Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e8568950-e2e3-4a92-bfb4-3dd19159ee8f.roa
File: e8568950-e2e3-4a92-bfb4-3dd19159ee8f.roa (raw, json)
Hash identifier: SoL9H3NfnVAClpv8Tj4PTZb0a17sCieX2ygI5+s6vuI=
Subject key identifier: CA:34:B4:C6:EF:8A:8F:09:96:61:E2:36:DD:EC:DC:27:EF:75:7F:2A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 75A306AD144089B6DC24B97A9CAFDDC9C00F63FF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e8568950-e2e3-4a92-bfb4-3dd19159ee8f.roa
Signing time: Sun 01 Jun 2025 19:18:19 +0000
ROA not before: Sun 01 Jun 2025 19:18:19 +0000
ROA not after: Sun 06 Jul 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Jun 2025 19:38:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:a3:06:ad:14:40:89:b6:dc:24:b9:7a:9c:af:dd:c9:c0:0f:63:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 1 19:18:19 2025 GMT
Not After : Jul 6 23:59:59 2025 GMT
Subject: serialNumber=5e6b3061545842e49ac479a5e99b89103d824c112062b7b4e0c5b07d5e8eaeaa, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:68:27:dc:aa:2a:cf:2c:57:2e:3c:df:d3:
3e:29:69:6f:a7:43:5c:f1:1a:d6:2d:b8:82:72:15:
26:d1:b2:73:6c:e9:50:d0:27:1f:e1:e9:26:f7:3c:
9c:d2:4b:9c:7a:a9:d2:b2:b6:e2:02:fd:b4:77:ee:
f7:d4:7e:8c:70:8c:f1:16:a1:08:f9:ba:aa:f3:ac:
3e:03:64:98:a4:e9:43:1b:e0:32:a3:e2:79:e4:5c:
98:bf:cb:39:f3:f0:ed:2d:32:48:73:13:21:4a:72:
ca:f0:77:de:93:94:44:46:c2:61:20:dc:76:6d:1c:
ca:5e:a0:68:c7:3f:71:53:a6:d1:65:b9:42:94:92:
a2:3b:a4:bb:80:68:8d:98:7b:a1:86:7f:f9:3d:3f:
ac:1c:b2:81:cf:81:56:1d:b7:bf:ee:53:53:ab:98:
0f:d7:eb:d1:cf:7f:19:76:68:4a:52:e5:eb:1a:79:
f7:f4:4a:23:b3:9e:4e:c9:1f:2a:86:78:c8:1e:8f:
6d:46:da:fa:d0:51:ec:f6:f8:e3:3b:ef:b9:60:fa:
42:e3:b1:3b:f6:82:10:19:e9:dd:22:0d:1b:a9:22:
91:be:9a:1f:0f:96:7d:cd:94:29:6b:3c:77:33:93:
a2:d6:48:df:ef:2c:b6:20:72:04:82:a8:fc:c1:73:
5a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:34:B4:C6:EF:8A:8F:09:96:61:E2:36:DD:EC:DC:27:EF:75:7F:2A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e8568950-e2e3-4a92-bfb4-3dd19159ee8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:bc:61:6f:1e:df:85:36:22:ee:d7:61:f3:b4:cd:93:a7:4a:
e9:5c:7f:bb:1b:05:f6:0e:24:5e:83:c3:10:ba:7b:0c:ef:e6:
db:57:d8:a4:b6:87:6c:41:d0:12:09:1f:92:dd:04:6e:31:c3:
06:2d:19:77:cd:7a:bd:c0:1a:a5:90:7b:d3:0c:42:62:bf:90:
ae:05:79:08:c9:e3:70:09:aa:5e:c6:91:36:f2:02:99:35:f1:
9e:2d:61:d1:ba:6c:8c:69:38:95:f3:cb:47:c7:8f:37:ca:b4:
3e:e6:fa:c6:c0:2b:4c:39:c5:d0:a8:0f:37:8f:f2:4c:bd:f2:
b2:a7:8b:5e:c9:14:75:f2:32:de:9a:0a:de:73:9e:17:8d:9b:
4b:18:98:ea:db:95:2e:31:c0:72:c7:65:10:4e:86:7c:77:aa:
9b:74:fa:a7:35:43:08:b3:fa:1c:7c:92:0e:0e:cf:c4:c6:f6:
9f:0e:ea:22:5b:af:f7:43:01:0c:a0:21:73:fb:3b:e0:85:01:
01:a5:2d:a9:a0:92:c6:a0:5f:da:4a:dd:08:f5:af:de:a9:42:
4c:3d:4c:a5:80:b7:63:50:6d:72:91:6f:50:b5:a8:b4:87:e1:
44:44:d9:74:a9:e7:94:4a:12:86:ba:a4:6a:61:e2:1a:c3:87:
bc:da:39:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:03:33 2025 by rpki-client