Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6e9bbbea-c8c2-47e6-b6e7-920920de340e.roa
File: 6e9bbbea-c8c2-47e6-b6e7-920920de340e.roa (raw, json)
Hash identifier: sdvGt7dOvLmi5DdTH6TbFqBs2bhPb2JHnQjJaYxDNXk=
Subject key identifier: 1B:FE:3E:0F:9E:48:2E:FE:11:78:AF:22:4D:FA:E2:E5:EE:79:37:09
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 35D8F75CD3F5C1AAF371856C7D1DC092DD63D5DA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6e9bbbea-c8c2-47e6-b6e7-920920de340e.roa
Signing time: Mon 14 Apr 2025 07:33:17 +0000
ROA not before: Mon 14 Apr 2025 07:33:17 +0000
ROA not after: Mon 19 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Apr 2025 07:53:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:d8:f7:5c:d3:f5:c1:aa:f3:71:85:6c:7d:1d:c0:92:dd:63:d5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 14 07:33:17 2025 GMT
Not After : May 19 23:59:59 2025 GMT
Subject: serialNumber=c4cb3598745e7c00be009bf2ec365a1eb4b29aa760d19ac47283e1ecbd1ee598, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:92:ab:10:22:87:85:21:13:e0:44:0d:00:
f9:db:14:f8:63:8d:a0:2d:39:6c:87:96:da:d9:87:
bd:d4:e3:99:21:3c:20:c2:bf:e9:36:c3:a4:52:44:
c9:d3:2c:e8:50:b3:ac:4b:d2:7f:4a:2d:c7:66:68:
f9:3e:9d:b3:4f:92:40:72:86:38:6f:98:02:fa:92:
13:15:2c:90:f6:3a:bd:c4:c8:29:fc:ea:3c:68:0a:
0c:ec:70:cd:6c:88:91:9b:28:ba:38:c9:18:0d:d0:
de:64:e2:21:06:5a:7c:82:56:5c:96:eb:d1:85:f0:
cc:e1:6f:83:b4:44:8e:f8:6e:c7:32:bf:d2:2c:51:
7c:7a:e7:e0:69:0a:dc:00:b3:c2:c3:b2:a7:08:ea:
b1:44:f6:8e:31:ae:ec:34:07:7e:30:c1:79:73:d8:
da:03:39:be:87:03:2c:a7:5b:c5:3e:97:4c:d6:bb:
7d:25:d9:3d:f1:c2:43:08:c6:05:21:37:e0:73:ac:
a7:5b:c0:99:9c:d8:32:c4:3a:d8:92:ae:04:b5:94:
76:43:3a:99:b9:80:05:50:20:ca:b4:da:84:3d:e2:
65:c9:33:9c:dc:14:ee:8b:70:3f:db:e3:20:e4:8f:
09:08:7b:c4:c9:23:9d:b9:93:2c:61:ef:c4:de:6e:
7e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FE:3E:0F:9E:48:2E:FE:11:78:AF:22:4D:FA:E2:E5:EE:79:37:09
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6e9bbbea-c8c2-47e6-b6e7-920920de340e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:3d:d6:48:0b:c5:7a:71:7e:f9:87:ed:96:3f:e4:0b:22:10:
19:2d:94:7d:ec:72:00:32:32:5d:d3:d2:24:cf:da:eb:4c:73:
16:6d:31:51:35:7d:ee:9d:46:74:19:44:71:5e:04:66:b9:5c:
d5:dc:98:7a:2e:84:1d:1f:58:3d:98:70:11:87:ab:cc:de:a4:
b3:0f:32:be:8c:11:26:58:69:50:00:ef:03:b2:fd:5d:c1:52:
95:28:36:ff:23:ca:a8:24:07:fd:6f:a2:56:bb:b8:be:cd:de:
48:d8:58:64:0f:02:67:ec:c1:84:d6:8d:04:ba:87:b4:d9:e7:
8c:97:eb:4f:ec:45:33:6e:29:4b:76:a9:41:00:3b:4e:52:af:
73:8e:e4:7f:13:e0:bf:a1:50:71:89:46:8f:a5:cb:66:9e:64:
ff:30:07:7f:8d:9f:36:c6:06:32:b8:f6:bb:8f:7d:64:a1:06:
e6:d7:b7:45:20:30:41:05:95:5c:e8:3c:9b:73:7d:84:15:6c:
d3:0c:0b:a6:c1:25:45:a6:39:00:dc:d2:d2:b0:9e:a9:d0:ef:
99:b1:a4:01:ee:65:fe:b2:5e:cd:ea:22:05:1c:d1:3c:f7:c9:
81:d4:5a:68:85:66:ed:60:fe:6b:64:3e:85:b3:88:ae:cc:e9:
28:c0:a8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 08:08:33 2025 by rpki-client