Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e1d6f611-f39a-4889-82fb-619a791e80f4.roa
File: e1d6f611-f39a-4889-82fb-619a791e80f4.roa (raw, json)
Hash identifier: mSxeWkBXO8t/WsXMC+xq4p+oQ4lmiih6jXnTwhpfkU0=
Subject key identifier: 88:97:43:33:28:2B:A7:D2:B2:41:F9:A5:22:F8:D6:B2:DB:80:A4:2F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 11BC828254BE5A503A4495379C38925576115972
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e1d6f611-f39a-4889-82fb-619a791e80f4.roa
Signing time: Mon 31 Mar 2025 08:38:18 +0000
ROA not before: Mon 31 Mar 2025 08:38:18 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 08:58:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:bc:82:82:54:be:5a:50:3a:44:95:37:9c:38:92:55:76:11:59:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 31 08:38:18 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=2fa59fa3159441286fc1d3c81df13bbbead5d83499adc67e9f75e2b7507874f9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:42:1f:d1:6b:e7:48:90:5c:32:ca:b4:b8:
4e:ec:1c:44:b5:c6:a3:15:2a:23:59:eb:1a:ba:fc:
b4:97:bd:26:9a:5d:b4:cc:02:f3:d2:22:14:04:9c:
b2:fd:80:b3:d7:e0:6b:b7:c4:a2:14:f3:88:86:5b:
09:52:5b:98:c1:62:7e:dd:13:b7:ba:f4:b5:e6:f1:
02:30:1b:68:ce:0a:b3:72:7c:1a:13:8e:5b:c0:00:
f6:27:92:ea:8f:1c:0c:58:ec:d5:5e:f6:ad:c3:f2:
29:0c:57:84:75:95:ff:eb:c0:c3:d1:fe:2a:22:5b:
b9:e6:98:45:3b:7b:41:23:9f:ca:34:f3:8a:81:e4:
28:2a:4e:20:a1:a7:8c:83:5b:fa:d0:a3:88:dc:88:
da:1c:6a:1c:47:52:21:74:fb:60:8a:e6:00:68:bc:
5b:41:29:c3:bf:8f:c4:40:40:08:ff:07:58:19:b5:
6e:2a:b0:92:24:b1:b0:71:ce:51:14:77:40:e4:06:
ec:dc:a4:e2:cf:c5:35:f3:a6:88:18:c7:a2:3d:ee:
4d:c6:49:87:d9:4a:ca:e8:d1:02:04:05:ba:37:9a:
f7:35:5d:86:d6:a2:95:88:a8:04:66:dd:0f:9a:5c:
e0:20:b3:a5:aa:8a:ad:2e:3c:e7:4b:b5:29:38:0b:
6e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:97:43:33:28:2B:A7:D2:B2:41:F9:A5:22:F8:D6:B2:DB:80:A4:2F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e1d6f611-f39a-4889-82fb-619a791e80f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d7:2e:69:6b:fa:44:13:b6:c2:65:4c:ae:09:a0:a2:b8:9f:
42:0a:77:c3:89:c0:5b:a7:6b:38:84:86:47:2c:c9:78:ca:a9:
80:64:bf:fc:1e:b3:c9:27:c3:43:c5:8b:d4:f4:17:aa:fd:3f:
33:00:94:25:e8:33:aa:e4:41:f5:11:5e:d0:28:db:06:d2:78:
b8:91:b4:ae:d9:14:ac:2b:6c:e8:d7:13:39:29:91:41:17:13:
f4:37:d5:77:55:17:ae:2c:91:a4:07:07:b7:e8:cd:82:89:56:
00:12:b0:ea:33:32:64:5c:61:be:11:ef:cf:04:d0:b7:3d:f3:
52:97:c5:5c:e0:2a:8d:df:29:90:be:32:a4:48:fc:25:16:67:
d7:13:2d:98:6f:52:27:25:83:a5:8f:cd:b2:d5:16:b3:5e:54:
9d:1c:cf:9f:36:49:d3:e2:a3:a5:7d:b9:67:e0:c3:e8:af:8f:
f9:4d:5d:2b:f2:2f:41:01:2d:5b:aa:0e:e4:32:89:96:92:a5:
bb:e7:b4:c6:8b:82:d4:51:fd:f1:d7:2a:e1:f2:46:4f:86:9c:
d4:b7:2c:f0:b9:a0:39:af:8b:15:e2:5e:9e:26:99:75:7c:b0:
c1:80:15:45:a5:36:b1:ce:e5:ce:ba:d4:0b:b5:e4:80:c1:45:
ab:f9:90:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:42:09 2025 by rpki-client