Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7587c3cd-021d-462e-a118-88735f26f5a2.roa
File: 7587c3cd-021d-462e-a118-88735f26f5a2.roa (raw, json)
Hash identifier: iik9TAm5D982It5a9CfziyJxSyD3OzKCOWNRQF/D9a4=
Subject key identifier: 81:2B:D2:AA:9A:3A:35:19:E4:39:53:A1:11:0B:D8:57:41:93:1A:AE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 475DF12F9BC53E9D3F603C418BC91581892CEBAC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7587c3cd-021d-462e-a118-88735f26f5a2.roa
Signing time: Thu 01 May 2025 04:03:21 +0000
ROA not before: Thu 01 May 2025 04:03:21 +0000
ROA not after: Thu 05 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 04:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:5d:f1:2f:9b:c5:3e:9d:3f:60:3c:41:8b:c9:15:81:89:2c:eb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 1 04:03:21 2025 GMT
Not After : Jun 5 23:59:59 2025 GMT
Subject: serialNumber=48d69f6d16aa78474184197a474943c5734f42a5569699abd6783228eacd972f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:50:4c:95:7b:e3:2d:a5:3e:f9:db:a5:f7:be:
50:02:48:2b:d8:60:9c:5d:95:1e:fe:79:49:10:87:
d7:c0:c3:55:da:ac:34:6f:d6:a5:c4:2e:f0:40:6f:
c8:4d:c2:2b:9c:0b:9a:73:11:3f:d9:f4:16:18:ad:
3f:16:62:13:89:3c:18:cc:17:da:d7:1f:93:41:99:
eb:b0:ca:c7:ec:61:38:6b:89:56:75:a2:76:9b:dc:
33:52:77:3d:c1:25:f1:da:d3:1f:2b:0e:2e:b3:ce:
a8:6d:e8:78:c4:d0:82:c3:ec:ce:c5:41:db:7d:e4:
4a:88:9e:08:ec:5d:ec:c5:9e:cf:3c:28:69:d7:e0:
bb:2a:a9:66:21:38:c2:c9:03:8f:6e:f8:1f:48:e7:
ab:fb:c8:d2:4c:e0:59:54:b1:70:b8:e8:77:d8:9c:
7e:a1:9d:31:63:38:26:4e:59:7b:63:f9:04:b2:f2:
8b:5b:c4:48:54:73:a6:c0:08:55:23:9a:87:14:d9:
65:d5:c9:48:07:af:27:70:41:db:24:38:ef:ac:43:
68:2e:02:8d:f5:09:22:e4:23:bf:d6:e3:6f:3a:26:
5f:3e:4b:e4:25:ea:a0:44:bb:54:f3:bb:00:b3:a6:
be:17:c8:39:82:77:24:8d:8d:97:57:54:78:38:63:
0f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2B:D2:AA:9A:3A:35:19:E4:39:53:A1:11:0B:D8:57:41:93:1A:AE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7587c3cd-021d-462e-a118-88735f26f5a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:1b:52:74:91:0e:07:d5:04:3b:d1:8b:27:74:90:e9:48:61:
5b:ba:3e:8c:5a:c5:00:75:ab:0a:d8:61:01:d0:55:85:e0:5f:
02:3c:22:fc:c1:b0:b0:3f:48:48:55:b5:8a:37:1a:e3:b6:a4:
32:81:f5:69:bc:56:25:2a:bb:6d:03:82:df:f3:d3:6d:f9:3e:
ff:fd:2c:4e:bf:0c:fd:b6:70:9a:37:98:be:1c:c2:3e:2b:36:
f3:c5:f2:d7:5d:67:94:99:d7:3f:21:69:b1:a3:df:b6:4d:2f:
a1:4a:5b:d1:53:2c:42:90:c2:b7:83:86:8d:46:6f:92:45:22:
b5:0a:f8:20:bc:0f:fd:c7:c9:83:a2:b0:84:da:03:1b:de:d6:
fe:88:10:5d:c5:b1:c3:b3:19:1b:2c:f8:a8:b8:09:01:71:f4:
02:0d:f8:48:c6:b5:94:bc:ad:fe:39:48:75:e8:ec:b4:06:90:
6d:1a:c3:59:75:c1:4a:b1:b6:20:22:43:53:cc:d3:ff:f1:2a:
4e:af:a7:f2:f2:c6:2d:98:d0:61:67:92:89:73:4b:55:37:97:
9e:42:4c:a7:5e:57:c8:e0:01:6c:d9:d7:f7:37:6a:29:fd:61:
3c:4e:82:85:c1:c7:5d:a3:e3:9f:22:b9:a2:cc:dc:75:15:6b:
11:12:3d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:10:41 2025 by rpki-client