Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ded9319b-5648-4321-9890-aa213c6ff1e3.roa
File: ded9319b-5648-4321-9890-aa213c6ff1e3.roa (raw, json)
Hash identifier: irzWu8bOjEBE5LABSkoeWGXmhCYEDhl6SqANA+NA1VM=
Subject key identifier: 7E:78:7B:72:20:ED:F3:66:7B:2F:6A:9A:A1:EB:62:88:33:FA:1F:7C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 74519DDD4141559093FF7BE60B860E8BAB575C92
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ded9319b-5648-4321-9890-aa213c6ff1e3.roa
Signing time: Tue 03 Jun 2025 17:38:22 +0000
ROA not before: Tue 03 Jun 2025 17:38:22 +0000
ROA not after: Tue 08 Jul 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 17:58:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:51:9d:dd:41:41:55:90:93:ff:7b:e6:0b:86:0e:8b:ab:57:5c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 3 17:38:22 2025 GMT
Not After : Jul 8 23:59:59 2025 GMT
Subject: serialNumber=b4beb69d52c5ae7303bf22049bc0473db2bb152672c0359440751c6b027f5cc5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6f:fc:fd:00:29:8e:46:80:38:61:ad:65:b4:
b9:ca:a7:62:da:fa:1e:39:47:f0:0d:ac:56:22:67:
42:5a:47:f5:ee:43:52:66:83:a7:2f:b4:fe:c1:24:
a1:1b:b4:b7:ae:9e:42:21:ef:91:b5:0d:b3:42:a3:
ab:d3:e3:c7:a3:4b:24:3c:5e:fa:3f:46:73:c6:77:
0e:d3:23:80:5b:38:d1:2d:d5:2d:bf:c6:e1:bc:ad:
1e:d8:4c:d9:ee:1d:9f:6b:11:92:fc:e0:90:d7:b2:
3e:5c:50:94:6c:07:d9:d2:15:44:4b:30:c4:a9:ce:
81:26:42:f6:fb:05:95:8f:7a:ea:aa:a0:86:ea:95:
9d:97:99:d4:2a:82:8d:86:15:01:d8:ba:68:d2:64:
cb:db:61:a9:9e:e5:ee:c5:d0:c9:b5:b5:6e:22:80:
42:25:6f:af:78:6d:7c:a3:45:f8:49:1e:34:83:e2:
99:c5:b9:62:f8:e3:1e:be:d0:db:a1:3c:9d:82:70:
cb:09:b3:25:91:3a:e3:82:73:a5:f8:6b:2e:d7:fe:
2c:1d:23:01:2d:3c:00:75:39:fd:b1:a8:8e:0b:d1:
b0:78:17:21:fd:50:84:fb:89:98:9b:ac:61:a2:6e:
e6:84:07:01:22:28:c7:19:7a:77:60:99:20:39:f6:
0c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:78:7B:72:20:ED:F3:66:7B:2F:6A:9A:A1:EB:62:88:33:FA:1F:7C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ded9319b-5648-4321-9890-aa213c6ff1e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:4a:a2:f0:c5:c9:33:b3:3f:5c:77:d0:34:31:69:d0:3a:a0:
60:fe:4a:94:f9:b3:44:1d:55:9c:bc:20:03:05:d8:10:58:2f:
60:0e:38:0f:fb:c0:90:f7:64:a5:5a:84:e7:d1:86:db:fc:49:
b9:13:b0:bd:9f:20:6d:70:01:9d:19:ce:a8:1b:b7:b9:2c:5a:
2e:99:ce:c4:26:d3:11:2b:eb:d2:be:b4:a1:b6:64:10:c8:6a:
93:fc:8f:dc:26:8f:17:27:2f:09:4c:53:39:12:31:88:18:ce:
5b:a7:19:f7:38:48:7e:c0:4b:a8:04:94:2c:3e:60:27:98:23:
c7:f0:86:33:65:9a:c5:9f:f4:66:d7:3d:b8:17:3b:a8:9c:a7:
ef:12:57:e8:85:e5:f2:1b:b6:22:b7:3f:e3:9c:47:70:fd:36:
c5:e6:a8:05:46:b5:78:22:8f:f6:fd:34:ce:19:cf:73:84:9b:
68:52:ad:8d:07:30:d2:dd:e3:ad:98:e4:b6:29:aa:b0:ff:5c:
d6:15:99:ad:2d:1c:8e:44:3a:af:5a:a1:7b:5c:27:79:ce:5a:
5e:11:1e:09:22:42:88:41:c0:51:60:cc:b0:7f:46:4d:b5:21:
dd:20:91:30:0a:ca:b8:79:38:54:d7:ee:2c:c1:75:e9:66:d6:
ac:11:b1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:03:20 2025 by rpki-client