Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/29e6d72a-3ad4-40c6-bd69-a5f14ae7f97a.roa
File: 29e6d72a-3ad4-40c6-bd69-a5f14ae7f97a.roa (raw, json)
Hash identifier: lFrVarQXkRY9z7DTn06k8Mw1BXTjPCzGqcBglq4L3NI=
Subject key identifier: E8:3A:5E:0A:CE:D0:48:84:FA:90:CB:2E:37:82:8A:A4:42:CA:07:1F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 46B849892092C5AE5A5A72DF20B93A8FB8B065CA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/29e6d72a-3ad4-40c6-bd69-a5f14ae7f97a.roa
Signing time: Mon 28 Apr 2025 09:18:26 +0000
ROA not before: Mon 28 Apr 2025 09:18:26 +0000
ROA not after: Mon 02 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Apr 2025 09:38:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b8:49:89:20:92:c5:ae:5a:5a:72:df:20:b9:3a:8f:b8:b0:65:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 28 09:18:26 2025 GMT
Not After : Jun 2 23:59:59 2025 GMT
Subject: serialNumber=5f2c85b348e37f1380dbf9f643c166051bb5dc1bf8058d77c948aaf7be015a43, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cd:5f:a0:b1:f8:4c:04:cd:1a:2a:06:17:a9:
49:36:e0:95:a5:63:f8:1a:03:a7:ff:79:28:66:3e:
e3:28:a1:68:ef:2f:2f:c8:3d:a3:dc:66:63:9c:2d:
c2:42:1f:f8:96:dd:ed:e2:c2:74:85:04:9b:02:28:
5c:40:4e:03:55:77:43:a5:d9:41:09:79:b0:9f:c6:
00:dc:a8:8a:30:65:f5:b8:fe:82:b5:0c:97:7b:fc:
cb:85:78:c4:5b:b8:7d:a4:ea:04:a5:ce:4a:36:36:
02:b8:11:57:09:dd:80:3e:76:b7:b0:f1:c2:05:02:
b5:28:37:90:86:0e:a2:c8:52:ea:79:60:d8:81:68:
af:bf:12:6e:1f:40:f4:80:7d:04:ee:91:c8:a1:1f:
9a:5f:f5:e3:69:73:8b:a7:da:67:f8:1f:cf:65:8a:
dd:b3:58:f9:fc:d1:f9:ca:c5:63:7f:8e:e9:72:57:
10:e3:dc:91:e1:76:8f:8d:5f:99:6b:df:24:ad:18:
9c:54:96:88:0d:64:e0:a2:83:41:88:81:2c:37:8a:
2f:ef:48:5d:08:3d:d1:1a:1c:78:d7:f0:24:42:8f:
4e:bc:df:55:39:a3:07:49:72:2d:a0:2a:f3:48:7d:
f0:b6:09:ee:48:18:ac:bb:0f:61:0e:8d:03:7a:a7:
e8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3A:5E:0A:CE:D0:48:84:FA:90:CB:2E:37:82:8A:A4:42:CA:07:1F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/29e6d72a-3ad4-40c6-bd69-a5f14ae7f97a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
71:9d:8b:50:e8:b9:ea:40:ee:62:b7:1e:09:3c:b3:be:1f:0c:
ff:a8:8a:06:ca:20:27:80:55:33:64:8e:33:d5:fe:77:aa:da:
40:d7:cf:10:85:28:02:a9:c0:c8:c6:60:85:ec:e0:e8:db:20:
64:21:72:34:c3:f4:2a:23:fc:98:2c:3d:e9:f8:45:71:e4:c5:
6d:0d:dc:16:59:0d:16:e8:10:f2:d6:44:c9:fb:0a:5d:2c:14:
07:55:34:e0:86:30:0f:8c:af:a9:41:f9:cb:9e:49:95:f9:52:
45:b4:3f:f3:90:1a:9f:37:33:86:c2:4b:3c:51:3d:0e:ed:ec:
34:ca:3d:e3:01:0c:93:61:e3:15:64:06:b7:11:d4:4d:5d:c0:
9b:98:b9:21:65:43:7c:6c:e9:01:17:10:2e:f2:e0:23:3e:cc:
2d:60:22:39:10:e1:c6:92:06:2f:1c:d7:8e:65:fe:6f:26:aa:
a3:e0:2f:6e:83:ed:30:59:d2:50:4f:30:44:b4:80:1c:9a:f7:
72:6d:f6:02:a4:b1:19:f2:25:9a:be:80:2f:7d:a7:4e:4c:5f:
0b:e4:61:c0:3a:3a:0f:83:4d:31:c0:2a:05:f8:eb:3f:14:f7:
79:7f:46:0f:67:f4:2c:5d:1c:f3:5e:1e:c5:a0:09:4a:b9:94:
ae:3f:4f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:29:24 2025 by rpki-client