Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fab6700a-54a3-4b86-bae0-80139f761ca5.roa
File: fab6700a-54a3-4b86-bae0-80139f761ca5.roa (raw, json)
Hash identifier: X4f5J+ByvO2AxgoFUg2oO/oz+GwxUM0EzrL+3MZn8iE=
Subject key identifier: F4:11:D9:2A:1E:EE:0D:41:B0:B7:E9:27:F2:EC:FA:6C:12:D8:F9:BF
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0ED58836784A4D3AC4B08B6E852EF880CD6876AA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fab6700a-54a3-4b86-bae0-80139f761ca5.roa
Signing time: Sun 08 Jun 2025 10:13:19 +0000
ROA not before: Sun 08 Jun 2025 10:13:19 +0000
ROA not after: Sun 13 Jul 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Jun 2025 10:28:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:d5:88:36:78:4a:4d:3a:c4:b0:8b:6e:85:2e:f8:80:cd:68:76:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 8 10:13:19 2025 GMT
Not After : Jul 13 23:59:59 2025 GMT
Subject: serialNumber=b3cc0444b5044c0fadccb35599b5924bf49b8d34d941e4c9aefb53556acea548, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5c:67:c6:f2:9c:cd:b6:ae:09:ea:a3:36:d7:
f4:bf:06:05:e8:34:e6:0c:f3:4e:78:b0:04:69:2a:
f9:ad:00:83:f6:14:e0:f5:70:e9:e4:73:54:7b:0e:
18:e7:f3:58:e1:8c:7d:3f:25:bd:bf:77:c5:13:95:
27:21:bb:b8:1e:af:d0:70:7c:e8:e0:95:40:d4:72:
28:9c:80:9a:93:01:cd:b9:53:c0:02:11:44:e6:9c:
2d:22:e5:c6:1b:b2:45:03:76:49:a3:17:20:bc:74:
c8:23:50:5e:a3:00:a0:e8:de:bc:d6:4c:30:d3:f3:
40:d8:24:5a:e7:09:18:1c:6e:86:6d:18:63:dd:db:
55:50:94:3b:00:37:dc:75:f0:40:63:cd:10:3c:8c:
e2:4c:64:4c:21:2f:3b:6e:68:27:fc:35:ea:37:fd:
82:c9:9a:80:9a:d9:47:78:ed:f5:82:8f:01:3b:f1:
49:c6:af:c4:11:2e:1b:dc:b3:79:6d:f2:de:e2:63:
35:69:89:d3:10:1f:e1:00:61:17:bb:47:cb:f2:15:
cf:bc:cb:99:62:70:38:dd:97:ad:69:90:62:d0:02:
f8:a0:17:e8:d8:42:6c:87:14:3d:ee:83:2e:ba:bd:
b0:ad:02:d1:db:01:7e:74:a6:41:e7:a7:d2:86:49:
b3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:11:D9:2A:1E:EE:0D:41:B0:B7:E9:27:F2:EC:FA:6C:12:D8:F9:BF
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fab6700a-54a3-4b86-bae0-80139f761ca5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a6:f6:bb:45:7f:39:b0:f0:67:20:c2:54:d0:3c:49:1c:79:
87:94:5c:19:bb:bc:26:2e:53:90:8c:75:08:5b:da:d0:8a:fc:
0b:c5:0f:19:dc:32:50:7e:a7:2f:1d:09:bf:5e:4a:48:97:49:
72:59:99:d5:2e:81:a5:ff:ee:d6:98:64:5f:20:d9:a4:03:5e:
9d:0d:d2:26:8b:28:7b:bd:68:50:a9:5f:39:d2:c6:dc:89:17:
39:5e:e6:1c:64:01:ea:5b:b3:c4:c9:37:4c:c5:6f:c3:b1:d4:
b9:4c:9c:4d:e8:2c:31:83:a7:a9:02:52:d0:bc:32:cf:71:82:
b2:92:dc:a6:cd:72:40:91:b5:c3:1d:56:64:cb:b7:af:d0:90:
51:47:d0:2c:f0:9a:df:8e:bd:2d:f6:4c:2e:96:f8:9b:0d:d2:
5c:ff:de:e7:96:47:f6:a1:93:3e:4d:c9:59:ba:98:19:64:bd:
f6:40:f9:78:b1:4f:45:3f:4d:60:3d:6b:28:aa:eb:ea:0d:e8:
aa:d0:10:73:5f:33:f8:e9:86:d2:41:82:3d:bb:f9:e9:c8:31:
36:80:b5:fc:d1:8b:e7:38:d9:f4:23:24:9a:0f:b4:0a:1c:13:
c9:11:76:f7:7e:6d:72:3c:3b:99:1b:69:c6:48:ac:69:0c:8a:
eb:3d:f1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:14:44 2025 by rpki-client