Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c2633939-1b64-47e1-bf7f-a6fe209e0d01.roa
File: c2633939-1b64-47e1-bf7f-a6fe209e0d01.roa (raw, json)
Hash identifier: GmvVh7368aoNDsKLt6xhrwP1qntTmUo5V/P6ZuueSA8=
Subject key identifier: 32:3F:44:CE:88:F1:3B:F7:1C:32:C5:98:C8:D3:9D:56:C9:B5:13:2B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 325EAB7598295B0C875DB8F240E76330D0E08255
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c2633939-1b64-47e1-bf7f-a6fe209e0d01.roa
Signing time: Fri 25 Apr 2025 08:58:18 +0000
ROA not before: Fri 25 Apr 2025 08:58:18 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Apr 2025 09:18:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:5e:ab:75:98:29:5b:0c:87:5d:b8:f2:40:e7:63:30:d0:e0:82:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 25 08:58:18 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=169147e348002d937a9cc8df16fc9abc25f7a917894127f84efad4b4c3cecb4e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:aa:33:7a:46:ab:28:d3:d4:8c:1a:4e:77:ea:
d1:80:15:a5:f7:69:70:fd:fc:13:ef:1c:40:43:49:
3b:bb:56:73:d8:3c:57:a0:c8:22:89:a6:90:73:85:
15:86:0a:fe:06:7f:d1:0a:84:a9:01:15:d2:e1:fb:
fd:36:57:1d:86:e5:45:e0:c2:6c:d3:31:84:03:7d:
fb:02:4b:d3:a5:5b:74:b9:cf:d3:bd:14:28:d0:e7:
ad:bb:ae:0e:b7:c0:76:27:2c:68:5e:7e:d0:3f:af:
f8:b2:60:54:ae:58:51:04:6f:ee:7c:22:23:1c:09:
33:a0:5c:0c:67:b2:7c:55:0d:08:8a:e6:54:69:02:
5a:d7:0a:aa:e9:ce:79:f1:91:6a:a9:36:2c:66:68:
74:95:a6:44:4c:5c:1f:f7:c4:79:39:5b:b5:0e:99:
11:a3:2c:7f:ea:f9:f3:27:ab:10:cd:0d:4e:06:18:
64:28:e5:2f:f5:f5:75:8a:56:c6:67:df:76:a9:75:
87:20:32:6e:db:58:f7:37:dc:50:b7:f8:08:c1:6a:
f4:8c:a9:9e:12:f3:ac:8f:e3:89:50:42:d6:43:4a:
29:56:c6:f0:3f:57:62:e7:6e:8e:e7:e1:fd:28:79:
86:50:85:2a:17:20:5f:83:04:9d:97:05:44:08:ff:
d1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3F:44:CE:88:F1:3B:F7:1C:32:C5:98:C8:D3:9D:56:C9:B5:13:2B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c2633939-1b64-47e1-bf7f-a6fe209e0d01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
99:fb:87:a8:5d:be:da:0b:08:7f:b4:56:d1:b4:1a:e7:be:32:
5f:1f:b3:ca:4f:46:e8:0f:90:b5:1f:32:07:47:34:d6:78:bb:
f0:ea:5c:70:7e:4a:92:19:2a:4d:8f:74:5f:cc:37:a4:1f:0e:
ff:12:3d:f1:c2:fa:7c:1a:13:be:9c:39:21:25:3f:eb:71:4e:
60:60:8d:88:b5:54:3b:a9:b6:3c:44:b5:7e:99:20:99:bc:ed:
f5:3d:84:e1:c9:d7:86:3b:37:a4:73:5a:34:96:2a:28:68:e5:
9c:b8:f4:75:0c:29:22:0f:5f:38:ed:73:c7:6f:34:b0:9c:58:
19:12:0e:9a:d9:52:0c:ad:a7:3a:c5:5f:e3:e2:32:ab:89:4a:
7c:7f:86:c3:a3:db:9b:2d:76:fb:cb:f4:34:f0:5f:cd:94:6e:
62:8b:fd:a0:e2:d8:8c:44:2b:12:4a:c2:85:81:9c:59:83:34:
14:42:9d:dc:2b:85:2b:9a:b7:74:c5:94:12:df:21:c4:66:55:
e1:30:d9:47:07:32:fc:b3:78:a7:f1:c8:97:9a:8d:e2:1c:dc:
a4:ad:d3:65:21:b5:b1:e7:33:a9:1b:9b:7f:fb:d6:7b:f7:ac:
c6:21:64:9e:67:e8:b5:46:7c:6f:f5:f9:48:a0:a7:0f:59:a8:
bf:13:b3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:21:28 2025 by rpki-client