Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f757eb6a-d1db-4791-81f1-60f0f6fdc7a9.roa
File: f757eb6a-d1db-4791-81f1-60f0f6fdc7a9.roa (raw, json)
Hash identifier: Sc3cKv9tZgVyeGIwK+793ijxFHkwy/I+bkfz0+6vi9s=
Subject key identifier: AD:9A:39:89:CF:A7:D3:7A:1A:84:93:F8:9E:99:7A:8B:17:0D:9B:6E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 087AF425672CD30246426E4796AB2EF8317D1EF2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f757eb6a-d1db-4791-81f1-60f0f6fdc7a9.roa
Signing time: Wed 02 Apr 2025 22:13:17 +0000
ROA not before: Wed 02 Apr 2025 22:13:17 +0000
ROA not after: Wed 07 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Apr 2025 22:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:7a:f4:25:67:2c:d3:02:46:42:6e:47:96:ab:2e:f8:31:7d:1e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 2 22:13:17 2025 GMT
Not After : May 7 23:59:59 2025 GMT
Subject: serialNumber=18313f4904283777972bef5914163c3ff355b3284727c212b33c62ef19f3dd13, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0f:99:79:b0:2c:0c:5c:0b:d7:90:14:ce:f7:
6b:9f:d1:d7:f3:39:69:2c:8e:21:50:b7:b4:2d:83:
18:a6:2c:32:53:ff:be:d6:81:a9:98:85:84:5c:2d:
22:b5:95:c0:8e:95:37:3a:ef:27:f8:05:9b:ac:8e:
6d:b3:c2:5a:18:03:69:e0:31:ef:83:f6:84:fb:8c:
06:b3:80:aa:56:2f:1a:e1:10:92:aa:ba:a4:53:4b:
f4:2a:e4:50:e0:c5:e2:87:63:ba:64:a7:32:db:b4:
e7:20:63:e2:56:72:d8:30:7e:42:73:e6:13:4e:c6:
84:c6:f8:b1:99:dd:0d:76:c6:54:5b:c6:76:79:a5:
cd:af:ba:39:c5:49:5e:c1:3b:71:9f:66:80:ee:89:
5b:34:bd:9a:c4:60:9d:6d:35:f9:49:df:a6:43:43:
71:74:ca:bb:3f:63:aa:3d:86:4c:db:70:08:ca:7b:
27:9e:41:60:65:76:30:03:f2:cc:a8:28:86:2a:4e:
f2:f7:08:95:d0:d8:75:b4:23:92:a2:f9:7a:9f:93:
16:80:46:94:30:79:0f:ff:83:c8:62:37:37:28:b2:
8c:8f:e2:fc:50:df:d3:95:94:e1:47:f9:1f:5e:4f:
71:61:3e:c8:c9:dd:75:99:3f:f4:4f:c9:87:3f:78:
31:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9A:39:89:CF:A7:D3:7A:1A:84:93:F8:9E:99:7A:8B:17:0D:9B:6E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f757eb6a-d1db-4791-81f1-60f0f6fdc7a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:87:d3:d7:3b:ea:b3:d2:93:ea:7d:40:5b:80:18:75:aa:57:
69:42:57:fd:af:65:c5:2c:d8:f4:74:4f:74:4b:86:0a:2c:09:
a9:0b:be:c5:42:99:46:76:b4:0f:07:cf:c0:ac:80:f2:e0:0e:
95:d6:bf:4e:a4:d2:2d:55:78:02:26:5f:8d:3d:cd:29:10:97:
d2:ad:0a:da:b1:ef:f7:d8:d3:de:da:a0:65:e9:bb:9f:ed:34:
df:66:fd:ee:98:f9:86:99:ad:03:d2:81:6e:be:a6:e1:6f:36:
23:a9:64:3d:24:6a:cd:a1:52:8c:38:aa:6f:a7:6a:fa:86:65:
a6:b3:70:79:fd:22:e9:b1:3d:3a:ad:52:33:0c:ee:81:e6:25:
4a:4b:cd:fe:00:9d:e8:07:22:8d:ca:0d:9d:3f:1d:6f:60:25:
79:c9:ea:de:74:4d:36:fe:01:52:99:cd:e1:de:d0:9c:95:3e:
63:55:38:ce:be:0c:87:9d:8c:b7:5e:e0:63:0f:cb:18:5a:d2:
46:61:b4:a4:cb:5c:2c:ed:ed:46:93:09:30:b9:05:0d:f4:36:
6d:d3:c0:9a:72:1c:c1:4f:ed:c9:54:aa:34:6c:4c:c4:2c:12:
44:68:c5:e0:b3:26:1d:90:dc:64:f2:3d:b4:68:4a:27:41:98:
dc:20:9f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:51:22 2025 by rpki-client