Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f7a85fc1-2fbd-4e96-9f7d-4a90accb7a63.roa
File: f7a85fc1-2fbd-4e96-9f7d-4a90accb7a63.roa (raw, json)
Hash identifier: DoCLf0M5+L8e38KjCaLyywdRUauk243h8cunB7xEhSE=
Subject key identifier: 04:E5:46:0C:F1:C3:D0:72:A2:D5:2F:FB:63:91:00:CD:ED:B5:A2:23
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 665FD04891D2817E8C3658D24ACDF56458B6AB48
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f7a85fc1-2fbd-4e96-9f7d-4a90accb7a63.roa
Signing time: Fri 06 Jun 2025 08:33:19 +0000
ROA not before: Fri 06 Jun 2025 08:33:19 +0000
ROA not after: Fri 11 Jul 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jun 2025 08:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:5f:d0:48:91:d2:81:7e:8c:36:58:d2:4a:cd:f5:64:58:b6:ab:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 6 08:33:19 2025 GMT
Not After : Jul 11 23:59:59 2025 GMT
Subject: serialNumber=b4e3944b453ab1c3dff5035afd076b05f5c671434c4cf93d1e5357a6449d3c73, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:1e:13:74:7a:7a:86:f3:7f:54:d4:36:e1:
0f:3c:14:ac:57:a9:00:0d:94:fc:32:8c:b3:50:06:
e9:89:1a:de:10:a1:c7:2c:da:68:7f:c8:3c:6d:bf:
cf:eb:f0:c7:c6:82:f1:a7:75:50:52:b8:01:a2:d2:
a2:16:80:7c:aa:96:5a:fc:f6:63:eb:af:32:d3:1a:
69:bf:c2:f3:1f:e8:19:64:b3:45:97:97:bd:2b:45:
a9:9c:fc:11:3b:d5:4e:41:0b:47:12:d6:9a:5b:2f:
27:9c:2b:2e:75:ab:43:9b:71:9a:0c:77:d9:8a:c7:
cf:27:d8:e3:d2:61:39:b5:f9:81:09:81:84:a4:d1:
c0:12:55:13:82:1f:51:01:eb:1a:7c:cc:a9:47:50:
13:d1:7b:bd:ec:d1:7b:cd:7b:72:d2:8d:77:36:86:
52:d1:26:dd:6b:35:f0:cc:b6:29:c9:88:11:f7:52:
e6:e4:aa:7b:1f:d4:f3:c7:72:63:b0:b2:1d:e8:7a:
df:df:f2:4e:9f:13:54:42:33:7e:9c:6f:3d:11:bc:
60:e9:ab:c2:8c:e9:68:ce:7a:17:f4:ed:79:22:b7:
8a:df:ab:aa:8f:07:50:b7:48:14:25:26:0e:3e:00:
04:66:92:41:10:d3:6b:ff:0d:59:6f:e6:7c:88:18:
ff:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E5:46:0C:F1:C3:D0:72:A2:D5:2F:FB:63:91:00:CD:ED:B5:A2:23
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f7a85fc1-2fbd-4e96-9f7d-4a90accb7a63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
32:70:c0:2f:47:04:f7:d3:17:4e:dd:df:f7:06:09:cd:70:81:
f1:47:3d:86:11:a4:1a:e1:e1:12:b4:c8:33:73:2f:48:04:6e:
0b:ad:4c:2b:a3:de:89:b4:cc:c0:4d:f8:b3:a5:6c:e7:32:4a:
a5:f5:0a:a0:5f:fa:58:aa:a4:37:38:e2:a6:65:38:70:65:94:
d9:9e:48:45:63:78:f3:54:0f:ad:57:69:4a:70:2a:ea:fd:ea:
ba:f7:f8:b6:09:a9:1c:bf:e6:7d:09:06:b1:24:34:3d:d0:d0:
74:47:8e:c3:5f:41:55:df:0f:9d:c5:9e:01:c1:50:e0:e8:69:
c7:3a:ec:f0:91:35:a7:6d:41:8b:66:39:72:58:33:11:9c:98:
e5:2a:90:e0:e4:5a:a3:01:71:1d:06:f1:ab:29:5f:20:de:71:
7c:ae:3f:a1:a6:b0:14:fd:33:0e:f8:12:c5:df:3a:02:76:24:
4e:b5:9b:19:5e:2b:43:fb:42:23:19:80:d9:8f:f6:ac:8a:3d:
23:76:83:c9:66:ad:ae:dd:7f:3f:10:21:e5:d4:05:c5:7e:83:
a2:6a:2c:3f:05:80:f8:51:80:d1:74:f6:03:fa:5f:42:60:ab:
20:af:4f:20:b9:d7:18:66:ac:bb:98:b9:9c:b0:9f:a5:64:ab:
77:4f:63:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:48:53 2025 by rpki-client