Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c6257520-4c74-4d10-9c45-4ecb2495fbf7.roa
File: c6257520-4c74-4d10-9c45-4ecb2495fbf7.roa (raw, json)
Hash identifier: y39X0KGUhY4d0LUtIsPBk5mtwjmJAdf7/QvnUXyVY1U=
Subject key identifier: D8:AF:73:34:A9:DB:26:30:76:68:80:EC:4F:E5:7F:4B:F0:B7:30:64
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0F097520AF1660A1FC39EAA804B87F554B857E18
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c6257520-4c74-4d10-9c45-4ecb2495fbf7.roa
Signing time: Sat 05 Apr 2025 07:03:17 +0000
ROA not before: Sat 05 Apr 2025 07:03:17 +0000
ROA not after: Sat 10 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Apr 2025 07:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:09:75:20:af:16:60:a1:fc:39:ea:a8:04:b8:7f:55:4b:85:7e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 5 07:03:17 2025 GMT
Not After : May 10 23:59:59 2025 GMT
Subject: serialNumber=93edd4481bcd9c734d72fdef9995ef9f930f3d4754c53f9ac53deca57bbe8e62, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:e0:9b:e8:d2:de:94:70:ac:5c:d8:5b:7b:
19:7c:b3:47:32:da:c5:0a:04:c1:62:81:67:70:ac:
a0:26:02:6f:13:8f:1d:ed:97:cc:b6:65:68:4a:6a:
7c:11:35:97:9e:9b:55:45:b6:8e:f0:ad:4e:d8:67:
70:91:98:76:4e:a4:11:b6:8f:19:23:0e:26:a4:4d:
d4:b2:81:4b:c1:4b:92:a4:34:d2:cb:a4:ce:e8:3e:
28:11:cb:28:01:3a:b4:0a:9f:28:49:1c:59:8d:2f:
e3:00:81:1c:be:5a:63:c2:7a:57:e3:21:02:ff:b3:
3a:74:3b:23:00:e4:74:64:6a:fb:ec:b0:85:63:33:
72:68:ee:13:a5:27:a6:f7:21:e4:70:ed:b9:64:18:
a8:0c:1c:13:34:eb:34:05:92:42:69:52:e7:31:fc:
e8:8a:45:32:44:b4:72:db:29:9a:f0:45:40:e0:fb:
44:41:32:c6:93:db:92:7f:7f:99:57:e9:a2:de:43:
5b:f2:83:a0:f4:79:d7:09:ef:cf:a9:ea:ac:46:41:
df:1a:ac:a8:01:80:98:e9:1a:75:d2:42:96:d3:69:
d8:aa:9b:db:5a:12:ee:05:f1:27:74:7e:8e:e8:0f:
d7:d6:6f:a4:09:5a:ed:ec:d2:9b:88:a1:0f:0f:0d:
04:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AF:73:34:A9:DB:26:30:76:68:80:EC:4F:E5:7F:4B:F0:B7:30:64
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c6257520-4c74-4d10-9c45-4ecb2495fbf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:04:93:84:98:98:ac:87:31:ff:b6:ed:4c:65:08:ea:e5:30:
34:06:78:da:02:28:fb:e5:fc:aa:3c:69:a3:83:ee:e2:de:2e:
98:25:4f:c2:b3:f7:2c:7e:95:25:e3:d2:4e:dd:85:f0:7e:e3:
80:ef:e9:ca:c6:54:21:76:3a:9b:c1:e3:0d:7b:19:69:66:b9:
78:ef:a8:e2:0c:f9:98:c0:13:d5:25:3b:fc:e9:75:cd:e5:19:
92:f8:6e:45:25:a1:3a:54:df:8b:ad:6b:e1:2a:c7:0a:0f:24:
08:5d:1b:ec:5f:1e:bf:b1:33:6c:88:f4:37:94:6d:87:da:e9:
e6:43:44:e7:ff:8e:ea:9e:24:0c:1e:a6:e5:83:cd:8e:9b:6f:
da:26:b9:19:65:65:c5:d9:d7:4b:9d:4a:99:7f:b7:b8:84:fb:
5e:75:b8:20:cb:f6:af:cb:06:56:d9:eb:1b:7d:aa:c2:1f:a6:
dd:f9:d5:0d:c0:8c:8b:f9:19:2f:ba:fa:32:7b:d1:2a:c8:b3:
fa:91:ac:c9:47:4e:48:ee:d5:62:45:16:ae:3e:9b:e8:fa:73:
24:33:ff:7b:98:7c:71:a1:01:19:a9:9f:12:20:a9:c4:07:cf:
f9:71:6d:2f:ae:12:6f:35:39:5f:d4:77:1c:10:db:50:08:05:
ca:db:70:84
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDwl1IK8WYKH8OeqoBLh/VUuFfhgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNDA1MDcwMzE3WhcNMjUwNTEwMjM1OTU5
WjB6MUkwRwYDVQQFE0A5M2VkZDQ0ODFiY2Q5YzczNGQ3MmZkZWY5OTk1ZWY5Zjkz
MGYzZDQ3NTRjNTNmOWFjNTNkZWNhNTdiYmU4ZTYyMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCh3uCb6NLelHCsXNhbexl8s0cy2sUKBMFigWdwrKAmAm8T
jx3tl8y2ZWhKanwRNZeem1VFto7wrU7YZ3CRmHZOpBG2jxkjDiakTdSygUvBS5Kk
NNLLpM7oPigRyygBOrQKnyhJHFmNL+MAgRy+WmPCelfjIQL/szp0OyMA5HRkavvs
sIVjM3Jo7hOlJ6b3IeRw7blkGKgMHBM06zQFkkJpUucx/OiKRTJEtHLbKZrwRUDg
+0RBMsaT25J/f5lX6aLeQ1vyg6D0edcJ78+p6qxGQd8arKgBgJjpGnXSQpbTadiq
m9taEu4F8Sd0fo7oD9fWb6QJWu3s0puIoQ8PDQS1AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU2K9zNKnbJjB2aIDsT+V/S/C3MGQwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2M2MjU3NTIwLTRjNzQtNGQxMC05YzQ1LTRlY2IyNDk1ZmJmNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKsEk4SYmKyHMf+27UxlCOrlMDQG
eNoCKPvl/Ko8aaOD7uLeLpglT8Kz9yx+lSXj0k7dhfB+44Dv6crGVCF2OpvB4w17
GWlmuXjvqOIM+ZjAE9UlO/zpdc3lGZL4bkUloTpU34uta+EqxwoPJAhdG+xfHr+x
M2yI9DeUbYfa6eZDROf/juqeJAwepuWDzY6bb9omuRllZcXZ10udSpl/t7iE+151
uCDL9q/LBlbZ6xt9qsIfpt351Q3AjIv5GS+6+jJ70SrIs/qRrMlHTkju1WJFFq4+
m+j6cyQz/3uYfHGhARmpnxIgqcQHz/lxbS+uEm81OV/UdxwQ21AIBcrbcIQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:05:52 2025 by rpki-client