Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7b855b59-b1c7-4292-82ac-eb1413254e56.roa
File: 7b855b59-b1c7-4292-82ac-eb1413254e56.roa (raw, json)
Hash identifier: omFJgtDg8oKw2gjqqgt1o8WcDjOl879cWl5IxsiTqLA=
Subject key identifier: 2D:D2:17:D8:B0:7F:11:CE:02:D5:34:B5:4E:6B:54:C4:DD:44:4A:AD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 538119C358D011F01BE9897CF7EF45523E11BEEA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7b855b59-b1c7-4292-82ac-eb1413254e56.roa
Signing time: Fri 25 Apr 2025 11:03:19 +0000
ROA not before: Fri 25 Apr 2025 11:03:19 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Apr 2025 11:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:81:19:c3:58:d0:11:f0:1b:e9:89:7c:f7:ef:45:52:3e:11:be:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 25 11:03:19 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=d406a3a06c680b6f04a845789d4bf59845256b83a700ef4e7f4bef7cdc3d2e11, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:63:0c:7d:18:ce:39:45:64:01:d9:87:f5:
15:03:c5:13:9b:81:5a:c4:9e:56:7f:5a:2b:24:61:
ad:ae:1e:1a:eb:db:c0:4e:4e:a8:02:72:41:25:f1:
b3:5c:f4:71:f1:bb:67:d1:5d:9b:32:f2:53:e7:c4:
66:dc:3d:9b:37:11:a1:ad:4d:19:cc:4c:00:70:35:
dc:83:50:ea:2c:8f:fb:a8:db:c9:c4:37:90:91:16:
bc:65:c5:3b:5d:39:6b:1e:ef:61:dc:b0:9e:6c:a9:
f7:36:5b:34:79:a9:cc:06:88:cc:e1:87:2c:3e:9e:
e3:93:6a:ed:3c:b5:26:98:d7:6b:89:97:e9:f5:51:
68:00:e0:3d:eb:a9:c7:e4:c3:f2:56:74:36:83:28:
43:e2:c4:f5:9d:d3:d1:f6:d0:23:cf:11:bd:36:2a:
17:ec:2e:5f:22:1e:ed:6a:46:b8:8f:9a:90:52:1e:
00:a0:30:3b:37:f9:fa:88:da:08:9c:49:ea:2d:98:
62:16:d7:48:f8:ed:5d:7e:04:53:70:15:39:71:63:
d8:f7:05:3d:f8:c5:61:d4:1a:42:07:6a:6a:f5:48:
18:36:23:f1:67:e9:c5:09:b6:71:81:61:e7:5d:21:
73:43:70:6a:21:6c:48:06:bb:b8:e9:b7:2e:61:91:
d5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D2:17:D8:B0:7F:11:CE:02:D5:34:B5:4E:6B:54:C4:DD:44:4A:AD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7b855b59-b1c7-4292-82ac-eb1413254e56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:5e:8c:e5:ec:8d:b5:0e:10:c4:03:3f:d2:e2:41:65:3e:7d:
1a:e4:27:7d:74:fa:21:e3:34:cc:5d:db:ca:9c:7e:a2:21:90:
18:a5:74:b6:6f:20:65:ff:5a:61:f0:55:c3:eb:86:69:00:cd:
dd:5a:18:5b:33:3d:60:fc:61:af:2d:77:b1:37:a3:2f:3c:36:
44:98:11:38:14:71:4b:c6:0f:6f:a7:3e:0d:af:82:6e:5e:41:
d0:2c:01:c6:72:5e:17:11:9e:b3:30:f3:b4:7d:8c:07:b7:b8:
a2:e4:7b:51:ea:a7:49:75:47:d6:4b:e0:70:bc:52:84:00:08:
69:72:82:4e:1e:73:82:63:49:c9:e0:76:92:9f:40:b4:14:27:
ed:a4:3a:1f:2c:05:02:60:2a:83:e5:88:f4:f9:d0:5d:51:7d:
70:e4:75:a4:a1:70:5f:fb:ba:77:9f:0d:bf:53:d8:53:8f:77:
42:4c:c5:41:d7:b6:a4:69:3b:47:a8:af:43:e2:73:b0:2f:f4:
a1:08:22:5f:ad:e1:ed:cb:73:e8:2a:3b:69:45:85:31:7e:25:
ad:9b:ee:b8:a8:db:d8:0e:c7:fb:5e:0d:01:25:0c:9a:d4:e9:
67:65:51:1b:e1:c4:10:b1:bf:e7:25:ac:01:16:73:96:38:9b:
e1:92:44:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:56:16 2025 by rpki-client