Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fbf076be-a4cc-473a-942a-ea6497c26b6a.roa
File: fbf076be-a4cc-473a-942a-ea6497c26b6a.roa (raw, json)
Hash identifier: 2FxaocayJu8sy3j70VFSlGlYeCR44X8gOI0NNZwSNJ4=
Subject key identifier: 60:3A:52:ED:25:27:2F:98:8F:C3:BE:E5:F6:44:22:54:E8:1D:8C:35
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5244FD250AC6A083082EA2987762AD9633E7302A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fbf076be-a4cc-473a-942a-ea6497c26b6a.roa
Signing time: Wed 09 Apr 2025 19:43:19 +0000
ROA not before: Wed 09 Apr 2025 19:43:19 +0000
ROA not after: Wed 14 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Apr 2025 20:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:44:fd:25:0a:c6:a0:83:08:2e:a2:98:77:62:ad:96:33:e7:30:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 9 19:43:19 2025 GMT
Not After : May 14 23:59:59 2025 GMT
Subject: serialNumber=22ac7babbb5985c52459c3b8c3a192fa591a00a56192d6301e3e7e40a73b38a5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:f5:2d:c6:97:7f:5a:4b:fa:78:e9:2e:36:
ce:33:32:55:53:0f:5e:55:d1:b2:6d:f3:ec:1a:e2:
4a:6b:2b:96:e6:10:02:40:5c:40:b6:fd:71:ba:29:
7f:00:50:bb:b1:1c:71:b0:09:cc:a6:ea:2d:f0:9b:
e7:a8:98:e9:3d:75:5d:f6:38:21:db:c4:b4:09:88:
8a:0e:c0:ee:de:71:9d:8f:b5:13:2e:8c:40:26:4e:
b0:c2:f3:21:bf:ab:fa:3d:95:9d:fa:61:74:f1:cf:
84:0a:0f:6e:92:9d:20:f9:93:2a:b1:5b:c7:ab:bb:
d5:31:b5:70:39:54:ae:0d:ba:9e:bb:89:1e:6b:46:
35:8d:bb:c5:7a:01:ed:68:d1:e4:fd:ac:5a:b6:c9:
70:b8:97:9b:d3:0e:a8:c1:1f:07:d7:b5:8e:aa:ab:
bf:ad:65:b9:f7:15:24:72:23:da:a6:3f:85:e4:10:
a4:c0:a0:d1:90:15:5d:e6:ce:a6:4c:19:a8:83:5a:
5c:ed:1c:44:4f:23:35:63:3d:85:42:08:b8:37:f1:
4d:af:95:a4:36:dc:01:a6:0e:f3:6f:a1:9d:23:4a:
ea:95:aa:a6:91:65:6e:f6:c5:90:b9:ab:32:60:b4:
45:e4:b8:66:cd:0e:30:c6:07:2f:ac:32:b1:49:50:
2a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3A:52:ED:25:27:2F:98:8F:C3:BE:E5:F6:44:22:54:E8:1D:8C:35
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fbf076be-a4cc-473a-942a-ea6497c26b6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
18:e7:42:ea:54:f4:0d:2e:63:00:33:a1:5d:76:81:9b:df:76:
bc:d1:46:35:63:d6:14:32:69:27:88:43:b9:f6:62:23:0a:09:
c7:ed:6e:3b:4f:01:de:6a:89:ba:f2:5b:9d:64:e8:f3:9d:1a:
51:99:57:bd:0f:41:aa:5d:92:af:78:c5:f1:a4:2d:7e:61:18:
e1:1e:f5:2e:68:27:de:57:70:82:7c:16:b8:9b:e7:b3:9a:45:
35:27:27:fd:aa:a2:64:81:b4:ae:62:64:dc:5a:41:a6:6a:2f:
aa:c1:7d:6e:8d:65:46:a0:46:c6:5f:98:82:ed:82:4f:72:f0:
c7:87:73:f7:70:27:cb:8e:dc:e9:a6:55:a5:42:a9:ba:13:8f:
e7:59:99:5c:79:08:c5:c3:27:08:dd:e2:d5:03:0a:8e:9f:7b:
13:76:06:36:69:7c:92:fd:5a:7b:08:ed:ab:f5:d8:ff:65:d3:
2f:43:75:54:41:02:91:fb:85:b9:c3:c6:d2:63:78:07:96:9b:
b0:1e:e6:79:09:97:d1:cd:63:ac:35:5d:1c:49:07:e0:9b:fd:
52:9b:be:0f:b9:2b:0c:38:70:c3:91:6d:b6:18:8d:11:8b:b6:
40:a8:52:ae:24:b8:e7:94:e4:97:f5:86:2a:5a:69:35:62:a7:
34:53:5a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:43:42 2025 by rpki-client