Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c170f770-a4af-46df-82ef-1d71c56287c5.roa
File: c170f770-a4af-46df-82ef-1d71c56287c5.roa (raw, json)
Hash identifier: D3bKMhA71mwta8nMg+6HJ5LYUCeLDHqhvcS+WxR1/t8=
Subject key identifier: 9D:43:0A:C4:D0:0D:CA:64:4E:78:DB:12:A4:09:80:84:73:CA:91:08
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 45993A6E0A221B75251DB3C763F03F5319BCA779
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c170f770-a4af-46df-82ef-1d71c56287c5.roa
Signing time: Mon 14 Apr 2025 22:08:20 +0000
ROA not before: Mon 14 Apr 2025 22:08:20 +0000
ROA not after: Mon 19 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Apr 2025 22:23:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:99:3a:6e:0a:22:1b:75:25:1d:b3:c7:63:f0:3f:53:19:bc:a7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 14 22:08:20 2025 GMT
Not After : May 19 23:59:59 2025 GMT
Subject: serialNumber=6bf4a57be04793678c6ee02223d7981ff2b8fd9e398e1e3f6ad03d19d791f0e7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b9:da:4d:16:75:03:74:d2:8d:81:8e:27:28:
a2:b1:a1:08:76:1f:2d:18:59:80:6a:08:47:db:58:
f6:99:7d:70:e8:b1:46:03:4d:75:5b:38:f7:29:48:
82:f7:fa:9d:6f:f4:52:d1:29:df:5e:fa:2f:74:82:
80:0d:1e:31:ab:21:7a:d6:10:4b:33:f1:71:c9:34:
e8:67:ca:3a:e2:9a:da:86:67:39:d1:2c:98:a0:ff:
c5:0b:65:c9:8e:4c:6c:89:c3:6f:1c:db:82:f4:32:
ac:1d:d8:a8:f2:e5:3a:c0:a3:9e:c0:23:83:82:b3:
0a:54:99:33:9e:fd:55:07:4b:9b:6f:cc:4a:78:ed:
5c:96:3f:f7:6e:a0:f6:d2:cb:c4:79:08:1b:64:40:
11:c7:a4:67:c3:2a:d4:f2:e6:d8:88:54:34:e4:37:
39:38:8c:54:53:58:b5:af:7e:b9:17:76:f9:2b:bd:
de:81:a2:1b:f5:b0:3d:50:90:35:4f:a4:58:bb:d0:
9f:d6:7f:d9:02:37:64:5f:c0:a0:cd:a8:4b:06:3d:
76:e2:b9:20:31:68:3d:f7:ec:57:bf:e3:4a:1d:75:
58:46:20:40:91:14:ee:d1:0c:3c:81:b0:c2:c1:85:
a9:d5:8b:17:31:a4:69:d3:ac:cc:6a:5e:94:8b:f9:
60:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:43:0A:C4:D0:0D:CA:64:4E:78:DB:12:A4:09:80:84:73:CA:91:08
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c170f770-a4af-46df-82ef-1d71c56287c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:35:22:2e:78:7b:b0:26:ca:7e:5f:53:c6:2a:d0:9e:cb:00:
55:78:d4:80:7d:59:fe:c7:60:2f:2c:62:31:8e:f6:7f:fd:a4:
3d:c2:49:10:97:8b:51:f8:2b:f8:64:20:86:64:1a:8a:18:56:
bf:24:00:1f:7c:51:1e:b1:79:05:e8:56:7b:5a:a2:1f:9d:5b:
3d:2a:28:5d:1d:8a:79:46:77:5d:49:c6:53:a3:6a:32:0c:31:
63:82:03:4a:ca:8e:1e:52:3b:5f:ef:0d:1c:32:af:81:13:c5:
5c:cc:1e:77:13:26:ab:7f:9b:f0:e8:0a:85:43:80:32:7b:57:
9c:9c:4b:7e:2e:7e:89:48:9b:c4:31:07:3e:c2:b9:48:ef:a3:
1e:4e:b3:74:21:5f:62:59:f4:1c:46:7e:37:b4:f3:29:d4:1b:
45:4f:da:2f:db:04:14:5c:e2:20:9b:08:85:98:30:7a:40:fb:
09:15:27:3d:22:62:63:65:42:f1:34:d5:49:3b:8b:13:f6:e8:
1d:ef:e4:09:ca:5e:82:db:c8:26:12:83:b3:25:67:e1:99:9a:
91:c4:36:04:ac:9e:e7:c5:83:bf:b6:14:e6:0f:38:bd:62:98:
5d:0a:25:99:a4:08:1e:f3:19:46:4c:57:dd:38:d7:a8:a9:0d:
f6:7c:9f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:13:59 2025 by rpki-client