Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/06745c0d-2955-4133-84d0-15fa5f4dcab7.roa
File: 06745c0d-2955-4133-84d0-15fa5f4dcab7.roa (raw, json)
Hash identifier: jbuf5zopFikNW8nkRK57tNJNYDsF3EzyJAveT8XGmhY=
Subject key identifier: 71:42:E5:62:F3:98:0E:A7:DB:8F:9B:AB:81:BD:25:06:C4:09:E6:05
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4EDA61096DFA1DF11E1CCFA7DAEFA3F176E9BF47
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/06745c0d-2955-4133-84d0-15fa5f4dcab7.roa
Signing time: Thu 24 Apr 2025 12:08:20 +0000
ROA not before: Thu 24 Apr 2025 12:08:20 +0000
ROA not after: Thu 29 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Apr 2025 12:23:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:da:61:09:6d:fa:1d:f1:1e:1c:cf:a7:da:ef:a3:f1:76:e9:bf:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 24 12:08:20 2025 GMT
Not After : May 29 23:59:59 2025 GMT
Subject: serialNumber=ae611c47c648231d0b080f1be72e5d0950b4fb56e3d5b42147f69a51afea9274, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:15:83:7b:a1:e0:22:f5:c6:c2:57:13:c9:0b:
8b:c4:c8:f6:50:ac:59:10:54:b1:95:15:15:4d:c8:
1d:55:1c:f4:de:79:c6:8f:10:59:2b:37:25:79:49:
fa:b2:ec:05:8a:1a:89:5e:76:6d:e0:d6:48:ec:b3:
e2:2d:61:5b:97:06:c1:36:5d:54:f1:91:6d:32:07:
2e:0b:95:73:f5:7a:c3:65:8a:f1:a8:18:05:95:a1:
26:50:ad:de:15:33:63:f3:c4:f3:e9:8d:d8:12:b4:
6c:7c:09:75:3c:60:bd:eb:2f:9f:b0:ee:f0:36:33:
83:75:c2:bf:02:5a:0b:c4:43:2c:bb:6b:03:cd:5b:
01:6e:19:86:5a:7f:e0:73:a6:1f:5f:9e:24:70:6d:
12:a9:bc:3e:90:4a:e4:e0:aa:4f:74:a9:68:28:4d:
5e:82:06:a6:8a:16:d9:34:40:c4:e5:b5:a1:ec:eb:
dd:ff:75:d1:5e:e7:0d:ec:cf:3d:52:b2:bc:3b:46:
7c:94:13:24:cd:0c:2f:bb:83:16:5a:0a:9a:5a:6e:
89:3f:16:73:4a:41:d1:90:c7:b7:c2:22:07:39:3c:
d4:d2:59:4c:ec:c3:7a:9e:f1:c2:a0:c9:3f:ea:53:
a0:e1:cb:e5:49:d6:38:44:20:ab:b3:1c:ac:72:8d:
73:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:42:E5:62:F3:98:0E:A7:DB:8F:9B:AB:81:BD:25:06:C4:09:E6:05
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/06745c0d-2955-4133-84d0-15fa5f4dcab7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
11:99:c8:e8:79:48:4d:3a:b8:c2:2b:3f:04:2f:48:fc:60:3b:
cd:75:af:80:b7:34:1b:8e:53:85:7c:e7:3d:57:71:3b:00:ad:
9b:df:4f:b3:c1:2a:8f:88:9f:2d:c3:ae:05:e1:78:16:f3:97:
6a:c1:29:1a:79:80:99:b3:cc:10:dd:ab:e1:6a:59:80:a6:4c:
c6:e2:13:e2:3c:dd:89:ec:8a:27:74:84:59:3a:93:1d:11:66:
bc:1c:50:e3:9c:d6:8f:ab:fe:fb:ab:d5:c0:ef:53:df:7d:85:
83:74:c8:19:86:61:b8:90:ea:c0:a4:d4:7e:b5:22:38:02:74:
17:e9:26:32:41:5c:69:52:0f:4f:cc:a9:f5:d4:67:37:bf:99:
06:ea:76:11:0e:8b:e8:7d:82:c0:c6:21:12:fa:10:e0:3b:b8:
8a:8b:ac:e9:62:fe:d6:e0:59:39:07:66:c0:7d:8f:4f:ba:0d:
68:9b:f8:33:00:16:5b:d4:3e:ce:d4:fc:af:57:64:87:1c:02:
b8:c3:e4:1d:68:fa:38:09:cd:a5:05:bf:25:52:8f:24:67:c9:
ac:de:41:db:af:97:aa:3b:8c:ff:3a:cc:f8:46:ff:af:06:57:
41:4a:86:9e:71:8e:de:6f:ca:78:81:71:f7:17:b0:54:66:dc:
49:72:60:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:52:54 2025 by rpki-client