Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3712d837-9e24-4eff-8859-77b72c6fe164.roa
File: 3712d837-9e24-4eff-8859-77b72c6fe164.roa (raw, json)
Hash identifier: Y1GQ+lolkAGe0x5IWSM/E+6ycf46WIKD+5EPDtfcbSM=
Subject key identifier: F4:D6:53:14:FF:D8:BF:2F:0B:CF:EE:81:C5:57:B9:D2:5F:A0:35:5E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: BA9A3E59496275D17D4A381FE0DCFC073F1188
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3712d837-9e24-4eff-8859-77b72c6fe164.roa
Signing time: Sat 12 Apr 2025 12:58:17 +0000
ROA not before: Sat 12 Apr 2025 12:58:17 +0000
ROA not after: Sat 17 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Apr 2025 13:18:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ba:9a:3e:59:49:62:75:d1:7d:4a:38:1f:e0:dc:fc:07:3f:11:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 12 12:58:17 2025 GMT
Not After : May 17 23:59:59 2025 GMT
Subject: serialNumber=bb97790547039f38eb2eb3cec956e1b1ccc0c3f8dab88b6d14472e6b8888f8b6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bc:5a:49:cb:c8:94:7b:21:63:ac:0e:6a:68:
38:ba:f9:a8:fa:5c:a7:48:69:49:99:68:7d:fc:2f:
36:ea:5e:eb:c3:39:81:b2:04:cd:96:5c:f5:b3:25:
e7:1f:5b:e7:f9:62:af:bd:21:d3:7f:98:e4:9c:a9:
35:81:4d:f5:02:1e:78:e0:5a:e6:2b:ef:3a:78:96:
f9:f7:f3:76:fe:c3:d2:61:51:89:da:27:19:3f:ca:
80:46:5b:a6:46:85:ef:ef:bc:f8:76:4b:9c:fa:5c:
d2:da:bf:d9:e0:ec:cf:8e:15:07:0e:ca:71:63:4a:
45:24:ea:ae:4c:a7:87:30:da:78:d4:8a:91:0d:d5:
03:63:b2:9e:29:fc:c8:2c:b9:2f:75:d3:d5:75:44:
42:fd:d9:20:c4:2a:e6:bc:78:87:d2:77:99:ac:0e:
68:e5:8f:72:17:ee:07:bd:dc:d4:7e:f2:2e:e8:06:
b1:23:c6:9a:0f:e9:1a:28:00:df:7b:52:89:bc:30:
75:af:df:9e:f1:17:64:0d:c8:ff:4d:9b:fb:f1:ca:
30:84:e5:1f:41:4f:c9:61:d0:d3:d5:7f:3b:99:61:
a9:4e:29:47:ea:ba:85:ce:4b:6e:18:ea:ac:07:b2:
e3:d2:2f:42:d5:cd:80:0f:37:64:e3:14:71:b6:35:
f7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D6:53:14:FF:D8:BF:2F:0B:CF:EE:81:C5:57:B9:D2:5F:A0:35:5E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3712d837-9e24-4eff-8859-77b72c6fe164.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
04:62:c9:e2:72:d1:0d:54:6d:64:43:97:39:9f:c5:39:7c:d2:
d4:79:fe:4c:2b:bf:10:d0:b5:0b:e5:eb:54:84:9c:7c:b0:e4:
1c:6a:d3:ff:75:d8:91:d3:54:3a:60:48:2b:71:6b:fa:0d:df:
18:b3:58:82:d4:8f:40:67:31:48:ea:93:db:c3:c7:9b:3b:2d:
d9:9d:0c:3e:74:a7:9d:41:42:63:21:6a:81:60:2c:f1:ef:9c:
33:42:68:48:d7:32:d6:9b:8a:ba:3a:8b:7a:ac:58:b5:e7:37:
ec:c2:12:60:78:da:a5:4d:16:4e:1b:72:1e:81:aa:52:21:ec:
a0:4f:cc:32:c0:9c:d2:95:71:1d:fa:2a:10:c5:cd:f8:88:42:
db:61:d1:ac:8b:29:9b:54:67:bb:fb:93:94:95:76:11:96:91:
d2:c6:e3:98:fb:9b:c0:38:3d:37:c9:be:00:91:16:3e:7b:1d:
e5:58:cb:81:f3:e1:38:71:fb:1d:14:4b:23:e2:da:35:90:6a:
a8:16:82:10:68:cf:8f:bb:2a:df:f2:20:cf:14:bf:55:7c:2f:
30:23:3c:91:de:8f:ec:f8:60:f4:4e:83:35:f8:18:66:15:a4:
89:3e:fb:17:a0:f3:0c:d5:7c:68:ea:83:88:be:77:55:2f:e1:
59:9a:2e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:43:24 2025 by rpki-client