Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ed1ab41c-4a37-445d-8a63-fd5d06679c37.roa
File: ed1ab41c-4a37-445d-8a63-fd5d06679c37.roa (raw, json)
Hash identifier: mx7+rSeSOIa0V9hmyy5t6e54B8A620jbt6Cvlqoon5o=
Subject key identifier: 68:8D:04:80:31:50:8A:BA:3D:D1:4D:3D:61:00:CD:E7:C4:3D:A1:8E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5CFE5675BFC9C22DB082C8639163CD3C79B45213
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ed1ab41c-4a37-445d-8a63-fd5d06679c37.roa
Signing time: Mon 02 Jun 2025 21:18:22 +0000
ROA not before: Mon 02 Jun 2025 21:18:22 +0000
ROA not after: Mon 07 Jul 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jun 2025 21:38:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:fe:56:75:bf:c9:c2:2d:b0:82:c8:63:91:63:cd:3c:79:b4:52:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 2 21:18:22 2025 GMT
Not After : Jul 7 23:59:59 2025 GMT
Subject: serialNumber=0aa15fce567eb3f995f40a8c9c82185bd0b95616709dc132223ab89231c2abda, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:7a:23:4d:70:1c:27:82:f8:93:9a:d3:44:
e1:3f:df:e5:ab:28:9a:e4:d2:84:e5:02:f0:0e:d7:
e4:ae:e0:3f:1a:00:f6:9e:90:a6:d1:2c:4c:0a:ad:
35:1b:6e:d0:01:f9:73:4f:09:d2:08:01:18:32:13:
0a:8d:bf:71:1a:a9:8b:3e:ea:37:6e:64:11:22:78:
20:86:77:0c:3a:48:d0:14:09:97:4c:c6:a7:16:64:
ae:2b:4b:61:40:58:c8:98:ee:0e:42:80:d6:45:5b:
a7:f8:05:b8:88:e3:57:31:16:fd:6b:ab:cf:48:f7:
fd:39:db:05:ea:08:03:17:89:42:2a:3b:62:f4:98:
f1:42:57:ba:51:64:2e:ff:01:42:8e:8b:94:09:53:
28:66:3d:aa:e8:f9:96:63:b5:3e:84:06:bc:f5:b9:
c9:2c:e1:fc:ca:06:e0:8d:3e:58:4a:54:fd:8c:02:
6e:ee:06:ff:91:52:e6:24:64:41:8c:94:18:05:22:
cc:1b:5b:e5:bf:8a:fa:f7:1b:99:69:59:4b:91:2a:
23:76:48:6c:50:a9:9b:b7:2b:08:3d:35:ef:16:be:
eb:0e:48:ce:5a:84:78:6e:a7:a2:a8:d9:52:6e:7b:
0e:19:1d:76:91:5a:b1:91:53:ff:b4:d4:c4:8f:db:
e2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8D:04:80:31:50:8A:BA:3D:D1:4D:3D:61:00:CD:E7:C4:3D:A1:8E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ed1ab41c-4a37-445d-8a63-fd5d06679c37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:3b:58:92:c4:d3:3b:6e:25:b1:c5:69:ac:f2:41:e1:1c:09:
ed:24:78:ec:9e:44:b5:a2:39:16:9f:ca:f8:7e:83:88:9a:42:
a1:4e:f8:28:a8:c1:60:fb:6e:94:9d:aa:15:4d:93:60:74:76:
cd:8b:9b:6c:64:97:e9:ab:fb:98:87:7f:cf:9d:41:3e:0c:55:
90:83:9d:28:eb:92:4e:f5:25:fa:ff:c0:d0:ab:20:b7:fc:87:
bf:5d:8c:02:36:b3:cc:2c:aa:91:fa:f7:01:01:9b:15:25:84:
cc:04:9b:dc:3d:16:0e:1b:f4:9f:7a:39:43:56:19:2f:89:1f:
d0:90:aa:3e:b4:94:99:97:ef:74:1f:9a:48:c9:d7:5c:02:2d:
24:8b:a4:d1:61:52:b5:68:39:b1:a7:be:4c:38:0d:6b:9e:87:
57:76:86:15:2b:95:53:dc:38:54:99:4e:68:df:47:11:7b:72:
9a:36:ec:dc:00:27:3d:71:f4:99:bf:8a:10:eb:eb:67:29:b7:
8e:89:77:38:53:f6:7a:1a:84:d8:71:59:8f:61:23:4e:55:4b:
ea:ab:8c:e2:8d:39:d6:58:41:5e:e5:6d:0e:ce:a7:c4:7e:cd:
5a:21:71:05:f9:53:54:d4:f5:c1:40:ff:2a:6d:86:6b:75:24:
17:e2:99:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:41:49 2025 by rpki-client