Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/08cfd6a2-42f2-46a8-adbd-a3ec50afeb8b.roa
File: 08cfd6a2-42f2-46a8-adbd-a3ec50afeb8b.roa (raw, json)
Hash identifier: Fb7/QlBRY9lf+DrUllyNowXp+0jKa7+QmSs1GztLxIo=
Subject key identifier: E9:40:CF:83:E0:61:8E:AA:BE:D6:DF:51:B7:96:99:89:FE:B5:06:B0
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 71D914B4308A1B0512208CBB8691398E01A05C22
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/08cfd6a2-42f2-46a8-adbd-a3ec50afeb8b.roa
Signing time: Fri 02 May 2025 19:13:20 +0000
ROA not before: Fri 02 May 2025 19:13:20 +0000
ROA not after: Fri 06 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 May 2025 19:28:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:d9:14:b4:30:8a:1b:05:12:20:8c:bb:86:91:39:8e:01:a0:5c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 2 19:13:20 2025 GMT
Not After : Jun 6 23:59:59 2025 GMT
Subject: serialNumber=ab616ed73f2389ff4353eee385dc9511e919fb11b08954a633b052a44509e2ab, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:27:53:0c:8e:09:1f:f7:2a:fb:0c:bf:eb:03:
86:b2:e8:6c:4b:0c:1a:b0:cb:69:ee:1c:70:9b:d8:
3b:02:ed:7f:5e:24:12:4b:fe:a3:b2:15:d9:57:84:
1b:2f:fe:51:f0:5a:2a:0e:37:85:b7:4f:e1:af:c3:
e8:8b:5a:29:42:d0:df:58:47:68:11:70:a1:25:5e:
0c:c5:a9:6b:cc:b1:aa:bc:dc:54:1e:b4:ee:b2:4e:
a5:49:ec:e8:83:f1:59:8e:ff:8c:3e:87:0f:16:b9:
e4:ef:64:00:ef:4e:72:58:2a:1a:86:33:3f:6c:7e:
db:0f:c6:7c:5f:63:73:f2:c1:62:30:6c:33:02:aa:
5a:91:ee:31:ec:17:2f:89:61:f8:71:48:2d:ea:db:
d4:4a:5c:2b:3b:2e:ce:b1:c7:f8:97:b2:0f:32:42:
60:ee:24:70:74:3b:27:cf:d4:80:0d:98:51:d2:c0:
fb:22:7f:cc:f6:36:30:1b:7b:07:d5:25:f0:b6:ed:
4f:1c:28:6e:a4:20:25:3b:59:a0:fc:3f:0e:f6:99:
04:9b:3d:d2:c2:3d:5d:84:b4:05:42:98:36:38:1a:
a8:73:b6:c1:03:b8:ef:be:b1:cc:88:64:46:48:a0:
66:04:96:84:48:79:cc:1e:00:97:c1:6f:65:2b:92:
4c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:40:CF:83:E0:61:8E:AA:BE:D6:DF:51:B7:96:99:89:FE:B5:06:B0
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/08cfd6a2-42f2-46a8-adbd-a3ec50afeb8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
20:74:dd:66:50:68:9f:59:92:ca:ea:8a:70:70:34:9f:42:b9:
e0:28:a2:5a:4d:f3:1f:d4:12:db:88:89:45:a8:eb:a9:2a:44:
ff:9f:19:80:6a:cf:64:9e:ed:a6:d3:49:c4:2a:b5:90:91:10:
b7:83:b6:2a:16:05:9d:92:aa:ac:4a:d6:01:05:77:cc:a3:07:
b4:80:70:c0:8f:e8:66:8c:41:a8:7b:4f:6c:61:eb:cf:40:62:
3b:bd:6c:6f:bd:c9:af:52:ae:40:18:22:47:98:0a:b2:72:8a:
45:7c:ce:3d:7e:b7:99:63:f1:76:61:31:e8:10:72:be:92:11:
c7:06:d3:13:7a:9a:a4:ea:8f:33:89:21:27:98:94:d4:6d:39:
62:51:5f:ab:4a:d4:ef:f6:44:e3:9d:2d:ca:2f:9d:d7:83:b8:
d2:60:00:22:fa:a4:54:51:56:7d:a0:d3:33:35:b4:ab:1b:07:
73:94:55:6a:5e:91:4a:10:54:d8:2d:cc:e6:63:d6:52:39:80:
db:3c:e2:51:a5:4e:d5:d4:fc:49:bf:13:6c:00:05:da:7e:0e:
ba:88:e4:a6:75:ae:42:24:a3:cd:77:b0:2c:c0:aa:d0:7a:5d:
3a:98:36:7f:fa:87:a0:82:84:99:e2:87:33:6a:c2:96:62:c4:
6b:89:1c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:04:21 2025 by rpki-client