Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5f3c6342-8723-4376-829f-cb35f44852e3.roa
File: 5f3c6342-8723-4376-829f-cb35f44852e3.roa (raw, json)
Hash identifier: IYm2G+BW7wAJ6y3Cy3p+AgCCBI+BtTIVtcyOmFpm/lc=
Subject key identifier: 9A:46:E0:90:0D:EE:B2:79:B6:23:D0:3B:71:E5:41:14:24:BE:5A:EB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5AB21B26099E88649D1EE61BF550739AECFB8F04
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5f3c6342-8723-4376-829f-cb35f44852e3.roa
Signing time: Wed 16 Apr 2025 02:43:16 +0000
ROA not before: Wed 16 Apr 2025 02:43:16 +0000
ROA not after: Wed 21 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Apr 2025 03:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:b2:1b:26:09:9e:88:64:9d:1e:e6:1b:f5:50:73:9a:ec:fb:8f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 16 02:43:16 2025 GMT
Not After : May 21 23:59:59 2025 GMT
Subject: serialNumber=d3d9fe72690025a899a5e05739166633dcd967b7580fb50aaed138e5e2ee29af, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5d:ef:ad:8d:5a:7d:9d:64:03:ee:fd:e0:e9:
ea:9e:8d:91:b0:6f:4f:52:d5:0a:09:bd:91:da:21:
b7:ad:ff:5b:22:12:93:ea:5c:29:ce:03:47:fc:c3:
b5:56:49:46:e1:f4:fd:ac:a7:35:dc:5e:b5:74:99:
50:3a:f5:f1:6c:6f:a9:a4:40:a4:ae:34:36:f7:97:
0f:d8:76:d1:fb:5f:1b:42:ec:f7:fa:a4:e6:24:cd:
9e:0b:10:f7:9b:79:f3:08:d2:d1:8c:2c:72:22:be:
8b:4c:88:f9:a0:15:69:5d:31:82:f2:ea:61:3c:df:
29:83:6d:64:80:1d:09:59:a7:d2:c6:43:f6:ed:81:
d0:2e:52:55:e0:98:9f:07:59:d1:b5:bf:1b:e9:35:
1c:02:32:b5:95:1b:0f:16:a4:74:a2:14:b1:01:62:
12:ee:14:78:26:40:b3:1a:2d:18:49:f2:75:54:40:
1d:78:19:24:e2:45:b8:8d:d5:b6:b5:0b:5f:97:41:
dd:be:24:4e:c1:5b:85:f0:54:4e:c5:98:e2:bf:9e:
92:c1:e8:dd:64:ce:30:90:cb:c8:d0:87:69:ea:ec:
0c:aa:51:93:0e:d5:68:ad:f2:cb:19:b6:a1:87:ae:
4a:2f:aa:74:d4:9b:16:cf:d3:98:10:ca:41:66:2e:
7d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:46:E0:90:0D:EE:B2:79:B6:23:D0:3B:71:E5:41:14:24:BE:5A:EB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5f3c6342-8723-4376-829f-cb35f44852e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:06:2d:87:f8:bc:0a:af:56:23:1b:00:1d:27:36:42:27:f0:
ea:5b:1b:74:ac:03:67:6e:3d:8c:30:72:a5:11:c6:ed:1b:c7:
63:e0:e6:26:63:82:7d:b4:e1:23:6b:84:79:cb:9f:ef:51:01:
59:e6:5c:d9:8d:16:41:67:81:12:d0:1d:1a:f8:56:23:32:b1:
7d:3e:be:62:50:39:ac:a6:37:1f:e4:20:4f:ef:d8:fe:11:07:
b5:63:20:05:a4:86:aa:77:57:26:2e:fa:47:ec:ba:78:2b:23:
4f:7f:86:71:f5:40:18:a4:0a:b7:72:81:74:50:dc:63:62:c1:
3a:c1:1d:b6:26:4b:68:57:b0:90:7d:bf:dc:39:43:1e:83:34:
68:9d:e5:5d:98:ba:c4:3b:31:ba:08:7c:0f:da:73:45:06:fe:
cb:4d:30:19:62:c4:58:63:67:6c:df:d4:48:56:de:e9:b1:e3:
ed:e0:40:e2:b3:ae:69:2a:2e:01:88:3f:0b:34:1f:9f:5a:5a:
56:7c:56:80:e0:ac:df:af:7b:ca:c4:69:c7:2a:ec:dd:14:fe:
5c:2c:bd:08:f9:9b:3d:b4:82:37:94:70:b8:3d:da:d5:4c:1b:
ab:f5:32:d7:72:c5:73:e6:b4:fb:47:29:6c:bf:f1:99:56:b5:
6e:40:c6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:45:34 2025 by rpki-client