Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b3f4a6ff-470d-49f1-9ed8-2ae2b54cd66a.roa
File: b3f4a6ff-470d-49f1-9ed8-2ae2b54cd66a.roa (raw, json)
Hash identifier: rIUSHDrVVN1AA6C9xwHDv1pBzrGFb77hppXxck5qTSo=
Subject key identifier: D2:1A:2D:D8:6A:AB:A3:1C:B4:F6:50:00:ED:45:DB:5D:BF:B2:5F:5B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 79A9A629809A7CD8EFF76B5038B98A825B5796C0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b3f4a6ff-470d-49f1-9ed8-2ae2b54cd66a.roa
Signing time: Tue 22 Apr 2025 16:53:20 +0000
ROA not before: Tue 22 Apr 2025 16:53:20 +0000
ROA not after: Tue 27 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Apr 2025 17:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:a9:a6:29:80:9a:7c:d8:ef:f7:6b:50:38:b9:8a:82:5b:57:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 22 16:53:20 2025 GMT
Not After : May 27 23:59:59 2025 GMT
Subject: serialNumber=51a56d377e07688248a7e60962d09a03230f68938711e297b675121a792c488a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:39:0e:fd:24:14:88:a4:9f:ac:a7:3f:f8:
98:80:d3:ba:e0:45:55:1b:4c:11:4a:d5:e2:73:9d:
e4:43:93:ca:40:01:8d:36:ec:56:72:18:d5:a4:4e:
5e:35:04:50:47:8c:2b:e4:7a:42:ed:cf:e5:ce:d4:
35:42:33:3b:20:16:46:87:8f:6a:28:40:4e:ec:25:
84:8d:c7:ee:3e:ee:54:1b:14:8a:85:3b:63:fb:a8:
e7:72:f5:da:4d:07:9a:b9:84:dc:8c:e1:44:54:43:
05:50:c6:24:48:9f:51:d3:f9:02:3b:a3:6f:d4:8d:
81:48:3f:c3:91:9c:a2:6f:e4:33:ce:2b:7d:46:56:
dd:28:64:7f:9f:30:05:44:b3:41:5d:bb:d7:f8:d8:
f5:2c:ca:30:67:bf:05:dd:37:aa:8e:4a:8b:55:2e:
cc:cd:70:fa:36:bb:cc:dc:80:05:6d:07:46:13:16:
ca:f5:c6:65:f4:fe:b4:0f:47:b2:42:d3:17:8a:a2:
1f:7e:5a:87:66:e8:85:7e:5d:a1:d6:e4:78:4d:46:
47:08:cf:01:58:e8:4d:b9:2b:4c:97:c4:16:65:ca:
d1:d7:2b:b1:4b:51:9c:ad:87:e9:6a:78:23:29:49:
3d:c7:9b:ab:94:e5:c2:0b:4e:10:98:be:84:7a:18:
3f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1A:2D:D8:6A:AB:A3:1C:B4:F6:50:00:ED:45:DB:5D:BF:B2:5F:5B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b3f4a6ff-470d-49f1-9ed8-2ae2b54cd66a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
af:5e:52:c8:3e:9f:4f:df:62:f2:2c:e0:1c:20:9f:ac:3f:ab:
8b:27:7e:cb:74:93:1e:b2:61:1c:62:9e:de:e1:d5:ae:65:5d:
2f:61:2f:5d:3e:94:bf:19:22:3e:d2:25:d3:67:2f:82:37:90:
1a:37:37:79:9a:35:f1:54:df:55:e5:41:cc:0e:6b:13:4c:33:
76:2e:d7:ca:2b:b7:fb:93:4d:d2:97:36:73:f9:3d:8f:d6:a4:
c0:63:86:05:23:0c:34:08:b0:9a:da:95:1e:8d:9c:e6:41:0c:
a3:3f:c0:c7:c0:c0:da:0e:38:f2:30:09:49:9a:01:e8:b2:67:
90:6e:4d:5e:dc:c0:da:33:42:a5:c8:bc:83:f8:4c:18:88:f6:
8e:94:4e:32:35:80:48:f2:6f:49:00:6f:a6:67:ae:e6:75:50:
3a:10:50:73:91:73:c3:62:01:5e:b1:3f:71:4f:3e:54:4c:81:
de:d0:21:0d:17:ae:08:47:c1:ca:ad:c8:af:b5:12:b3:dd:c8:
b8:f8:9e:ea:12:ad:76:96:66:bb:ee:ed:bd:d7:66:9e:bd:ce:
a7:b5:89:b0:a5:51:b5:ad:56:ce:11:80:5c:ff:cf:58:83:f4:
7a:03:e3:28:5d:9b:6e:01:b7:89:39:82:af:8a:9a:e9:bd:de:
00:e8:b4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 12:59:17 2025 by rpki-client