Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c901ede7-7f7e-4a7f-9cc9-47f5683aed26.roa
File: c901ede7-7f7e-4a7f-9cc9-47f5683aed26.roa (raw, json)
Hash identifier: efrAyGJfunUpYTLrd/QYyFKlBIiv6HYm9BTQRa6HWHs=
Subject key identifier: E4:A9:2E:1F:F5:F3:50:66:62:F1:8E:56:80:00:1F:D4:38:D8:C3:1E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0BA671842CD5A7C4168301215418343D54630023
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c901ede7-7f7e-4a7f-9cc9-47f5683aed26.roa
Signing time: Wed 30 Apr 2025 14:03:20 +0000
ROA not before: Wed 30 Apr 2025 14:03:20 +0000
ROA not after: Wed 04 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Apr 2025 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:a6:71:84:2c:d5:a7:c4:16:83:01:21:54:18:34:3d:54:63:00:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 30 14:03:20 2025 GMT
Not After : Jun 4 23:59:59 2025 GMT
Subject: serialNumber=5b93a2a73b0188149d7715eff58e4ffb1fa4e66002b46334d8f0e0a0f46fdd88, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:4a:16:2c:d7:a3:5b:d1:88:fd:a5:de:87:
74:e6:cf:dd:44:66:4b:c8:7a:2b:56:af:2e:8e:5c:
76:0a:c8:51:f4:2d:5e:16:64:2c:21:d0:59:c5:f3:
a9:3c:9c:e6:9e:55:bd:36:3b:5a:5d:8a:9a:f9:42:
b9:7e:94:0e:1c:e5:9f:ac:a4:aa:36:05:3b:84:da:
0f:c3:1c:e1:dc:57:5d:41:57:48:32:1f:ed:ae:bc:
8f:de:fb:08:e6:fb:32:f7:99:9a:b0:ed:62:e0:2a:
83:71:48:00:9b:22:57:92:5c:cc:4c:06:8f:dd:e6:
bc:2c:39:76:95:53:01:fc:b0:dd:d7:a0:1c:6d:c6:
69:07:b8:14:78:a8:e8:06:68:55:c1:93:58:5d:15:
c6:df:20:3a:69:b6:78:70:36:0c:aa:e4:50:8d:81:
fe:87:36:1a:48:b7:f9:4a:da:01:ab:4f:ac:45:83:
1b:90:3d:c9:3e:f0:35:eb:21:a1:fc:70:f4:86:d4:
4e:66:22:f1:f7:b2:31:18:79:b8:39:7b:df:6d:ec:
be:87:8e:bc:96:64:5b:61:33:59:c3:ce:c5:9b:55:
2a:f6:53:a0:88:fe:cd:be:ab:1a:69:10:fe:ef:b6:
02:e9:83:8b:6a:15:77:6f:3e:9d:d8:57:ce:c5:98:
48:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A9:2E:1F:F5:F3:50:66:62:F1:8E:56:80:00:1F:D4:38:D8:C3:1E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c901ede7-7f7e-4a7f-9cc9-47f5683aed26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
64:cb:92:00:6d:8c:b6:b4:7e:02:dc:f0:5a:66:05:e9:de:d4:
68:20:32:9b:3e:4f:f9:3f:15:68:1d:8c:ad:46:98:81:59:f6:
f2:82:97:a4:19:f8:a6:f3:5c:dc:bc:52:ee:c3:05:ee:1d:a7:
17:07:a9:64:bd:53:e4:68:1e:bd:09:87:5b:74:b7:b0:fb:cc:
fe:7c:9c:9b:72:f5:a3:29:70:f2:29:0a:77:fb:77:eb:cd:8c:
d6:95:0d:d8:95:31:01:40:6d:b1:79:34:67:3e:bd:7c:6b:13:
fe:9e:44:16:c3:83:d3:be:8f:02:b7:be:8a:ed:34:bb:49:aa:
26:a2:9e:25:14:4b:c9:7b:2a:b5:9f:78:e8:8c:5e:ca:60:ca:
0a:47:10:d3:3c:1b:f8:62:95:c6:bc:09:8b:b5:34:3b:b9:89:
c3:8c:4b:03:51:dc:1e:94:63:b3:da:39:5b:44:84:70:57:5e:
de:63:c4:e3:de:f7:d0:5d:f5:99:36:b0:8b:15:4d:e6:9f:c6:
6f:6b:f8:19:d6:ab:4e:0b:f0:42:b9:43:ad:3e:37:5a:5b:29:
a9:8f:e2:cb:e1:b9:d6:15:3c:eb:4a:13:d3:20:9d:94:4e:ba:
49:be:e1:1f:2f:74:59:58:66:46:64:71:8a:ce:85:72:f9:ce:
69:c0:b4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:02:22 2025 by rpki-client