Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d69fd283-1295-490c-bfec-fdd4ad899c74.roa
File: d69fd283-1295-490c-bfec-fdd4ad899c74.roa (raw, json)
Hash identifier: jlqTxXFB5UjMUldhQm9sqwLeLR4luHITIaLEa7f+7UI=
Subject key identifier: 5B:F8:21:63:50:A3:D8:B5:AA:06:BF:58:1A:AE:E3:7C:E2:23:17:F2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7EEBBC12866476BED30B91A4E697A816F0DBFEB6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d69fd283-1295-490c-bfec-fdd4ad899c74.roa
Signing time: Tue 25 Mar 2025 18:23:17 +0000
ROA not before: Tue 25 Mar 2025 18:23:17 +0000
ROA not after: Tue 29 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Mar 2025 18:43:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:eb:bc:12:86:64:76:be:d3:0b:91:a4:e6:97:a8:16:f0:db:fe:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 25 18:23:17 2025 GMT
Not After : Apr 29 23:59:59 2025 GMT
Subject: serialNumber=f1299b2112abb62064ff9c4915c33a189a2ca543a69c7f1f78f3465bab4a84c1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:50:6b:9c:b1:41:1d:8d:ad:47:07:b3:3d:26:
b5:06:4d:48:da:39:bc:3f:fa:e5:85:66:ea:26:f8:
b4:03:6a:ea:b7:ae:7e:3d:75:9d:2c:4d:d7:66:59:
cc:37:57:19:20:aa:67:47:d4:5f:4b:30:01:d8:6e:
0d:b7:83:0a:3a:fc:01:ef:2a:9a:f9:a4:31:de:ba:
3c:89:51:e6:19:f3:44:c3:05:3f:34:da:82:4a:00:
c9:66:6a:b3:b2:25:d1:a6:2b:65:b9:bb:f2:2f:e1:
5c:b9:54:cf:bf:ae:ca:db:ec:ca:bc:b0:e5:7e:c3:
b9:c5:52:d6:9b:8d:5f:78:c8:0f:bc:71:62:21:0b:
53:be:03:40:c1:6e:32:5e:74:cb:52:05:b4:48:95:
8c:92:0b:92:1a:4c:e2:45:fb:ae:87:e7:89:f1:77:
b8:6b:2a:9f:31:f3:8b:07:40:2a:d8:2f:be:79:7a:
57:d4:7e:52:a0:d7:ee:7a:79:81:ba:38:8c:29:b0:
6b:50:32:7d:3f:3a:6e:02:0a:e6:e5:19:83:6d:dc:
0c:72:ae:9c:d9:b5:11:90:e0:94:f0:69:28:ac:db:
34:28:13:c6:45:a3:93:36:5f:d7:db:ca:15:68:57:
8f:5f:52:36:ef:b8:1e:e5:02:79:ee:5f:18:28:bd:
ac:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F8:21:63:50:A3:D8:B5:AA:06:BF:58:1A:AE:E3:7C:E2:23:17:F2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d69fd283-1295-490c-bfec-fdd4ad899c74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:87:1e:7c:3c:c4:47:4b:a3:e7:d1:48:7a:b7:4c:79:a0:84:
c0:71:b8:7f:50:8a:f6:5e:46:3b:a4:24:af:28:eb:4c:c6:62:
09:5a:e4:7c:62:41:d5:d6:f7:35:07:be:8e:23:be:cb:eb:47:
44:d8:ef:89:cb:04:5e:ae:62:df:dc:8e:40:03:ff:87:83:7b:
0f:bc:ec:5f:25:ed:23:11:84:d0:58:46:5f:31:8f:53:99:73:
11:20:f6:38:9b:d5:cf:fd:4c:18:61:3a:4f:10:83:f2:72:2b:
d6:2d:68:7d:35:31:81:28:af:23:25:48:92:cc:75:8b:34:7e:
5d:9d:45:c7:4a:70:61:61:c0:eb:18:ec:66:5f:2a:f2:9b:ea:
f9:fa:8c:4f:72:55:e0:47:3c:07:ec:a6:56:87:05:8c:f1:8a:
97:11:7e:2d:71:2d:02:88:d7:fb:5e:e5:26:15:ba:6f:b6:30:
93:e7:2b:57:b6:54:da:d8:99:b3:da:9c:c9:89:55:43:16:ed:
35:63:af:72:bb:9d:51:ea:3a:fe:31:84:bb:10:41:96:d2:e5:
c6:f3:ed:a2:7a:e3:a6:04:ca:9f:60:73:06:17:19:3b:70:7d:
54:14:9e:45:33:d8:3b:ea:23:5a:bc:24:f9:b0:1c:1b:8e:f2:
96:73:ac:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:11:12 2025 by rpki-client