Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3ac8290d-b7b5-438c-8230-3bf8efc4fc66.roa
File: 3ac8290d-b7b5-438c-8230-3bf8efc4fc66.roa (raw, json)
Hash identifier: B5vjubC+iI7qt0aYycJJAYTvs9+t7HOjXDNY0AEmDpA=
Subject key identifier: FD:7A:BB:90:77:89:49:44:66:28:EF:C4:E7:7A:6F:49:DE:47:E9:EB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 330BD3054DC546EB6933963BD47CB9D9A5209BD5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3ac8290d-b7b5-438c-8230-3bf8efc4fc66.roa
Signing time: Wed 30 Apr 2025 11:03:18 +0000
ROA not before: Wed 30 Apr 2025 11:03:18 +0000
ROA not after: Wed 04 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Apr 2025 11:18:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:0b:d3:05:4d:c5:46:eb:69:33:96:3b:d4:7c:b9:d9:a5:20:9b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 30 11:03:18 2025 GMT
Not After : Jun 4 23:59:59 2025 GMT
Subject: serialNumber=d461b0625f973275eb40b0d8344645c85770895b7b7d2046c64acd6b61091b2d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:3e:ae:02:c3:c6:05:96:82:3a:81:ac:7a:
e3:a5:bb:91:4f:9e:54:bf:c4:cd:2e:cc:80:d2:bd:
91:6d:55:80:ce:27:e1:55:dc:4f:af:d8:d4:52:2f:
26:e0:dd:65:2d:ac:55:b9:7e:8a:0c:3a:3e:8d:7c:
bf:16:76:14:36:0b:9b:c0:6e:59:02:79:a3:2a:f9:
5b:99:b9:d0:28:fd:09:65:9b:a2:2f:69:31:d5:76:
62:2d:52:40:52:f5:f0:e6:2a:b3:39:a0:10:1d:24:
cc:13:28:16:b4:de:ec:9a:f1:c3:35:79:5a:c0:dd:
24:22:c7:33:17:85:2f:1b:2a:a2:5e:2d:e8:aa:7a:
98:ea:34:78:b2:68:8a:b0:9b:13:f9:67:f8:33:db:
40:d7:e2:4d:9c:d2:88:d5:e8:7f:21:d7:fb:9e:05:
59:bb:6c:48:be:c6:75:09:ed:67:7c:7d:be:ce:c1:
15:ec:fb:24:ae:8f:2e:fe:57:b9:ab:6f:3d:cb:80:
27:98:18:da:7a:d5:dd:68:c3:da:b6:81:dd:cc:17:
2e:da:1d:9b:5e:b5:7a:82:2c:a6:b7:10:18:01:5a:
74:03:de:0d:62:b9:7d:be:e1:a6:a8:6c:82:6e:bb:
a0:83:5e:b8:8b:5d:42:5e:84:ba:e8:9a:30:17:05:
c4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7A:BB:90:77:89:49:44:66:28:EF:C4:E7:7A:6F:49:DE:47:E9:EB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3ac8290d-b7b5-438c-8230-3bf8efc4fc66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
43:7d:f8:dd:76:87:3e:5f:d0:06:ad:f6:57:ac:6e:b4:96:fa:
06:9e:09:fd:b1:df:7d:40:d3:72:0e:f3:9c:02:44:92:a5:11:
8d:be:e6:d8:a8:5e:1d:93:4f:0e:36:85:44:55:ef:ef:4d:52:
48:c4:e0:1b:e3:f1:2b:56:42:5d:d8:46:e3:2f:1f:2c:42:20:
ee:ef:b9:02:fb:ad:3f:45:2f:ac:44:2e:be:23:a6:ce:91:32:
89:b4:b9:b0:f4:0e:11:dd:75:60:cd:6e:22:82:d0:27:12:7c:
6e:25:76:dd:1d:73:9d:75:c2:98:48:5f:e6:33:64:78:f3:48:
c1:bd:b7:7c:38:be:a0:01:20:63:87:31:7e:ce:00:9e:12:8f:
9e:ec:08:1e:f1:e2:6d:0a:02:2f:5c:a7:ca:9a:7b:91:12:7b:
9c:a6:8d:6e:ae:8d:62:28:3c:7a:fc:3c:b7:77:31:d4:5a:15:
10:45:78:75:e9:b2:d4:28:4f:27:40:85:21:bc:7a:1e:c6:51:
03:33:0d:3f:cf:6d:20:27:32:45:49:cb:cd:b1:f1:d9:92:f9:
d9:1f:c2:a0:1d:10:b5:a2:12:a1:8d:b5:9f:cc:47:44:df:27:
d0:2f:f7:0d:59:7b:1b:9c:d6:bc:c3:d3:72:08:8c:d7:c2:26:
10:29:3c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:57:29 2025 by rpki-client