Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/92bcb73f-f542-4054-8984-1847e8ea5903.roa
File: 92bcb73f-f542-4054-8984-1847e8ea5903.roa (raw, json)
Hash identifier: LLE5WA6FZOzIKajzeIngywdltkx4uvrji3pmzen9Y4Q=
Subject key identifier: DC:BD:2B:C2:70:72:61:5D:67:19:3F:5C:51:5A:A8:9A:B9:F5:3A:EE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0F17110C5FC46B4ED3D59C4949E1A3E008368782
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/92bcb73f-f542-4054-8984-1847e8ea5903.roa
Signing time: Sat 26 Apr 2025 11:43:19 +0000
ROA not before: Sat 26 Apr 2025 11:43:19 +0000
ROA not after: Sat 31 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Apr 2025 12:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:17:11:0c:5f:c4:6b:4e:d3:d5:9c:49:49:e1:a3:e0:08:36:87:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 26 11:43:19 2025 GMT
Not After : May 31 23:59:59 2025 GMT
Subject: serialNumber=0698fb9bc92625877cf6b20a4bc3f21a1172da46eb4fef4fa26f2a245a096fdc, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:03:ad:36:9e:75:78:46:f2:e5:48:7b:d4:
8c:75:99:8f:5c:05:d4:94:df:39:03:f2:2b:4f:6d:
5e:83:45:68:e9:a4:0a:91:65:78:63:9f:4e:a3:8a:
69:c0:d2:fb:f1:83:f2:6d:3d:27:0e:ef:37:b9:d8:
8b:11:b7:a6:68:f6:ee:af:f3:33:36:e8:75:6b:6c:
9d:ae:b4:c1:f4:a3:e8:c7:60:08:f6:6b:6d:d2:f9:
22:f4:04:87:0d:57:e8:c5:c2:98:68:f1:be:75:f6:
c7:e1:b1:5a:a9:9d:97:77:ef:60:39:dc:d2:17:1b:
a6:cc:57:a9:bb:d8:78:a0:a4:4b:27:ff:c7:71:b4:
0c:3e:f8:44:c6:70:e5:23:db:95:1a:24:ed:c6:cf:
87:33:74:eb:b9:3d:ab:dc:c0:54:c4:ca:f5:d1:fe:
d1:c8:d6:b9:52:32:55:43:3e:42:2f:68:dd:3a:ce:
0a:48:69:97:9a:9f:52:ae:2f:4b:30:3b:59:2b:cd:
ac:96:f5:cd:09:4f:f3:3e:d9:c0:8e:42:d2:ba:38:
eb:61:5c:31:26:14:2c:26:4b:77:7a:67:e2:bc:a5:
e7:8e:3c:d1:b4:b9:26:b4:4f:b9:29:37:7f:4c:31:
40:e6:35:97:8f:24:b5:85:49:6c:c1:52:5f:9a:71:
a0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BD:2B:C2:70:72:61:5D:67:19:3F:5C:51:5A:A8:9A:B9:F5:3A:EE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/92bcb73f-f542-4054-8984-1847e8ea5903.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:b0:9b:90:b4:21:29:2e:2c:a5:b8:2b:58:1a:db:17:0c:61:
43:e1:64:69:e7:cb:60:ad:81:e6:fa:8d:41:a6:9f:af:19:c7:
17:3a:76:05:12:cb:f3:bc:e3:2f:f1:70:3f:2f:ca:08:ef:4c:
55:63:9c:6e:90:aa:58:6b:de:69:d0:5f:f6:9d:bc:61:41:cc:
e2:78:5b:cc:a5:eb:78:86:68:bb:3f:3f:3b:69:c3:88:11:9c:
c6:76:9d:12:70:02:4e:3e:f7:bf:a4:d8:08:66:5e:5c:a5:d9:
e7:d3:5b:9e:a4:f9:68:b2:4e:8e:a9:99:93:6a:8a:a1:3b:e1:
d4:9b:c1:63:cf:65:58:ef:08:49:c0:a0:58:97:96:f0:4b:58:
1c:74:32:11:8a:5e:f2:c9:5e:bd:93:c4:d7:cb:48:95:89:e9:
b2:a1:6f:e6:92:d5:9e:3e:44:8f:b6:fb:d1:68:1f:1d:30:12:
49:04:46:1d:cc:f1:04:39:8c:9e:65:d6:a7:b6:6b:40:7d:ff:
8f:1c:da:31:61:90:fc:b3:35:85:75:a1:5e:48:a3:62:53:48:
7f:e1:5d:68:4d:b0:41:7f:57:73:8c:2a:7c:eb:7c:1e:ba:4a:
f2:f8:f3:fd:c6:a0:c2:77:53:9a:93:9e:11:b8:2e:a8:33:7d:
c6:12:11:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:48:32 2025 by rpki-client