Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9b8bd663-4be3-4d57-8222-339518511140.roa
File: 9b8bd663-4be3-4d57-8222-339518511140.roa (raw, json)
Hash identifier: /gOVCDSZIq8E4uz1oifMWqJSHidi+aLBMdoKorfIm58=
Subject key identifier: 8A:53:9A:D4:BC:C5:31:89:50:A7:9F:15:0C:61:4D:53:63:20:3F:AB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3D5E4C5B46B2757C9F46928875EF7F09573050F1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9b8bd663-4be3-4d57-8222-339518511140.roa
Signing time: Mon 14 Apr 2025 14:58:18 +0000
ROA not before: Mon 14 Apr 2025 14:58:18 +0000
ROA not after: Mon 19 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Apr 2025 15:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:5e:4c:5b:46:b2:75:7c:9f:46:92:88:75:ef:7f:09:57:30:50:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 14 14:58:18 2025 GMT
Not After : May 19 23:59:59 2025 GMT
Subject: serialNumber=4563d915350aae7411bbd1d2b6439a00faa06d01ca9f33dcabf8d6fe03a2e5ca, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:59:0b:97:2a:c8:c6:43:69:ab:df:57:f7:76:
76:14:a7:b4:dd:b3:2c:21:8a:35:71:52:30:b0:b8:
7f:62:78:f1:02:74:f0:de:3d:3a:eb:b0:bf:4a:16:
a6:b4:88:1a:f7:0d:fa:fd:00:46:92:de:88:a5:2d:
7a:b3:66:fa:e9:da:98:58:b5:8e:47:ab:4d:b5:6b:
f7:a4:e1:53:04:d6:b5:8c:53:4b:ed:33:2a:01:47:
2e:93:5f:50:17:b3:60:2a:ef:56:ed:a5:80:64:e9:
9e:a6:92:3c:ed:de:02:6b:23:48:59:91:ad:a6:a5:
62:c0:be:77:b8:0a:84:0b:05:69:d6:50:46:b6:17:
a1:7a:8e:19:d6:3d:23:64:ac:a1:26:07:7d:c4:f3:
64:c4:a2:55:83:41:70:3d:ec:56:3b:4d:07:c5:68:
bb:5f:cd:6b:4b:1c:ea:7b:56:9e:9e:fd:52:a2:b2:
08:8f:f3:0b:cf:cd:7f:60:d3:f3:db:4b:86:ac:7a:
18:34:b0:3e:9b:d0:c7:77:42:81:06:50:4c:f1:0b:
0a:8d:6a:54:83:f1:a0:b0:bf:fa:8a:97:e0:a3:e3:
d2:d2:0d:61:8d:92:46:e1:2e:41:19:1f:42:1f:1c:
1c:9f:75:da:9a:80:61:7c:12:0e:6a:e7:73:6d:75:
54:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:53:9A:D4:BC:C5:31:89:50:A7:9F:15:0C:61:4D:53:63:20:3F:AB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9b8bd663-4be3-4d57-8222-339518511140.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:0d:68:61:d4:45:e5:93:b7:36:1f:a4:c5:fe:ba:c6:ca:4f:
06:a3:78:28:07:bf:66:5d:e6:7b:1d:97:78:db:e8:f9:01:8c:
c6:34:dd:85:6e:91:01:ec:ba:2e:b4:1c:d6:5b:31:53:55:5c:
03:4b:c6:d5:78:e1:f9:59:56:b2:f4:a3:c0:da:a2:f2:ba:a1:
c7:8e:17:75:d9:7d:4f:80:c7:06:fe:62:d6:0f:c8:ee:e0:19:
d2:01:88:35:b3:16:aa:93:a9:68:22:1a:88:0f:cc:ac:06:87:
30:33:37:11:fe:cc:ca:1c:87:f0:8e:b4:c3:90:07:bb:3f:a1:
c0:9b:e4:1e:c0:4d:1e:e0:11:f9:73:9b:0f:af:c5:2d:d7:97:
ac:f9:2e:ce:c6:de:8e:15:04:67:0f:4e:fb:02:1c:09:05:df:
f6:f0:8d:34:cc:60:83:cb:ad:af:9d:5a:09:f3:db:a8:97:57:
ff:05:16:9f:4a:58:85:a4:a7:0f:15:e4:55:fd:13:6c:e5:73:
58:91:68:c5:9b:fb:92:7f:de:4e:5f:26:c8:a9:73:aa:b5:88:
a5:eb:3a:3f:43:f3:0a:17:57:f3:da:32:86:17:6b:52:57:fb:
c8:4c:fb:65:28:b6:b8:36:a9:bf:49:e2:e4:82:84:41:a1:15:
70:ad:65:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:39:14 2025 by rpki-client