b0:3c:00:5b:38:e9:b4:5d:27:e0:
9f:63:f0:5f:8b:fc:d3:56:14:bc:89:12:69:3d:c0:
a6:dc:76:97:8a:1f:09:78:10:3b:f8:46:25:70:cc:
61:6c:9d:4d:88:e3:8c:67:b4:34:1f:fc:8d:03:46:
bb:6e:cc:18:92:83:49:c1:54:78:ef:54:57:fc:d0:
81:ee:ce:36:94:83:02:61:4c:ed:47:c5:40:25:5d:
fa:94:0a:46:01:5f:0b:85:18:0e:0f:de:3b:6e:13:
dc:69:de:02:ea:c9:9b:ac:9b:e0:6d:33:96:1f:1c:
81:97:02:e0:c2:ed:26:a5:af:6e:a2:ef:74:d5:b5:
fe:60:a9:1e:6d:64:f1:3a:17:cd:16:d5:e1:fa:ed:
d4:e6:41:a2:46:bc:28:4d:a9:5c:bf:12:b7:46:d8:
cf:33:5f:5f:dd:c4:06:16:3a:4b:e0:53:63:17:e0:
05:6a:59:88:59:b6:1f:3e:52:f4:9e:14:10:e7:42:
38:ec:3d:b0:d3:78:d3:d5:4a:2d:a0:2c:b3:26:cb:
0f:40:3b:c7:5a:6f:fd:d2:da:1d:65:3a:c6:e8:67:
7e:2a:fc:a9:ac:65:6f:b3:e6:a8:84:42:c4:38:35:
e1:10:ed:c8:1b:57:fa:ca:08:6b:e5:6e:8e:90:4c:
c1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F4:BB:B3:CC:49:2F:37:8D:9E:5D:D2:48:C1:1F:19:4A:EF:9B:AF
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a28c2f0c-1dcb-4f00-81fb-aa7489d2e06e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
99:12:e9:55:4b:68:42:a9:19:51:c4:58:2f:4f:3b:5c:00:f4:
a1:e5:88:3c:24:6e:43:04:9f:5a:d1:69:29:85:df:c7:cf:69:
04:f9:ad:ce:01:42:e3:37:af:3e:15:17:12:6f:83:e5:0b:bf:
dc:eb:96:f5:0e:03:80:da:c6:3d:31:33:cc:03:61:3a:5f:29:
91:63:3c:11:09:2c:30:30:69:51:8f:78:e6:f5:cd:82:d5:dd:
ff:65:ad:4a:87:13:ce:ea:54:09:7f:77:41:06:83:0d:59:90:
fb:59:a4:4e:45:78:c6:bd:30:a6:d2:68:ec:b9:f0:7a:f8:32:
f7:87:da:9a:6c:47:9c:1c:c3:ab:7f:00:c7:cf:04:ef:a1:0b:
3a:8c:d6:31:18:c1:12:8b:f1:05:fd:f7:ef:98:00:45:72:a2:
fb:10:9a:79:0c:00:e7:18:13:4d:64:e8:b2:bc:42:d1:fa:27:
d8:de:c9:cf:6b:be:96:94:40:54:ee:cf:51:30:75:27:88:90:
7c:ec:8b:01:6b:c2:67:5e:dc:45:98:e5:7c:6f:17:bc:44:fa:
8e:33:43:f7:45:e8:e0:c5:16:7b:c3:e8:55:ea:f4:e6:b5:ad:
57:14:fa:01:70:5e:2c:e1:a4:9a:e2:d2:36:df:af:45:45:66:
fb:7d:e4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:42:19 2025 by rpki-client