Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bead6013-2a57-41a6-86a5-9304ed79e18b.roa
File: bead6013-2a57-41a6-86a5-9304ed79e18b.roa (raw, json)
Hash identifier: eWgn1+/sVsh5F7NsjDkyOMxT/KNABEpWf4oTvnNYlHI=
Subject key identifier: 45:24:2C:03:08:F5:CF:5A:4E:CB:BF:9F:66:63:12:62:A1:A8:54:DA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4CCFB8971C5FF4B013BC4AF0A069E3B1457EF6A1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bead6013-2a57-41a6-86a5-9304ed79e18b.roa
Signing time: Tue 27 May 2025 00:13:16 +0000
ROA not before: Tue 27 May 2025 00:13:16 +0000
ROA not after: Tue 01 Jul 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 May 2025 00:33:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:cf:b8:97:1c:5f:f4:b0:13:bc:4a:f0:a0:69:e3:b1:45:7e:f6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 27 00:13:16 2025 GMT
Not After : Jul 1 23:59:59 2025 GMT
Subject: serialNumber=5d1cf7a9e4b1a36626619d3be845501d1c4a3b775030eaa7995978d5cc0381cd, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:15:a2:2d:9b:46:f7:c2:b9:d6:84:fd:24:
40:60:c6:96:06:99:ff:44:1d:ab:c4:46:af:c2:b0:
07:d3:d8:1b:7d:5b:01:c9:58:a0:a0:5a:22:92:8f:
75:5a:50:3c:be:ca:dc:45:fd:64:50:70:8a:39:8f:
ab:8e:e2:b7:fc:ff:ba:d5:8f:c8:ff:45:55:53:6e:
25:d5:e1:0b:89:63:f6:2a:bc:2a:b3:6e:66:c3:93:
2e:50:45:08:a6:2c:5b:41:e7:c0:a1:f1:86:11:ad:
f3:cf:c3:a6:e5:c5:f7:d2:5d:ab:cc:8d:c3:31:1f:
99:d1:7f:2d:9f:b4:40:80:4a:a9:61:b7:eb:86:53:
39:48:a5:66:6c:e1:e5:49:7d:17:3c:36:a2:8b:93:
61:d9:62:d1:41:a4:52:b0:51:73:d4:69:43:4d:0e:
42:0e:8d:ad:06:f3:b8:5d:2e:78:50:e9:7e:e8:d9:
f8:73:54:3d:4c:8f:66:d4:8e:36:b8:9f:05:84:fe:
41:ea:51:6d:c6:4d:ce:fa:e5:11:09:ea:06:e1:14:
6f:d8:04:04:f1:d5:1b:e5:7b:f6:97:9e:f0:96:87:
1b:06:1e:21:17:f6:4c:4e:06:0e:79:8c:d0:47:b8:
65:6f:cd:88:5b:22:f8:95:b1:47:8a:2c:85:cb:be:
5a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:24:2C:03:08:F5:CF:5A:4E:CB:BF:9F:66:63:12:62:A1:A8:54:DA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bead6013-2a57-41a6-86a5-9304ed79e18b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:03:65:3e:3a:00:fc:ce:6d:30:47:ab:1c:b9:3f:7e:4c:b6:
c8:57:fd:7b:89:db:87:18:db:d3:3a:5b:1f:a4:76:7e:df:81:
1c:0c:70:10:0e:e7:c2:9c:be:8c:20:37:4c:dc:5e:d3:5c:96:
0e:c5:c0:3e:c8:d5:14:6d:0b:f6:a5:9b:e3:8d:82:0c:3f:ae:
d9:52:98:d3:13:fa:06:35:e9:73:5f:a8:b5:d8:1d:d3:6e:aa:
c2:cd:93:3b:45:d8:db:25:15:6e:b4:78:4e:0a:7e:7c:86:e6:
84:4e:9c:4a:9f:12:a5:87:c7:d8:ce:f4:1b:55:1c:4a:9c:14:
b6:dd:20:32:c5:22:c5:29:e1:eb:c8:a0:53:2b:fb:c3:a8:81:
86:0e:d3:11:18:4d:20:0f:9f:f7:26:49:08:46:cf:a1:7d:fc:
1a:67:49:34:3f:69:d6:10:bd:fd:ac:19:74:fc:d6:16:41:d7:
06:c6:d8:29:b3:6d:23:2a:f0:47:0e:3d:dd:dd:62:8e:98:c4:
a1:22:7a:3c:f4:53:f9:ce:4b:62:56:3b:ea:38:5f:6d:a8:b7:
6b:db:09:c1:60:7e:53:f9:12:f6:11:fb:8f:19:c1:cd:4d:7b:
30:bb:d0:fa:b9:36:9c:bd:14:3e:9f:ed:ed:69:4e:29:65:f7:
53:bd:08:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:04:31 2025 by rpki-client