Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7cca7373-f6f9-4d66-90d9-298069e2d4b9.roa
File: 7cca7373-f6f9-4d66-90d9-298069e2d4b9.roa (raw, json)
Hash identifier: ys/R6PwRy6HqYsFux6qbRb/EA+CO2oYnMV3BjzueiTo=
Subject key identifier: E8:6B:49:77:41:E3:F2:E4:80:62:C5:34:E5:B6:AD:AA:F4:B7:DA:B4
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 21533F86C525ECC34189BEAE2A0FB3BB9EDD6265
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7cca7373-f6f9-4d66-90d9-298069e2d4b9.roa
Signing time: Tue 29 Apr 2025 01:33:19 +0000
ROA not before: Tue 29 Apr 2025 01:33:19 +0000
ROA not after: Tue 03 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Apr 2025 01:53:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:53:3f:86:c5:25:ec:c3:41:89:be:ae:2a:0f:b3:bb:9e:dd:62:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 29 01:33:19 2025 GMT
Not After : Jun 3 23:59:59 2025 GMT
Subject: serialNumber=d851f8ed6b8497570925061a0b01e67ce6a3bd2a75fe502cf815a28436bb3385, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:74:bc:70:35:40:d2:dc:48:27:ab:5d:12:
32:6e:32:70:2d:6e:0c:d6:06:41:9c:a5:ba:f2:8c:
b0:56:6d:3e:7a:98:c7:79:5b:4e:cc:d3:b1:ad:2e:
c3:96:9d:dd:0d:4d:a2:37:8d:89:22:48:ff:6a:b4:
fe:a9:d2:a5:2c:73:6a:77:c6:e5:28:d5:6e:ec:78:
3a:a9:d7:62:44:f6:67:ae:1f:10:8f:ce:7a:2f:7b:
22:8a:b6:85:00:e3:e5:ed:e9:1e:fa:ea:cb:a7:e1:
3c:f8:30:1c:22:55:14:b1:ff:77:fc:0b:f1:b9:2c:
1f:f2:d2:21:59:12:cb:fd:76:80:51:95:8e:d6:87:
c7:a6:d7:b0:24:c6:d7:37:e8:7d:ab:31:e4:30:50:
34:e9:bf:49:fd:75:ad:c3:55:c9:62:b2:fe:38:21:
06:ea:c3:03:a9:30:fe:74:3a:b8:c6:4b:f2:2c:d5:
64:57:bf:29:d2:9b:f6:86:1f:c4:ee:65:e1:ab:41:
e2:c7:29:0e:08:ba:6a:81:6b:8a:38:37:95:c3:ff:
56:bc:94:fc:48:3b:76:af:a9:5f:81:96:21:e8:58:
b9:bf:89:4a:a4:54:ee:c0:e8:74:47:d4:9c:59:16:
d0:83:46:73:b9:37:93:e3:d1:be:ff:ab:3a:58:5e:
9d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6B:49:77:41:E3:F2:E4:80:62:C5:34:E5:B6:AD:AA:F4:B7:DA:B4
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7cca7373-f6f9-4d66-90d9-298069e2d4b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:88:a3:73:65:33:69:83:88:c2:96:3e:64:c0:f1:fa:26:75:
fe:18:25:eb:62:d2:79:72:0a:1b:f5:44:bd:ea:5f:77:55:ec:
9b:bb:f4:f4:f2:8a:c3:be:14:a0:36:3f:be:cc:fd:25:08:05:
73:dd:71:b7:04:d3:56:8f:ae:16:3a:52:8d:c4:70:16:ed:f1:
e6:ed:df:47:05:93:83:f5:b1:0a:01:80:a6:2f:c1:6b:b4:bb:
e1:89:00:eb:31:68:44:1a:31:2e:a8:a4:29:d4:18:a1:7e:09:
e4:26:d9:40:02:46:3e:e8:2a:f9:4a:92:27:5b:8e:b4:46:fe:
9b:1f:02:54:4b:2c:af:05:47:5f:90:70:b4:db:d4:23:a8:de:
7c:53:bb:c6:e7:3f:1e:b3:4a:f4:1d:75:8d:93:6a:02:c3:54:
92:12:f9:46:2a:da:86:b9:6e:7b:12:ec:77:81:a6:f8:25:4d:
8f:ab:7a:18:ba:4b:d2:38:e2:31:ab:6e:9d:e2:37:c3:d3:c8:
bb:5d:22:ae:78:e5:59:70:54:3f:71:98:0b:66:88:b8:14:82:
07:97:91:cf:50:f8:06:90:85:d7:bf:22:60:ba:21:44:dd:51:
f3:3b:94:fb:4a:47:00:fa:1d:a3:07:4d:7e:8c:62:e3:b0:24:
6d:20:90:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:39:53 2025 by rpki-client