Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d8467a7a-b9a6-4dfb-a340-15b02bf71308.roa
File: d8467a7a-b9a6-4dfb-a340-15b02bf71308.roa (raw, json)
Hash identifier: /iBYHBR9GH+LYqI2fN414QWEzcVlaWFGlhzKwTwoeUk=
Subject key identifier: DE:35:62:A6:E3:38:7A:73:AA:AD:5C:88:16:72:66:7D:6D:A8:4B:09
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0E77A66B6636CD4F90A68872ABFDCACC65C95695
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d8467a7a-b9a6-4dfb-a340-15b02bf71308.roa
Signing time: Fri 23 May 2025 04:58:17 +0000
ROA not before: Fri 23 May 2025 04:58:17 +0000
ROA not after: Fri 27 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 May 2025 05:18:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:77:a6:6b:66:36:cd:4f:90:a6:88:72:ab:fd:ca:cc:65:c9:56:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 23 04:58:17 2025 GMT
Not After : Jun 27 23:59:59 2025 GMT
Subject: serialNumber=7efb8a7424c36d3ce5f736ab15c7f6e49e792cff74ee27ae9b25efa21c3c71be, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3d:78:39:d3:d1:cd:a3:b1:9e:62:ae:ab:68:
1b:af:b3:20:8f:78:78:59:66:21:7c:5d:f8:9d:b6:
76:b2:7e:dd:eb:d3:e1:f2:f3:a5:1e:78:52:03:d4:
2b:9c:8a:5d:d7:7b:9b:8f:03:69:bf:7f:e9:89:31:
c9:68:12:3b:5d:6b:46:8d:fb:92:2f:55:b4:ad:20:
62:4f:27:25:bb:c5:8f:39:44:6e:94:8d:ef:54:7e:
99:2f:78:a2:c0:f9:30:6f:a8:73:04:af:54:10:9c:
8d:41:6f:ed:91:d9:78:91:7b:33:58:e3:f9:16:14:
3d:88:de:35:e7:30:1e:2a:ef:5c:1f:3f:6f:9c:57:
52:96:9c:8d:8f:9b:41:68:eb:bb:3a:86:b1:e2:d7:
d0:3e:7b:6d:86:be:84:4b:d2:91:26:ce:d9:32:ec:
21:d0:08:67:74:4b:f9:64:11:fb:0d:ec:70:d6:1a:
45:68:d8:78:e3:8a:d5:93:7b:4a:ed:07:17:4e:dc:
fb:19:5c:e8:8a:72:a8:4c:3b:e5:8f:d3:c8:7c:2b:
03:f0:c1:ec:88:fc:4d:d6:e2:0f:bf:f6:17:ea:c8:
97:e4:f9:0d:2e:f3:f7:c5:3d:cb:4e:41:22:99:99:
ec:8d:b1:73:46:f1:ca:55:a2:d6:15:30:92:34:f8:
9a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:35:62:A6:E3:38:7A:73:AA:AD:5C:88:16:72:66:7D:6D:A8:4B:09
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d8467a7a-b9a6-4dfb-a340-15b02bf71308.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ba:84:93:b6:0f:34:dd:42:5e:07:ae:67:fe:e6:82:a1:2d:
f0:6a:3b:d5:c9:54:2c:9f:cb:e3:db:62:9f:46:cd:cf:a1:c6:
54:19:e8:ed:15:9e:39:98:b4:1c:02:db:84:4b:39:44:dc:9a:
ba:c1:de:f8:b6:88:60:be:f1:4e:a8:ad:d8:12:48:43:77:5f:
81:d6:b0:5c:44:d3:b8:09:e1:61:8d:f6:04:27:70:5a:c6:56:
18:00:1f:7d:7c:78:37:5d:30:3d:5c:29:12:15:b9:a3:94:a1:
19:f0:bf:b9:ac:a5:ef:c0:28:c6:23:48:14:64:ab:0d:32:d1:
6a:d6:9c:11:3b:6d:a2:ab:eb:fb:2c:ec:f1:b8:d7:1b:e8:ff:
50:80:b3:3c:6f:b5:d8:ac:d4:d3:40:91:8e:2c:37:f9:d0:cd:
bf:a5:8c:b5:86:bd:3d:e1:7a:18:6c:2f:3b:3a:5f:6b:10:23:
62:47:7c:33:59:18:cc:8a:02:bb:1f:fc:69:6b:4f:cf:d0:77:
c1:0b:54:7b:52:4f:80:97:1a:fc:2c:b0:f0:e0:92:11:d1:bd:
e9:e6:e4:3e:84:c1:26:3d:5c:76:25:8d:90:05:e0:35:ae:f8:
aa:19:56:6c:f5:33:41:b4:bb:7e:b5:1e:4d:d4:2b:3c:9f:44:
52:56:4d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:08:33 2025 by rpki-client