Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6bb59897-4664-45d9-b44e-523af088f04a.roa
File: 6bb59897-4664-45d9-b44e-523af088f04a.roa (raw, json)
Hash identifier: 6hjVLkaC42/qJQLIwU225w8HnrHjyPkOTvVAQe6MibI=
Subject key identifier: 68:4E:01:55:8A:EB:67:24:B8:D9:F4:DF:AA:5F:4E:D0:2D:20:8C:82
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 06384EA5001BF8A3516360E93BCE38A42667C1ED
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6bb59897-4664-45d9-b44e-523af088f04a.roa
Signing time: Tue 15 Apr 2025 23:23:28 +0000
ROA not before: Tue 15 Apr 2025 23:23:28 +0000
ROA not after: Tue 20 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Apr 2025 23:38:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:38:4e:a5:00:1b:f8:a3:51:63:60:e9:3b:ce:38:a4:26:67:c1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 15 23:23:28 2025 GMT
Not After : May 20 23:59:59 2025 GMT
Subject: serialNumber=c79f24731e74bd5e13a2c7b86ba4dd1918066bc81baa8fbe613b3c868479b623, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:50:1d:f2:95:63:0e:8b:91:59:1c:ba:64:eb:
1c:d8:97:57:19:a4:62:b2:3f:3c:b0:77:ae:b0:98:
31:2c:cc:3b:a6:45:27:9b:c9:20:8e:ac:7f:d6:f1:
44:75:6c:2a:c9:f3:30:02:d9:c7:de:60:ff:f4:30:
f3:79:a4:f8:be:dd:7b:ce:27:7f:e4:4f:e7:69:39:
fe:06:57:1c:7b:d0:a6:c5:04:6d:aa:53:b4:e7:f7:
e9:30:7a:9e:15:b4:3a:8b:07:95:a0:9e:e8:62:02:
a1:66:aa:10:be:56:48:6a:d2:c6:15:e4:8d:28:85:
c8:1c:12:d0:ea:2e:91:44:3e:c7:c1:88:8f:19:00:
b5:22:39:3f:11:a3:b3:c2:9b:ac:8d:9e:2e:98:be:
76:44:9a:08:7b:1e:36:55:e9:6a:fe:99:3e:11:77:
a4:14:f6:0c:89:20:ef:49:3a:21:17:15:ac:34:32:
63:5f:35:67:53:78:70:a1:a2:4c:66:80:9f:ab:ee:
22:34:7b:e9:dc:a9:22:f7:45:a6:b1:a1:16:d0:78:
85:ad:d9:3f:70:af:a9:2b:8d:55:05:8d:4e:a3:ac:
c5:74:74:fa:83:d7:3e:ca:76:4f:4e:58:0f:94:da:
b6:8d:dc:84:e4:4b:7e:07:98:7d:5a:ea:3a:63:18:
3c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4E:01:55:8A:EB:67:24:B8:D9:F4:DF:AA:5F:4E:D0:2D:20:8C:82
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6bb59897-4664-45d9-b44e-523af088f04a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
23:f1:8f:76:15:63:db:f8:87:c7:cb:dc:54:1a:8d:47:69:5b:
37:94:34:f7:ca:e6:44:7d:8c:0c:8c:13:55:37:3e:16:44:9c:
99:f7:55:c7:82:dd:5d:46:d4:10:78:7c:ab:50:b4:f2:d5:77:
9a:3a:48:3c:27:c5:57:2f:27:20:63:da:35:19:ce:48:66:4e:
39:64:51:9c:1b:d9:63:a4:1e:65:19:e0:ab:ff:a9:92:e3:6e:
b0:9f:21:96:b0:54:95:76:d9:30:fe:ef:23:0a:94:8e:10:76:
81:58:c8:83:c1:0b:47:53:31:72:f1:36:1e:0d:c3:b4:55:ac:
1b:4f:f4:4b:55:68:57:54:a1:43:35:0c:c7:38:14:57:d4:44:
c0:c8:3c:91:4d:4a:0d:37:ac:e4:a3:52:be:1a:af:0f:7b:f8:
6c:a2:64:a3:4b:f8:3e:40:11:69:88:70:d4:7d:a4:c4:74:72:
e3:a2:36:35:a5:a7:78:d1:7b:43:2e:a1:3c:60:45:a7:d8:90:
5f:0c:85:44:90:25:b3:b5:7c:11:49:99:eb:34:44:8a:21:c4:
03:be:bc:6e:91:83:03:45:d2:58:80:b0:05:68:31:bb:a9:f9:
42:d9:f2:72:af:00:3c:e9:f2:28:bf:4c:e7:2f:90:a3:e9:4e:
a3:ac:46:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:08:41 2025 by rpki-client