Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/778951d7-b1f1-46e2-9da0-66aa62336207.roa
File: 778951d7-b1f1-46e2-9da0-66aa62336207.roa (raw, json)
Hash identifier: oyqJHs6yUgACAyAO7RhTath+kl516om2tlmpJGGDcBg=
Subject key identifier: E6:FD:13:9D:EE:CB:80:B0:3E:44:3A:62:31:7A:97:AB:EA:05:81:86
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2A2595C5B8AADB178F44C4D6EA9F153DFEFC843D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/778951d7-b1f1-46e2-9da0-66aa62336207.roa
Signing time: Mon 28 Apr 2025 03:18:21 +0000
ROA not before: Mon 28 Apr 2025 03:18:21 +0000
ROA not after: Mon 02 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Apr 2025 03:38:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:25:95:c5:b8:aa:db:17:8f:44:c4:d6:ea:9f:15:3d:fe:fc:84:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 28 03:18:21 2025 GMT
Not After : Jun 2 23:59:59 2025 GMT
Subject: serialNumber=20437b35a9ae1e83eea22d3421dbc381b4b9b0e2832960a58cfa4308ff999f02, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:ae:d2:b5:ae:df:9d:36:ce:b5:17:97:41:
7a:7f:01:e1:4c:99:49:74:65:b6:09:87:33:22:45:
a5:87:7f:60:d6:c0:72:d7:d9:2c:1d:f9:11:d2:76:
7b:98:43:49:f5:0f:92:91:23:fb:39:bb:fb:a4:88:
2c:17:b2:02:4b:b7:7d:ec:37:9a:62:ea:e0:9c:7a:
15:bd:c4:05:13:db:ca:6a:21:7f:01:a7:78:c8:63:
7d:75:9c:19:7a:45:b0:74:27:68:29:9d:d6:61:66:
7b:53:5a:70:d1:ea:59:35:7a:84:3d:ff:9e:70:0a:
da:10:46:a3:3b:01:38:5a:7f:30:7a:a0:94:40:6f:
19:e8:78:14:83:e5:0d:c2:82:ff:f3:06:00:33:cd:
cf:2a:73:36:a3:8c:52:00:74:a4:32:5b:39:5d:97:
ea:76:8e:81:f8:9f:b5:0f:de:0e:90:2b:a0:3f:22:
d8:ec:f7:11:e9:c1:b4:1f:fb:c1:10:72:ea:b3:ef:
73:df:4e:b7:98:68:ef:b3:43:6b:41:17:4d:b5:09:
ad:2c:0c:e6:01:c9:29:dc:13:db:48:bd:7c:48:69:
3f:8c:89:19:67:6c:9e:a4:cb:0d:60:1a:5f:43:40:
50:8e:b7:7f:9b:5e:d0:c5:01:6b:d5:87:90:8b:39:
a3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FD:13:9D:EE:CB:80:B0:3E:44:3A:62:31:7A:97:AB:EA:05:81:86
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/778951d7-b1f1-46e2-9da0-66aa62336207.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
40:87:ec:4a:d0:82:09:42:fe:10:d0:67:8d:1b:87:b3:09:3b:
26:d6:58:14:05:79:1a:a6:2a:71:df:02:e1:98:15:c7:e6:25:
60:bd:4c:c5:26:ba:b0:c8:8b:11:9a:13:6a:6a:46:2f:8c:83:
99:49:63:eb:52:a6:d0:4a:ec:c4:e0:1c:33:ab:b6:49:5f:f2:
ed:a7:c8:92:3d:88:79:50:37:d8:d3:f4:82:ea:31:28:20:1e:
43:8d:b1:1a:a5:8f:25:ba:fc:83:1d:e7:c2:f7:e1:88:d9:61:
6e:51:82:07:d2:25:21:e8:a3:a8:67:cb:f3:ad:85:0d:07:75:
ee:97:9b:84:7b:d8:bd:d3:ee:f2:4b:ce:5f:0e:10:48:d2:8f:
5b:6d:39:25:ea:9f:39:78:d3:f6:9b:e7:d7:e5:6c:29:81:33:
fb:23:70:2d:6b:38:15:87:6d:53:a1:67:14:9b:1a:ce:16:7d:
d5:b7:e3:47:f6:54:1b:dc:81:d8:fe:42:85:a9:23:12:9a:29:
7a:9b:42:a6:37:29:5a:68:87:26:fa:df:62:c4:96:04:3b:c4:
e1:68:cf:6a:48:7c:40:57:af:fc:9e:20:95:87:aa:d3:9c:8d:
03:6a:96:a2:a4:90:c2:50:96:a3:11:e9:70:0b:ae:77:b7:82:
88:85:b3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:11:23 2025 by rpki-client