Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ea553e54-e169-4aec-83e1-384e4ca8be09.roa
File: ea553e54-e169-4aec-83e1-384e4ca8be09.roa (raw, json)
Hash identifier: 7g0a06jvH0NGFAwCHft8Tv/qJbVpcbyrKj/SFYk7yQY=
Subject key identifier: 5D:13:DE:CA:EB:47:E3:86:F0:45:6A:12:91:F4:88:DA:43:41:9D:BD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 55BCA8A7BFFB4A6C089D3C31AC0C7177D8CA8D70
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ea553e54-e169-4aec-83e1-384e4ca8be09.roa
Signing time: Sat 19 Apr 2025 16:08:19 +0000
ROA not before: Sat 19 Apr 2025 16:08:19 +0000
ROA not after: Sat 24 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Apr 2025 16:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:bc:a8:a7:bf:fb:4a:6c:08:9d:3c:31:ac:0c:71:77:d8:ca:8d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 19 16:08:19 2025 GMT
Not After : May 24 23:59:59 2025 GMT
Subject: serialNumber=6845ec6739ca36c5bb12da62436ae649b7d4a8becd71859fcaf081e1b1ad5975, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:fa:3c:1e:a5:80:b0:36:1e:ea:c2:92:7a:
52:b1:f0:69:2d:1e:ff:0e:c8:60:90:a2:68:fc:64:
02:54:27:fb:00:9a:97:f3:21:37:85:bb:b3:93:7d:
3a:62:0e:d0:53:bb:15:ba:78:1d:75:fe:c2:ea:70:
82:58:fb:eb:c9:51:28:3e:47:06:02:bb:dd:0f:2a:
5c:2a:a3:66:ec:d3:36:9b:31:b9:f4:78:51:d4:12:
36:e5:40:5f:24:dc:07:b1:8b:e0:ac:6f:55:0f:11:
c4:c8:46:52:eb:a1:ac:e2:66:35:40:1b:8b:6d:dd:
76:9f:60:f1:e8:47:b1:cb:c0:60:17:79:21:53:bc:
28:ef:fa:ea:81:d1:6d:73:a8:41:ff:df:fd:de:4d:
7b:b0:25:67:cf:41:ca:48:29:35:e0:6f:36:40:2b:
c9:7a:42:39:5d:28:90:2f:33:76:0d:c7:17:60:1e:
d9:b9:b9:98:0a:2d:c5:2e:af:31:1c:94:92:13:98:
de:4f:f7:7b:b6:ce:80:c6:f8:6f:57:aa:50:bc:f9:
60:5a:f5:d3:aa:78:b5:d8:2b:65:3b:6d:10:7d:44:
17:9d:21:d9:b4:6c:36:4f:42:b8:01:a4:19:17:51:
6e:43:b0:8c:d3:5d:a5:3f:ed:bd:13:8e:ac:d2:17:
c2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:13:DE:CA:EB:47:E3:86:F0:45:6A:12:91:F4:88:DA:43:41:9D:BD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ea553e54-e169-4aec-83e1-384e4ca8be09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
13:89:f7:62:82:fa:bc:9e:22:3c:bd:56:1b:53:80:0f:7d:57:
94:1b:10:a6:20:be:cf:41:d3:b7:71:7a:9b:d4:7d:5e:d1:d2:
56:00:77:ba:e3:7c:9d:7d:ea:6b:c7:bb:67:4a:f1:fd:db:48:
41:ed:cc:04:76:2b:e1:5c:e6:e6:37:7e:f0:ab:74:84:ca:4a:
26:10:0b:0b:89:74:25:37:6a:d3:10:9c:e3:a2:08:cc:88:db:
0c:d4:76:09:4a:ac:fe:39:c5:f0:f9:32:0d:e3:1d:6b:6c:0b:
7c:34:a9:48:8c:10:ef:d6:9e:c1:9a:07:52:42:03:1f:f3:01:
f8:7a:fe:4d:dd:a8:5a:c6:5e:ee:74:ce:dc:6b:93:34:08:03:
d2:ec:10:89:42:02:fe:13:fa:e4:95:c7:12:3d:2a:bb:ce:73:
2b:fe:16:a6:f2:6a:b6:13:ca:24:a8:0c:3d:17:e0:13:19:6a:
c5:9b:47:a8:fa:ba:49:ac:7a:00:cf:f6:ec:be:43:03:55:c8:
3b:6d:ca:6d:f1:55:4b:b6:96:a3:7e:ea:a0:57:17:06:15:ce:
d7:60:23:a9:4c:7a:6f:12:e2:ef:6c:93:f8:81:5e:30:30:5a:
89:91:ab:ff:83:49:f5:97:22:65:89:50:85:40:a8:db:ad:03:
09:be:ff:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:22:56 2025 by rpki-client