Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a4c6734b-5de8-4a9e-b962-db4c4d0763e2.roa
File: a4c6734b-5de8-4a9e-b962-db4c4d0763e2.roa (raw, json)
Hash identifier: IM9ZuG9RwDNggFrWglSe3/CqWWHAj3ZuZMMrv7Z8dYE=
Subject key identifier: B6:50:09:69:81:11:F6:48:5B:47:9A:21:6C:8E:4E:84:C8:7D:06:EC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 69CB0BD689707A9DC2FA66CB8799C7F97D37DC7E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a4c6734b-5de8-4a9e-b962-db4c4d0763e2.roa
Signing time: Tue 22 Apr 2025 13:33:19 +0000
ROA not before: Tue 22 Apr 2025 13:33:19 +0000
ROA not after: Tue 27 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Apr 2025 13:53:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:cb:0b:d6:89:70:7a:9d:c2:fa:66:cb:87:99:c7:f9:7d:37:dc:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 22 13:33:19 2025 GMT
Not After : May 27 23:59:59 2025 GMT
Subject: serialNumber=37d175816fa42ab5128b5e7fe93229eac5d148f707e13a0e089d6e86047ec30d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a4:b6:86:12:de:47:c2:ea:17:63:b0:3d:cf:
96:d0:a4:3c:15:b1:7d:28:83:39:34:d1:30:51:43:
1d:07:34:75:10:81:2e:c6:6a:99:5b:73:51:d5:55:
05:45:25:71:bb:ef:93:00:17:b1:89:e7:dd:18:83:
6f:d7:93:53:0d:67:b5:fc:5a:9f:53:b0:df:f4:62:
e8:22:24:ae:e4:9c:bc:17:04:16:d1:9c:bf:c4:b7:
2e:db:3d:59:95:91:67:7a:2e:4e:fc:63:9a:24:28:
0f:f1:ae:22:0b:5a:41:cf:75:55:47:e9:55:6b:2b:
6a:39:c5:a6:2f:36:13:f8:cc:3e:47:31:3a:71:40:
ea:df:83:0a:72:27:17:87:a2:ef:aa:73:c1:ad:cc:
52:ae:53:08:d7:d6:e8:78:b5:60:ac:69:0e:0e:34:
05:47:16:3c:58:15:53:43:5e:45:a5:50:e4:ec:d9:
38:7b:bf:a3:e1:20:1f:4e:d2:ec:99:8f:34:f7:bb:
96:96:1c:95:bf:dd:3b:33:66:8e:76:97:4b:3c:a1:
d3:8a:90:ad:3d:86:27:85:df:be:af:a1:99:56:4e:
f9:04:37:8c:20:92:e9:7b:2b:a1:0b:a3:c5:7a:1c:
2c:66:bc:f8:36:78:e5:4f:10:29:16:28:58:a9:2c:
d7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:50:09:69:81:11:F6:48:5B:47:9A:21:6C:8E:4E:84:C8:7D:06:EC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a4c6734b-5de8-4a9e-b962-db4c4d0763e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
35:1f:db:04:97:f4:cb:64:04:9e:1a:51:a5:cb:3f:c0:95:66:
21:67:8b:15:91:7e:d0:4e:dc:68:7f:a6:7d:45:86:53:f2:d0:
c8:b9:da:f2:e7:d1:df:bc:46:a8:41:a2:c5:86:95:c8:00:d8:
7b:99:ae:3f:be:09:60:ba:ec:73:b0:34:21:bf:0f:8a:70:f2:
83:1d:f4:f3:24:c9:a1:dd:61:af:d7:2d:a0:55:67:12:5e:86:
3e:71:f9:1c:1f:6d:5a:cd:29:f8:66:ef:38:7f:5f:ff:40:33:
65:76:78:7d:f3:d0:e5:3c:30:48:c7:18:32:a3:06:0f:57:66:
4a:3e:b3:ff:dd:0c:01:97:78:f1:56:f2:ab:fb:4f:ff:fe:89:
90:8b:5e:39:25:d8:5f:5e:1f:5a:3d:a3:65:f1:7d:61:47:bd:
05:ee:d9:78:d0:f3:d2:ba:94:c3:7e:02:4f:9c:6b:57:18:9e:
cd:46:17:4a:c3:c5:94:5c:bf:de:22:12:b1:83:44:c9:32:82:
08:bc:be:ed:56:0c:4b:04:36:a5:a8:d0:88:7d:3a:68:e2:9c:
fc:da:aa:6d:1c:18:04:9e:91:6f:00:a4:07:30:7a:fd:58:6f:
76:03:aa:14:d0:3c:1f:5e:08:1d:37:dd:b3:44:a1:02:bf:79:
44:59:f2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:21:26 2025 by rpki-client