Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d6f9d6e0-c6b3-4924-9f0d-7e8fc9f65469.roa
File: d6f9d6e0-c6b3-4924-9f0d-7e8fc9f65469.roa (raw, json)
Hash identifier: On69Cx2A9cICtTcLVifsoGOHo2RkHVJPUr7PD01mMQg=
Subject key identifier: 7E:53:9B:D1:CB:95:B0:09:C6:19:4B:7D:D2:FD:31:BB:7B:29:C8:B6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1CBDF97A014397B755A13F5429F279673BD06DA3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d6f9d6e0-c6b3-4924-9f0d-7e8fc9f65469.roa
Signing time: Mon 12 May 2025 21:38:18 +0000
ROA not before: Mon 12 May 2025 21:38:18 +0000
ROA not after: Mon 16 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 21:53:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:bd:f9:7a:01:43:97:b7:55:a1:3f:54:29:f2:79:67:3b:d0:6d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 12 21:38:18 2025 GMT
Not After : Jun 16 23:59:59 2025 GMT
Subject: serialNumber=610a6455ccc2d010c99c48fdb353244d957d075e110e3db63166bc43846929be, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cf:cb:55:7f:6c:b0:28:c4:2f:e3:4c:20:9d:
cf:5f:05:75:6b:d0:d3:51:55:19:95:6a:ea:b6:8e:
b0:3c:30:85:40:99:8d:b9:fd:25:8d:1c:a7:e7:f2:
75:93:7e:61:40:73:e2:72:22:c7:4d:b8:b1:52:ea:
0c:13:bc:67:0f:e8:02:a8:4d:45:c8:8c:ef:cc:28:
f0:6d:35:c3:62:0d:9d:4a:36:a0:a9:ef:ba:cb:19:
e5:ea:6c:8c:63:73:9e:8d:cc:aa:19:c4:c9:d3:51:
c2:d8:5d:13:b7:f1:c6:ef:45:69:fb:e3:2b:42:6c:
6d:9f:7a:6d:5f:7d:27:d9:b4:d8:0c:77:55:65:0c:
c2:cc:7e:42:42:3e:35:9a:88:96:57:b3:98:06:97:
b9:dc:60:77:3f:93:ff:14:f5:1d:77:88:2b:62:41:
ae:93:c4:b8:c0:e3:14:2d:ae:eb:ac:a7:98:28:43:
57:d7:a3:54:e0:fb:95:49:1e:91:09:b6:33:e2:94:
6f:d4:7b:f6:c1:ba:9b:9e:55:6b:9f:43:92:36:13:
d4:9f:dc:2f:66:7f:2a:45:35:72:e2:b8:f1:c6:10:
63:e3:00:d8:b2:37:c5:83:7d:b1:59:24:32:7c:21:
af:fe:74:a7:29:29:94:bd:32:3f:b7:37:9c:9c:5d:
bc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:53:9B:D1:CB:95:B0:09:C6:19:4B:7D:D2:FD:31:BB:7B:29:C8:B6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d6f9d6e0-c6b3-4924-9f0d-7e8fc9f65469.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
45:bc:65:00:db:4d:ea:aa:a1:e1:5f:d7:b3:e8:b9:c0:c6:ba:
29:7e:01:bc:41:c9:a0:64:95:1a:e9:e9:46:aa:b4:ec:ca:83:
d7:12:a4:09:d8:5b:26:16:9c:c7:94:43:19:3a:75:6e:3c:6e:
45:04:fa:7f:b1:70:1d:c9:af:6c:b0:d6:e4:df:d0:06:f9:6e:
c5:bd:c7:26:8e:76:cf:a4:72:f9:6d:6f:40:63:b3:cd:ef:2d:
0a:37:71:61:a2:46:4d:60:70:90:51:ef:27:7e:57:fd:56:13:
a7:03:bd:5c:37:1d:90:b3:ef:32:b0:a0:db:5c:fe:94:32:77:
0e:23:b8:5f:05:0b:74:12:86:14:2d:5d:bd:82:e0:4e:0d:8a:
b5:87:95:85:3f:6b:7d:38:28:73:81:ce:d4:89:23:0d:31:ba:
fd:dc:55:f4:56:c1:2f:24:51:68:87:15:aa:b5:61:27:39:ac:
c7:32:49:4e:b3:9d:b4:87:89:13:2b:f4:c7:c5:3e:7c:dd:b7:
68:bd:fa:4d:c3:8b:28:29:b6:59:46:33:3b:69:a3:45:a2:40:
e9:aa:b0:d7:c7:0b:3d:0d:13:2b:ad:a3:75:fc:29:d0:4c:e7:
9d:30:e9:fe:b8:46:34:6a:bd:9e:97:92:4a:63:62:05:5a:a1:
4c:1c:2e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:51:28 2025 by rpki-client