Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dfd6dd56-b170-4aa3-8f18-aec58d71498a.roa
File: dfd6dd56-b170-4aa3-8f18-aec58d71498a.roa (raw, json)
Hash identifier: RAVLXhLonNY8anZgy/kOSQ3LlusKGHzMOR2C2LgR1hQ=
Subject key identifier: 81:E1:CC:31:32:26:46:4F:47:1D:BF:4E:2F:F0:3C:3A:F0:9C:24:A9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 67010DBBDA28941071DC42778EC3001EA01261C5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dfd6dd56-b170-4aa3-8f18-aec58d71498a.roa
Signing time: Sat 24 May 2025 02:28:21 +0000
ROA not before: Sat 24 May 2025 02:28:21 +0000
ROA not after: Sat 28 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 May 2025 02:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:01:0d:bb:da:28:94:10:71:dc:42:77:8e:c3:00:1e:a0:12:61:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 24 02:28:21 2025 GMT
Not After : Jun 28 23:59:59 2025 GMT
Subject: serialNumber=eee7ad5c85d15dcd4a65136b885211acf794882c57d6f674ae78f3e580713b3f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ac:3c:72:14:87:db:e3:05:04:66:65:37:02:
68:89:48:38:44:89:a9:d5:5f:4e:f0:56:b1:7e:76:
06:5e:eb:7e:e0:81:a0:61:60:6a:7e:16:19:20:f2:
9a:fa:29:27:2d:ab:12:26:ab:78:ac:85:e8:4b:99:
ba:60:bb:53:af:b9:6b:db:6a:df:d5:26:3c:5f:9e:
08:ab:5f:f1:44:63:9c:3c:a0:f3:cd:ca:6d:66:b8:
60:b4:70:d1:df:c3:e6:4d:4c:6d:23:6f:5b:64:9f:
6f:ba:c1:ab:29:6b:74:cc:78:b1:30:9c:a2:a9:a5:
19:ef:26:5d:78:23:4d:a6:2f:91:64:73:12:5a:24:
cf:2a:75:2b:82:0c:60:29:78:21:8d:8b:cb:6f:c2:
e6:60:50:a9:1e:05:06:62:ca:0e:d5:8e:1d:c1:05:
42:d0:c8:e1:4e:7f:df:76:e3:4d:a7:57:82:40:b2:
b1:4a:20:b6:f5:d4:61:c4:88:52:c2:5e:ee:f0:b6:
6a:53:f7:3b:d8:db:80:3a:1d:9c:dc:38:1f:a7:b5:
2d:29:db:a5:4f:d2:e6:9e:7b:a5:b4:72:a1:1f:0f:
29:48:59:2a:34:00:09:f0:fd:c7:65:03:41:c1:9d:
bb:e5:1e:72:9c:59:b8:42:96:a2:9d:bb:d2:ee:68:
25:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E1:CC:31:32:26:46:4F:47:1D:BF:4E:2F:F0:3C:3A:F0:9C:24:A9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dfd6dd56-b170-4aa3-8f18-aec58d71498a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
14:c4:13:e2:ac:70:89:7e:56:f7:f6:a3:cf:1b:67:a1:70:3e:
7b:59:d6:e0:9c:f5:a2:c1:74:a6:89:66:e2:69:f8:e6:50:41:
15:6c:dc:30:74:b1:c6:a4:60:70:84:3d:93:08:ae:61:84:51:
4f:24:a9:bd:2f:42:cc:95:cd:a8:01:6d:7c:f8:fb:73:b9:d8:
91:c2:e8:6e:74:e0:3d:29:59:a5:54:3f:4d:c8:d1:57:2d:a7:
b3:55:cf:3c:77:e4:5c:01:10:13:0d:65:5f:c7:0a:17:6e:07:
69:b7:f0:b4:2c:16:a2:a5:52:c2:21:71:42:aa:ad:b0:12:52:
71:3e:27:fa:fe:5a:95:d8:f6:0e:9e:80:63:f9:70:fb:1f:87:
a1:9c:1d:16:c7:49:b5:16:d5:8e:9d:3a:fb:1c:7b:b8:55:bc:
77:ff:b8:03:e3:c6:13:d2:74:90:b4:68:3b:a9:a7:35:a4:97:
47:f0:0d:91:06:47:df:ef:68:38:cc:57:e7:b0:c0:6f:8d:9c:
4c:c1:be:3c:b5:24:fb:87:2c:98:99:40:d5:ba:38:41:f5:b1:
08:6f:ce:bb:c6:2f:fd:51:c4:f2:e0:35:35:b8:51:1d:97:9d:
73:b0:5c:74:f8:54:f0:d5:1b:c1:f1:bd:6b:ad:94:81:4a:b9:
f1:4a:81:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:50:46 2025 by rpki-client