Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b9bb4e40-1124-403f-a78a-70ed6942b937.roa
File: b9bb4e40-1124-403f-a78a-70ed6942b937.roa (raw, json)
Hash identifier: my6FfqtO95L3Lr8svUeeGbET0NaSCtu9+FWv4BllKTU=
Subject key identifier: 47:7F:56:1D:51:91:84:E0:FA:DB:DD:6F:02:54:52:E8:A7:36:CD:DD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6466E6213BC4511B110A24F1228CC7ACD73D20B8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b9bb4e40-1124-403f-a78a-70ed6942b937.roa
Signing time: Sat 14 Jun 2025 04:33:16 +0000
ROA not before: Sat 14 Jun 2025 04:33:16 +0000
ROA not after: Sat 19 Jul 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Jun 2025 04:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:66:e6:21:3b:c4:51:1b:11:0a:24:f1:22:8c:c7:ac:d7:3d:20:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 14 04:33:16 2025 GMT
Not After : Jul 19 23:59:59 2025 GMT
Subject: serialNumber=8bd14eb023c12e5679b2d2725b91abaa60eef8caa97438288fa511712976b638, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e4:c3:8e:3c:19:bf:65:7d:0e:a4:e1:64:f6:
89:fb:4c:cd:0a:ad:10:fc:3e:0f:a7:34:3e:20:e7:
39:7a:6f:13:f5:45:93:21:56:de:79:a9:cc:9f:f7:
4b:af:1f:10:c9:2d:2f:3c:b0:86:72:8b:b7:56:ee:
fe:fd:04:5f:c8:6c:27:65:a4:b0:44:20:1e:ca:36:
d5:8d:97:25:12:1a:98:44:98:60:2c:7f:e1:8f:6f:
a2:3f:1f:72:7c:b1:f0:86:72:49:ec:46:7d:b4:f2:
40:d6:15:c4:bc:ba:81:d7:4c:a7:57:81:5c:cc:fc:
0a:e0:47:b8:bd:bf:dd:42:2d:34:0a:02:c6:a6:98:
41:fd:dd:21:40:44:c8:07:da:a8:e5:3e:a9:1c:0f:
5e:d1:82:f1:a4:1e:93:8a:5c:8c:f8:e4:d0:c1:e9:
e1:eb:44:c8:b3:6b:21:55:47:ea:d6:3f:15:59:35:
a0:de:35:6a:10:61:d3:74:f9:29:f1:6d:d4:9d:c8:
b1:9a:83:a5:93:7b:87:50:07:8a:61:84:38:d6:77:
da:78:bd:20:7a:0a:83:87:47:a4:c3:4c:06:76:1a:
17:30:e4:1e:0c:55:17:12:8e:bf:ce:72:49:7e:34:
fe:6a:30:30:a4:35:15:77:e5:2c:8a:8d:52:3d:86:
57:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7F:56:1D:51:91:84:E0:FA:DB:DD:6F:02:54:52:E8:A7:36:CD:DD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b9bb4e40-1124-403f-a78a-70ed6942b937.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:f9:69:0f:51:41:18:65:84:4c:e2:eb:6d:40:26:c7:68:d9:
6c:42:b3:3e:15:4f:57:54:5e:66:1c:0a:50:e2:f2:15:73:d1:
b7:06:55:0e:b7:bc:83:54:71:c8:33:d8:ab:e8:b4:b3:49:8d:
46:9b:23:4e:f7:32:4c:16:5b:be:aa:ff:ef:71:37:af:82:3d:
6b:7d:3f:b2:bc:dc:69:a3:2c:ca:21:72:09:c6:06:e9:49:a6:
99:89:71:75:a5:81:db:d5:13:c5:6a:18:ea:bb:fa:b3:13:53:
95:e4:a9:35:ce:89:89:c3:7f:cf:b5:72:1d:ce:65:85:97:52:
d5:a0:ff:db:e0:fc:46:1b:a6:fb:66:22:38:49:4e:99:6e:a1:
93:c9:16:9d:a2:5f:df:df:69:12:25:72:d5:14:7c:ee:89:c1:
00:f2:07:41:44:55:74:f6:5c:98:82:ee:8c:1c:8f:d5:b2:a1:
04:c5:e8:93:c5:b8:d1:d7:b2:46:84:0c:0f:22:0d:30:51:8e:
9b:1c:f0:a2:5e:35:89:81:ec:1f:e9:47:77:5a:8e:30:24:bc:
75:7e:3e:c6:83:91:2e:f0:3f:fc:57:0e:f0:b3:d3:58:d5:5d:
57:07:7e:6b:6a:66:85:90:0e:b8:d3:ff:b9:f2:f2:0f:55:39:
46:73:91:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:03:29 2025 by rpki-client