Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fd0d5b34-fa6f-4f16-a09b-89276f87a4ce.roa
File: fd0d5b34-fa6f-4f16-a09b-89276f87a4ce.roa (raw, json)
Hash identifier: nRWEROjWeDMAVDW8X+1jT8XiK0vobjOBs3c5gq0dsME=
Subject key identifier: 49:31:73:95:4F:5D:61:B2:2C:54:4C:1A:33:03:FD:30:16:E7:A0:EC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2EA181801FF380B5292603BC686D6BF8A0A554DB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fd0d5b34-fa6f-4f16-a09b-89276f87a4ce.roa
Signing time: Sat 19 Apr 2025 03:29:50 +0000
ROA not before: Sat 19 Apr 2025 03:29:50 +0000
ROA not after: Sat 24 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Apr 2025 03:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:a1:81:80:1f:f3:80:b5:29:26:03:bc:68:6d:6b:f8:a0:a5:54:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 19 03:29:50 2025 GMT
Not After : May 24 23:59:59 2025 GMT
Subject: serialNumber=3edc11c35629d92f05ee9c4a2a2b12b177773dd9a29c559c35b36e695c8930a1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fe:5b:df:a8:db:b1:c5:50:c3:45:38:d0:40:
3e:32:38:dd:ea:91:65:86:7e:04:04:42:8d:ed:ff:
2a:f0:58:d7:41:72:fa:98:ef:ae:fb:89:89:ca:0b:
32:a6:ae:be:c1:59:1b:1b:41:0c:8f:a0:68:eb:60:
0e:53:45:3d:ce:76:f9:f6:43:df:af:7b:91:c4:3d:
72:7a:af:00:37:50:8f:40:74:00:43:11:35:47:30:
93:69:f1:46:f3:fd:bd:71:f9:85:9a:05:20:92:2a:
32:d4:2f:34:39:34:2a:1a:29:06:c7:08:2d:0f:00:
70:d9:ec:5b:90:d4:f5:2f:b6:a4:8b:3d:8a:db:b1:
48:89:84:ee:ed:6f:bf:8c:68:a7:4d:20:fd:95:19:
85:1a:b9:6e:64:77:75:b5:b8:69:da:c1:87:49:ad:
3f:b1:82:bf:e0:8e:4b:ac:cd:bb:2c:68:e0:65:cc:
0f:20:7d:82:36:24:21:2a:60:fc:25:50:67:17:ef:
36:64:91:f1:5c:e1:a1:66:43:e2:84:ec:19:2d:1b:
a7:01:d8:66:0c:e1:7b:23:59:e6:23:92:f7:fc:59:
55:1c:a0:56:a1:9b:27:3a:11:e7:84:65:68:49:02:
ed:b3:fe:1b:07:8a:e7:55:a0:6b:50:a4:2d:60:6b:
8d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:31:73:95:4F:5D:61:B2:2C:54:4C:1A:33:03:FD:30:16:E7:A0:EC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fd0d5b34-fa6f-4f16-a09b-89276f87a4ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.121.0/24
Signature Algorithm: sha256WithRSAEncryption
61:d8:e8:83:5b:4d:59:a5:ed:b6:d4:7a:c4:43:cb:91:87:40:
96:94:9f:7e:7b:6f:bc:aa:d1:5c:b8:57:28:7e:a0:75:18:d3:
6e:c2:7b:e7:52:8a:24:d4:96:2c:2e:56:1b:29:1d:4d:e1:9b:
0f:7a:45:38:c0:dc:49:16:dd:3d:09:cd:31:ba:98:2a:dd:13:
34:f9:ca:43:c3:4d:a0:a6:a2:b7:48:f9:97:ba:17:50:1f:51:
d5:27:c6:14:59:1a:89:11:a2:12:c0:b5:d1:9d:94:9e:ab:9e:
c9:6c:a4:e2:74:54:50:a1:c3:a7:d7:d1:8d:f8:2a:a1:34:a0:
6f:31:5f:49:39:dd:4d:6d:ee:c4:18:00:e5:44:16:55:98:b5:
7b:c4:75:ee:8e:35:b1:ee:32:d3:36:36:92:f1:b9:70:ad:19:
d1:a3:cb:e3:9d:98:8e:78:1b:4c:85:dd:66:7b:b6:bf:0b:fb:
e5:c4:b5:73:bd:71:32:a5:f3:9c:00:ef:4a:f3:88:f0:09:80:
e1:15:17:2f:c6:f6:87:ed:1a:49:0a:5b:b4:b5:b3:6b:29:7c:
5f:63:24:76:91:4f:04:51:31:63:6c:18:6b:1f:f8:e1:5e:5b:
f5:8f:f0:ff:8b:fa:aa:0c:45:92:dc:4f:2f:79:1b:5c:03:df:
02:14:c2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:42:45 2025 by rpki-client