Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c3a3ca41-093c-463d-8314-f9ff82852b33.roa
File: c3a3ca41-093c-463d-8314-f9ff82852b33.roa (raw, json)
Hash identifier: 7VGb+yjiwOaRHefrduR4/5axxsYpUF5Achpam8/VrUA=
Subject key identifier: 7B:90:9C:7A:5A:96:AF:4E:FE:7D:F5:74:C8:BF:A7:93:D9:31:94:54
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2B045EEF4AE4D8B472C69628966A0431210766E6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c3a3ca41-093c-463d-8314-f9ff82852b33.roa
Signing time: Thu 12 Jun 2025 12:18:19 +0000
ROA not before: Thu 12 Jun 2025 12:18:19 +0000
ROA not after: Thu 17 Jul 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Jun 2025 12:38:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:04:5e:ef:4a:e4:d8:b4:72:c6:96:28:96:6a:04:31:21:07:66:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 12 12:18:19 2025 GMT
Not After : Jul 17 23:59:59 2025 GMT
Subject: serialNumber=6d9d64fef2e9b7c0c2ea65c86e140510bb2beef382303a7457f0c70595860b95, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:69:cc:95:fe:90:49:17:32:8f:7f:b5:c1:ac:
e8:3a:de:77:65:95:b1:5a:29:61:d8:8d:6d:8e:1e:
01:f6:e7:40:20:22:f3:6a:6b:cf:1e:be:52:5e:de:
93:89:67:b8:0d:d2:9b:b3:80:fd:a7:b9:35:d5:c3:
b0:34:5c:f3:23:cb:75:b0:91:9d:43:8b:58:51:49:
99:a0:aa:f6:66:1d:ec:4f:28:ad:5d:97:eb:c6:b9:
aa:0e:bf:10:65:e1:b9:3d:46:b2:5e:aa:a6:67:4e:
aa:f4:84:bf:7d:ad:72:cc:48:b6:6d:45:2f:f2:ab:
12:2b:6f:f3:41:94:16:63:32:c0:2d:a5:ed:b3:dc:
ad:27:43:f2:0a:89:18:6f:fa:ac:4e:7b:c5:b5:19:
78:f4:e0:11:a8:4d:86:43:89:5c:89:f9:12:dc:82:
84:e1:79:83:97:4a:c3:29:3e:c5:d9:58:24:97:62:
ca:56:14:38:09:a8:22:8d:be:b0:38:1f:d1:b8:e2:
22:1e:88:83:d4:39:83:3e:9d:2b:91:2c:95:d6:52:
82:4b:62:71:e0:6f:ab:2b:a6:4e:6e:fc:37:b6:55:
80:a6:0b:b8:90:dc:61:ee:38:91:c4:85:a8:c6:99:
9e:35:38:8c:d2:a4:3d:f0:b1:5e:05:74:9d:27:02:
ee:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:90:9C:7A:5A:96:AF:4E:FE:7D:F5:74:C8:BF:A7:93:D9:31:94:54
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c3a3ca41-093c-463d-8314-f9ff82852b33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
95:f5:25:34:6b:25:0f:a7:0c:86:1d:bc:96:57:0f:e1:43:5e:
da:87:e9:35:ce:58:58:00:65:8a:e3:7e:dd:7f:b5:89:f6:63:
e1:eb:26:af:e3:bf:6f:23:ed:38:fe:46:c2:10:46:24:ed:cf:
90:90:4c:d1:d6:2b:05:28:63:18:19:d7:10:f0:2c:68:b0:af:
ae:53:a2:de:83:52:d8:1f:c4:25:58:e8:3b:81:b1:f2:02:71:
c7:a0:34:54:43:d7:5d:12:b4:ba:61:a3:a3:70:fe:01:07:98:
8a:85:8e:86:3d:ce:57:7f:f7:a1:6c:e2:96:bb:1b:f4:28:0d:
e8:88:51:f7:4c:3d:a5:57:31:40:d2:71:81:57:fb:4b:1b:a1:
a3:39:84:fb:81:a4:6e:d9:b4:1c:af:74:cb:00:b7:0b:00:ac:
d5:9f:e8:ec:5c:ca:76:f9:da:f0:cb:97:a0:1e:91:ea:ad:c5:
ea:de:da:eb:22:fe:f2:63:cf:db:b2:c9:3c:5e:4a:82:8b:fb:
55:c9:3c:8e:cc:35:60:95:b8:c6:c3:4f:79:20:f3:80:53:c2:
a1:d0:9a:1e:73:0c:11:50:bf:78:c8:50:17:16:f2:6e:75:fd:
1e:7d:6a:2e:23:58:6b:30:18:92:c7:86:91:61:86:fb:89:b3:
b9:a7:4e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:48:50 2025 by rpki-client