Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/baf82987-a62f-4f42-8138-665bf4d3790c.roa
File: baf82987-a62f-4f42-8138-665bf4d3790c.roa (raw, json)
Hash identifier: rwMtrzGvBvzC+YyUdRL/1aynLZOqHtivWA8c1VI6/1E=
Subject key identifier: 88:82:87:62:94:C0:D1:D2:4B:6A:78:C1:3F:F9:79:BE:09:5C:AA:33
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 43C1C76C7BC9A29013B9384D22AB79A644695F61
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/baf82987-a62f-4f42-8138-665bf4d3790c.roa
Signing time: Fri 23 May 2025 02:43:17 +0000
ROA not before: Fri 23 May 2025 02:43:17 +0000
ROA not after: Fri 27 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 May 2025 02:58:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:c1:c7:6c:7b:c9:a2:90:13:b9:38:4d:22:ab:79:a6:44:69:5f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 23 02:43:17 2025 GMT
Not After : Jun 27 23:59:59 2025 GMT
Subject: serialNumber=ad71e2943e403459db36cc75597d08f6bb598f436fe331d4864a1f41deff2a27, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:47:9c:9e:c0:1b:9c:c6:8d:ca:a5:33:e1:4b:
75:6b:2e:b2:8d:f9:ba:64:bd:a9:df:fa:97:06:b5:
c5:57:5e:35:14:dd:8f:7f:69:9a:b5:28:61:32:28:
e3:e4:0e:2d:7d:f5:2f:e2:c9:86:61:aa:34:2a:c2:
97:fd:be:a1:c4:eb:32:c9:b3:f6:37:35:0b:cb:b9:
ad:76:8f:e1:9b:db:6d:83:ba:76:13:69:0f:36:ba:
09:59:84:cf:d0:97:82:6e:97:5d:2b:e0:89:d3:ea:
34:46:ef:87:09:22:87:0f:fe:e1:04:a5:00:38:3b:
81:84:70:10:41:29:51:b0:b6:b5:d2:ce:4b:6a:fa:
cd:9b:b9:53:e7:f2:c7:88:34:cc:64:e7:7b:08:e0:
b8:18:94:5a:fd:af:bb:8d:e6:96:7c:e7:c8:87:30:
d9:25:a7:a1:e4:c3:ad:1e:71:19:49:38:78:23:2c:
06:1f:1a:d8:04:67:ed:d5:a4:df:ca:cf:77:bd:a5:
9a:e7:0c:0e:53:2a:2d:7a:13:91:c1:e9:78:f6:1f:
42:61:75:95:db:41:93:92:e6:81:99:0c:01:8f:46:
c4:ad:c3:2f:b5:73:40:16:4a:e7:b0:fe:cf:b6:04:
f5:db:f8:81:ec:d3:14:10:1f:94:77:0a:85:92:3d:
f5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:82:87:62:94:C0:D1:D2:4B:6A:78:C1:3F:F9:79:BE:09:5C:AA:33
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/baf82987-a62f-4f42-8138-665bf4d3790c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:35:fe:38:99:04:2c:a7:bd:a8:83:c4:55:92:7a:05:82:45:
fe:79:c8:47:2e:5b:10:6b:f8:b9:78:13:5d:5c:11:9f:d9:a6:
5d:bb:0e:39:9d:30:3e:3f:e8:21:59:5a:c0:65:09:fd:7e:cc:
ce:b0:97:52:12:99:8c:3b:dc:c5:ca:58:a0:d9:2f:dd:a2:4d:
32:e4:20:4c:ae:dc:b9:7f:43:d3:9d:75:4e:41:f0:71:bd:68:
88:c2:f3:da:8e:2c:59:a5:3a:cb:75:e5:9e:49:7f:3d:12:92:
49:fd:80:5b:cd:6b:67:a1:a0:c6:11:a3:33:cf:92:ef:6d:28:
32:c4:2a:c3:4e:50:5b:1d:57:85:f1:25:6f:a3:eb:e5:eb:d2:
dc:12:bc:f7:df:ae:d7:e0:3e:e7:73:ea:99:50:af:80:b3:10:
94:fb:f6:dd:04:fe:06:79:55:9e:7d:6b:5d:2e:57:44:f7:c6:
eb:4a:64:77:db:03:6a:98:37:74:07:29:8f:0f:75:69:44:e7:
58:b7:4c:66:c5:fe:b3:0b:13:6b:16:65:b5:bf:4e:65:dd:63:
50:be:99:1a:dc:b3:a2:97:a6:1c:15:ac:18:b5:7f:ab:9c:fe:
66:3a:08:96:18:16:c3:fc:b0:d8:56:21:fa:b1:9e:8c:fb:e2:
f7:b8:e1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:07:55 2025 by rpki-client