Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b579883f-e99c-46cf-acb5-598356b589ac.roa
File: b579883f-e99c-46cf-acb5-598356b589ac.roa (raw, json)
Hash identifier: 06K+a6RWb/Kopiy1iJnrcZTeMFoYILTZDlgwE4F17R8=
Subject key identifier: A5:DD:6F:8B:02:12:18:E5:04:87:10:EA:8E:21:54:F9:2B:45:9B:C1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 69DF0E4E6CBB2721BD2060B3BE10416EC826A377
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b579883f-e99c-46cf-acb5-598356b589ac.roa
Signing time: Sat 24 May 2025 03:38:21 +0000
ROA not before: Sat 24 May 2025 03:38:21 +0000
ROA not after: Sat 28 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 May 2025 03:53:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:df:0e:4e:6c:bb:27:21:bd:20:60:b3:be:10:41:6e:c8:26:a3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 24 03:38:21 2025 GMT
Not After : Jun 28 23:59:59 2025 GMT
Subject: serialNumber=5f83415b234a921352bd726a3aa920d6f1231a7360bea1a20fb3bec0b78a277f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:6c:3f:63:0c:01:37:7b:4a:8d:fd:da:f5:
8c:14:15:4d:8c:f4:10:f2:d2:07:1e:ae:82:0d:12:
85:5b:32:80:b3:2e:0e:c2:0f:a0:ea:2c:2f:3e:9f:
f0:f2:12:59:ba:07:9b:ee:a3:bb:9e:55:cd:58:1e:
cd:ee:3b:0a:9b:4f:c8:20:3d:60:9b:ce:c0:55:90:
0d:48:2f:1c:e5:a2:1d:b4:f9:e9:9b:f3:d4:61:da:
2f:07:12:c5:9f:9d:20:68:f4:72:5f:f0:50:ec:55:
a0:37:df:69:8b:e2:51:aa:c3:22:84:b0:2c:a7:d4:
dd:a6:d4:2c:8c:18:5a:19:ab:8d:95:b6:e8:d4:a0:
5f:92:37:50:81:f3:c7:44:9f:08:df:b8:07:dd:3f:
25:36:72:02:dd:23:17:0a:f0:ba:95:f8:67:21:ec:
cc:32:02:a3:af:0c:d4:4b:62:fe:da:b2:dc:a4:bf:
0d:49:17:4c:d2:cd:e7:9f:fd:d3:6d:11:9e:d9:32:
6c:fc:1f:55:37:27:70:b7:13:89:fe:1a:ba:29:13:
b2:fa:d9:92:7d:33:fb:bf:31:f4:6a:3d:44:14:72:
2f:58:a9:5b:29:69:29:b1:f1:0b:72:d5:49:95:58:
25:b5:ef:f9:de:1f:b7:93:d1:ed:a5:95:36:04:c9:
0e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DD:6F:8B:02:12:18:E5:04:87:10:EA:8E:21:54:F9:2B:45:9B:C1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b579883f-e99c-46cf-acb5-598356b589ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
57:bd:1d:04:b5:8a:1d:d3:b9:48:ae:5f:57:e0:06:78:5a:a1:
68:ed:25:3c:27:50:1c:c6:df:e4:26:2e:7c:18:5c:00:82:35:
e7:c6:25:bb:1c:63:d9:f8:2a:43:75:6c:dd:c4:df:aa:f9:b5:
76:ec:c4:b6:2e:bb:f4:de:60:f1:b5:ca:2d:2c:b0:5c:42:2b:
73:c7:64:cd:c1:ba:9b:d1:4d:6c:31:93:34:75:d6:e6:dc:c6:
59:4c:57:69:8a:01:0f:16:16:19:29:22:16:c6:a6:18:4b:e4:
d0:69:db:67:3e:15:bc:05:d9:29:7d:6c:87:22:b2:15:ed:26:
7c:dd:fb:ea:37:db:e1:9b:52:c9:12:03:b5:5b:bb:03:47:3a:
41:ab:67:a3:02:8d:09:19:bf:7b:77:97:b5:76:b4:9a:a4:08:
59:5d:9a:60:f2:0b:02:34:85:a9:10:3b:44:f5:fa:60:db:6b:
34:1e:b2:b1:ab:7f:b0:47:96:e2:58:f8:f9:02:24:90:d0:41:
7a:98:b5:5a:51:62:91:2e:71:21:b2:14:01:1f:e5:35:46:a8:
d9:04:7e:2b:92:ad:e1:7d:6f:5b:10:ca:a9:e3:1a:96:bb:16:
90:7d:ac:01:9a:a5:41:33:2f:ed:c6:78:9d:0c:f4:5d:7e:cd:
74:23:38:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:23:17 2025 by rpki-client