Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4423a804-f8da-4394-864d-953445e87c20.roa
File: 4423a804-f8da-4394-864d-953445e87c20.roa (raw, json)
Hash identifier: Ugl24+f7yzKG6kbe8Zeei+KW7sPI6ZwnNrGj1V+kZdw=
Subject key identifier: 14:15:06:FA:82:F5:18:14:C7:D5:DC:62:B4:80:37:33:65:FC:95:CD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1AD44677D05B60D4CDAA9A17F35CF94C5C4C1DDD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4423a804-f8da-4394-864d-953445e87c20.roa
Signing time: Wed 30 Apr 2025 22:28:17 +0000
ROA not before: Wed 30 Apr 2025 22:28:17 +0000
ROA not after: Wed 04 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Apr 2025 22:43:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:d4:46:77:d0:5b:60:d4:cd:aa:9a:17:f3:5c:f9:4c:5c:4c:1d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 30 22:28:17 2025 GMT
Not After : Jun 4 23:59:59 2025 GMT
Subject: serialNumber=3fbb198dbf1878632dcbd3b413c91028087ff0041739bf7061f3a9d383de2e4c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:75:dd:a2:4b:f8:ad:32:3e:70:f8:c8:ff:e9:
ea:be:b3:85:7c:ac:78:c1:9b:42:a9:76:bd:e9:9e:
70:86:a3:0e:a7:a5:ac:42:f6:d4:db:b3:d5:66:17:
f5:31:e1:b6:54:e3:11:94:50:24:55:5a:cf:34:99:
b4:45:1a:03:a7:64:0e:de:09:d9:1b:c9:9c:61:72:
11:79:14:f4:ef:79:48:91:3f:74:9e:7d:af:c9:1d:
30:03:53:cf:34:83:b9:07:fe:46:d1:96:91:7e:96:
63:ca:cc:df:35:e2:c2:9a:10:30:22:10:b6:93:07:
df:01:1b:ce:a4:ac:40:29:c7:cf:69:bc:b1:23:8f:
32:f3:87:a7:c9:08:17:e0:0f:9c:a8:1e:a1:7b:7f:
91:1d:0b:6f:db:a0:78:e3:34:83:d8:82:65:96:c5:
22:96:96:b7:e2:42:eb:59:a5:d9:34:6e:20:c4:5b:
cb:84:0e:5e:f9:29:84:ba:78:64:1e:48:b7:b7:11:
24:fe:35:70:0b:2e:cc:8c:3a:83:3f:5c:79:ca:19:
2d:88:fc:6c:9f:c3:b0:30:8b:fc:0e:5c:cb:f5:6a:
71:c7:ed:36:35:43:80:c8:cf:e1:71:5f:4b:8d:33:
ca:3a:25:74:ec:5f:8c:e6:45:db:50:51:81:fe:6d:
83:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:15:06:FA:82:F5:18:14:C7:D5:DC:62:B4:80:37:33:65:FC:95:CD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4423a804-f8da-4394-864d-953445e87c20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:a0:7e:69:ba:4e:5e:e3:31:da:3b:53:b4:da:05:31:20:74:
2c:bd:3f:a0:65:71:ea:9b:39:5e:d8:13:9b:9c:64:5f:b6:6a:
36:98:25:04:d7:53:28:67:2f:a5:dd:92:19:11:0d:ce:9e:0f:
4c:f3:0d:fa:d4:2c:d7:76:16:6e:a8:f8:a8:e7:53:7e:5c:91:
8d:37:03:1f:67:48:ef:bf:33:06:7a:c3:57:bc:dc:26:8a:46:
8a:fa:6c:75:07:46:06:20:af:e9:cb:eb:b5:a2:de:f7:f8:a5:
e1:80:7b:8c:9e:cc:e7:9d:eb:90:4f:4a:8d:4d:1c:19:33:f6:
4b:63:da:98:e4:f1:a1:08:bc:ac:7b:03:ed:ef:6d:d4:dd:b7:
05:9f:cb:a6:62:96:8e:4f:c9:27:11:ae:36:1a:41:49:d7:4d:
29:c7:bb:43:e7:0d:9f:ac:de:95:23:c8:d5:21:f8:89:bc:1d:
03:8e:63:54:d7:97:33:2a:be:13:c0:d7:4a:f7:3b:77:46:a6:
fe:e2:0b:b1:13:b9:f1:1c:95:c3:e8:3a:c0:63:73:4a:45:59:
79:e0:44:fb:e9:10:ca:2b:1f:bd:ef:d1:75:af:d7:57:49:81:
c6:8e:34:1d:3b:7b:56:0f:1a:2c:48:19:27:7e:a2:f5:e9:c7:
e5:c4:e2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 08:26:17 2025 by rpki-client