Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ba2481de-28c2-4b4c-835b-588dcb14b966.roa
File: ba2481de-28c2-4b4c-835b-588dcb14b966.roa (raw, json)
Hash identifier: C1RYkVifsSSZHMUoCwzIh5agT3w1weZySOhcCjAjQC4=
Subject key identifier: 5A:6F:08:2A:FE:6D:7B:5D:5F:5F:0E:02:5B:52:8C:3B:81:C6:45:FD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2ABF7CE3DD7AB021B60BFA9E6720F8E949046E0A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ba2481de-28c2-4b4c-835b-588dcb14b966.roa
Signing time: Thu 15 May 2025 01:48:20 +0000
ROA not before: Thu 15 May 2025 01:48:20 +0000
ROA not after: Thu 19 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 May 2025 02:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:bf:7c:e3:dd:7a:b0:21:b6:0b:fa:9e:67:20:f8:e9:49:04:6e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 15 01:48:20 2025 GMT
Not After : Jun 19 23:59:59 2025 GMT
Subject: serialNumber=ce3cb4641b375dea04db3ec62c545d2d7bdf4748d98060275e6f9692ff7d2b71, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cd:18:0d:31:6a:18:9b:6f:38:9f:fa:02:3c:
55:53:3b:e8:fd:ad:a2:e4:80:49:f1:c2:95:29:37:
6c:c6:52:12:02:8a:98:9d:f8:f0:39:00:15:23:56:
eb:fe:42:f6:52:de:5c:ef:a5:10:eb:01:63:71:4a:
8a:34:86:ea:52:9a:d0:7b:12:bb:1f:70:3d:9a:da:
72:48:53:ce:d1:1f:dd:67:67:a0:83:1b:73:f0:f1:
a6:79:18:10:0f:ab:36:62:b9:de:4a:43:77:c1:7e:
e7:95:bf:86:cd:58:2f:a8:10:de:5e:a8:b9:43:49:
6c:90:93:12:15:62:71:12:c4:f1:ba:d3:f2:35:8b:
6f:b0:73:c7:cd:d8:09:dc:68:4d:2f:59:eb:b0:a3:
49:71:69:0d:12:6a:0f:72:54:43:47:fd:12:36:ba:
b8:cd:a9:ca:d2:3a:2e:43:fb:29:89:e3:a0:fc:a1:
d2:35:d7:49:9b:5e:8e:75:7a:e5:85:23:39:cb:08:
04:44:ab:ae:c0:9c:64:f9:06:7a:c1:d7:e2:cc:42:
53:a2:37:f8:df:fe:f5:16:c8:e9:f7:3a:e4:40:c0:
15:90:46:5d:16:52:72:31:a2:5b:32:e6:83:bf:61:
ef:40:40:31:4d:5b:ee:ef:a6:db:62:a3:c0:07:83:
e8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6F:08:2A:FE:6D:7B:5D:5F:5F:0E:02:5B:52:8C:3B:81:C6:45:FD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ba2481de-28c2-4b4c-835b-588dcb14b966.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:7d:fc:6a:08:76:e6:e8:2a:e1:3b:33:40:6a:61:d4:e4:05:
63:32:9b:73:c7:b0:24:1a:d2:71:a9:95:7a:d5:38:e2:01:45:
af:67:b0:0c:1f:84:e1:86:62:69:46:3d:45:b7:76:34:aa:ae:
af:ad:94:7b:12:a7:7b:a1:8a:a6:a5:f4:bd:f1:96:a8:85:3e:
c0:4e:37:e9:b8:fb:cc:c2:b6:39:9a:49:11:10:f4:dd:0c:51:
eb:fd:14:7d:a9:5a:56:3f:2d:88:c0:ee:e3:ff:64:cb:9f:9b:
ae:b7:ab:e2:b8:a9:3d:b7:e2:d1:99:ab:a0:2f:49:cd:56:db:
a9:ab:81:e5:2c:45:98:28:e1:49:8c:36:00:dd:bb:6f:0a:bb:
3c:8c:f3:92:b1:78:e3:7c:40:be:73:3f:86:7b:72:84:a9:d6:
fb:e3:73:d6:b5:61:e1:0e:5e:28:24:49:5e:e4:06:59:87:e3:
d9:8b:78:0e:07:e0:2f:7e:77:3c:df:e2:83:73:3c:3d:a0:a9:
46:16:9c:3e:49:b7:f1:d4:01:11:22:b6:02:aa:ac:1e:55:3e:
39:08:7f:10:83:6a:25:e9:79:8f:d7:51:0d:c4:f5:8a:6c:80:
16:eb:cb:63:2f:2f:34:a6:67:21:e1:51:6e:3c:e0:47:a4:81:
b6:56:44:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:52:16 2025 by rpki-client