Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b9ad2650-793d-49b2-aa40-1e6fe98926aa.roa
File: b9ad2650-793d-49b2-aa40-1e6fe98926aa.roa (raw, json)
Hash identifier: vxehe2V6cKIzu51ryTsuGTMvkN+bN0aJAcFIwqxdSIM=
Subject key identifier: 3E:3E:C6:7F:38:2F:E3:96:98:13:D0:F8:2B:B1:87:55:4E:3D:0D:41
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3B308BF3D084667CCD5503E57F5AC22560AAC529
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b9ad2650-793d-49b2-aa40-1e6fe98926aa.roa
Signing time: Tue 10 Jun 2025 22:28:21 +0000
ROA not before: Tue 10 Jun 2025 22:28:21 +0000
ROA not after: Tue 15 Jul 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jun 2025 22:43:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:30:8b:f3:d0:84:66:7c:cd:55:03:e5:7f:5a:c2:25:60:aa:c5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 10 22:28:21 2025 GMT
Not After : Jul 15 23:59:59 2025 GMT
Subject: serialNumber=b0c0fe9cab6de59855d4ce5327af85b2cbd76e5e0fbf2e37b24bb8cd70b48885, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:07:0d:d4:14:16:7a:16:24:d1:cd:92:c0:
0f:53:39:ce:02:77:78:fb:1a:ac:e5:88:e2:0e:bb:
70:7d:00:3f:f2:a4:a4:4f:37:8c:b0:01:7e:89:99:
0d:78:66:a9:c7:7e:c7:bd:77:cb:1f:93:93:43:fe:
e9:74:79:2e:4a:3c:f6:5c:ff:b7:24:62:06:5e:11:
a4:e1:ab:c5:f4:d5:01:4a:73:5c:c0:b1:1f:98:df:
7c:94:fc:2d:ae:7d:03:50:72:ba:20:70:6d:47:b7:
79:4c:89:8a:27:37:fe:a1:94:46:d9:e9:94:a7:aa:
26:5e:11:9c:65:62:6c:d7:fc:43:5e:f5:56:96:fe:
7e:76:3f:34:43:fd:e2:b1:4e:6c:ce:f6:79:5e:3d:
93:05:8f:61:3c:12:6c:69:48:74:b6:1c:6a:8f:1f:
b7:7a:b9:fa:2a:ac:c8:29:21:1c:20:48:8c:e6:51:
7b:9c:4b:78:5d:dc:9c:44:48:bb:c7:f0:fc:ab:a3:
1a:46:f0:6d:66:fc:ae:83:5f:d4:da:40:16:8c:ab:
ba:9c:b6:98:96:3f:d7:e0:8b:4d:d2:74:79:34:d3:
18:e7:cb:af:9b:b6:79:27:08:65:5f:3e:d3:dc:25:
75:ca:f6:72:2e:a6:b5:e4:01:a4:21:42:1b:6c:1b:
e4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3E:C6:7F:38:2F:E3:96:98:13:D0:F8:2B:B1:87:55:4E:3D:0D:41
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b9ad2650-793d-49b2-aa40-1e6fe98926aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
15:4e:40:22:2f:f5:d0:8a:d4:22:e5:a1:4f:6c:11:23:9d:56:
44:0c:77:fe:d1:c0:c6:67:35:27:ba:37:05:71:f8:1b:2a:d2:
90:d1:d4:f7:85:e7:16:c6:c4:ef:40:ee:20:32:df:b9:a1:34:
ea:3e:73:89:c0:19:f0:92:f0:57:9e:9f:2e:41:63:06:2b:ad:
22:b8:cc:45:9f:d5:d4:19:ed:8e:8a:32:f7:36:f6:78:bd:b1:
ae:c3:47:85:3d:02:f1:4a:9a:a1:36:1b:a6:4a:83:2a:2c:af:
37:07:8e:20:9c:0a:44:04:7f:3f:47:5d:ab:27:4c:97:39:e5:
fd:99:20:b6:17:6c:9e:74:cf:84:53:d2:bc:39:b2:16:c0:77:
62:97:78:29:3e:14:93:24:86:f7:c1:87:42:ec:bc:18:b5:37:
e3:52:97:b4:bf:21:18:08:06:1c:33:60:00:87:6d:f6:d5:e8:
66:da:99:df:c7:a1:13:0e:38:ce:91:c5:fc:6b:2a:c2:08:d8:
a3:4a:1f:98:8b:1d:97:46:5e:bb:55:32:6d:b1:d5:6f:60:88:
8b:83:58:a2:3f:ba:c9:ba:e8:43:9d:ce:69:64:29:b9:05:bc:
8d:b0:a5:29:a6:1a:f1:52:c6:95:cb:67:85:0e:b0:5f:bf:1b:
37:29:5c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:20:55 2025 by rpki-client