Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/794784aa-3331-4fa2-91a5-1f0c071ab248.roa
File: 794784aa-3331-4fa2-91a5-1f0c071ab248.roa (raw, json)
Hash identifier: jtNtg8bvClVp0Y/YNlJloss2AkqQoJ5mMt/eyOG1px0=
Subject key identifier: FA:CA:64:51:47:26:66:05:21:4F:1F:3D:29:DB:F1:1B:BE:00:43:05
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 08D45CE2A413DAAB5803055DCD2D1B9BC57DB6A8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/794784aa-3331-4fa2-91a5-1f0c071ab248.roa
Signing time: Sun 04 May 2025 18:58:19 +0000
ROA not before: Sun 04 May 2025 18:58:19 +0000
ROA not after: Sun 08 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 May 2025 19:18:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d4:5c:e2:a4:13:da:ab:58:03:05:5d:cd:2d:1b:9b:c5:7d:b6:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 4 18:58:19 2025 GMT
Not After : Jun 8 23:59:59 2025 GMT
Subject: serialNumber=b97f50fcae9acdaf04481da55bb6ae69e5132b379fd079f93a0ee17ad646d2ba, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fc:3c:4d:72:38:b2:48:c3:64:28:e2:2e:f6:
07:30:c4:dd:ea:a0:fb:3f:c2:91:e1:73:0d:31:c6:
f0:97:cb:e2:bd:43:29:3f:aa:a0:1a:22:48:73:ce:
1a:cf:d6:52:19:e8:73:c8:26:5b:f9:e3:20:00:0a:
65:85:06:4f:78:d7:66:ad:0d:60:f4:58:98:66:a3:
1f:7d:53:b5:86:81:f4:c7:69:7d:b7:ff:2d:22:72:
d1:bf:c3:a8:b4:7d:af:40:96:fb:66:7c:ed:6b:1b:
c5:4d:ec:d2:74:49:de:7a:3e:cd:5f:61:85:1c:3c:
86:9b:d3:a1:b3:10:2c:40:41:33:1a:46:b8:10:ee:
9f:63:d3:c4:33:13:5d:04:b7:32:2e:f9:7e:32:21:
2d:fe:9d:bc:12:98:9f:f8:34:a5:ec:2b:74:ce:70:
ee:5e:2a:d8:42:55:52:02:d2:95:58:5e:8b:23:a5:
4c:d4:b9:91:76:f5:8a:3a:5f:cd:d8:37:13:6c:de:
47:88:ef:26:ea:f9:ff:50:f4:c3:d3:fb:01:29:21:
0c:24:4f:af:38:a9:d8:f2:56:57:62:c7:de:8d:bc:
92:f4:80:40:6e:d3:79:c1:7f:ea:63:83:0b:68:0e:
da:79:b0:a1:7a:66:45:69:e5:45:dd:2b:cb:fb:00:
6a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CA:64:51:47:26:66:05:21:4F:1F:3D:29:DB:F1:1B:BE:00:43:05
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/794784aa-3331-4fa2-91a5-1f0c071ab248.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
75:dd:8c:63:0a:53:a6:9a:2d:86:47:8d:01:b7:99:e2:f8:01:
82:d8:56:23:3d:30:7f:4e:29:63:0f:54:24:da:36:63:ad:a6:
26:de:e9:f9:30:dd:be:c5:a6:03:1e:f9:6f:48:0f:c4:81:50:
66:ee:da:f8:53:7b:8e:e5:44:5d:06:f4:cc:43:4c:ac:36:ff:
7e:20:e9:4e:18:42:6e:9f:18:2e:07:d7:07:fa:07:d2:0a:77:
ca:f0:c8:0b:cd:fd:f5:1b:6b:15:58:5f:e4:d5:70:6c:71:8b:
d6:2e:32:32:67:45:5b:12:07:c8:4e:d1:4c:6d:1e:cb:d6:78:
30:56:06:e5:c1:02:01:27:5f:32:86:da:ca:b8:b8:10:fc:1e:
b3:b4:1e:01:0c:d8:4d:b8:46:94:39:bc:8e:71:f2:08:fd:d2:
43:78:c2:1e:0d:8b:98:44:fe:d2:23:90:50:6a:44:c6:ea:94:
b2:0c:4e:c3:95:92:61:60:80:2e:da:15:2c:d4:14:bb:4f:d6:
dc:56:1e:20:79:7a:ee:95:23:89:11:9f:40:a8:92:ce:11:99:
3c:b0:96:e0:b2:90:ba:e6:03:7c:68:dd:d9:69:fb:2a:cb:23:
48:c8:25:b5:3c:e0:44:1a:7f:90:b5:9c:78:71:25:9f:e9:8a:
9b:6f:09:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:30:19 2025 by rpki-client