Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ccf4bad1-7319-4e2b-925f-7405bfb54189.roa
File: ccf4bad1-7319-4e2b-925f-7405bfb54189.roa (raw, json)
Hash identifier: e0ejRWFVA5LN1uBGhNixqCdrMjrxoMvYkmqba3xHYd4=
Subject key identifier: D2:12:B3:A8:EB:DB:FA:B0:3D:88:69:43:49:F1:B1:42:EB:4E:25:21
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1EEA453B8B4BB2C10F83C3C7CDA1687A051F89A4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ccf4bad1-7319-4e2b-925f-7405bfb54189.roa
Signing time: Tue 22 Apr 2025 03:48:22 +0000
ROA not before: Tue 22 Apr 2025 03:48:22 +0000
ROA not after: Tue 27 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Apr 2025 04:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ea:45:3b:8b:4b:b2:c1:0f:83:c3:c7:cd:a1:68:7a:05:1f:89:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 22 03:48:22 2025 GMT
Not After : May 27 23:59:59 2025 GMT
Subject: serialNumber=0465d3737acac04ff8f5e08ca6d7df07bc913a69f05b914907409a21cb22fc9e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2e:65:92:a1:31:61:16:05:3e:41:0f:6d:5d:
06:5e:c5:67:67:bb:a2:62:24:c9:b7:28:67:27:9b:
27:0a:8d:45:28:13:35:f7:ec:18:88:11:36:5d:43:
e7:e8:e9:51:c9:26:96:14:e5:3c:03:90:fa:8b:f4:
d4:5d:90:13:39:25:cb:5b:78:dd:04:31:6c:84:2b:
55:7a:c0:90:4c:6e:bb:1a:3c:87:18:e2:a9:d7:30:
0d:ba:ae:5c:5f:e5:8f:38:37:74:f6:39:08:7c:f2:
67:ce:83:fb:7a:cc:e0:00:17:5b:e2:56:c9:de:ef:
1f:fd:42:01:8a:c6:8b:18:f6:b0:93:e5:73:8c:7c:
2b:c2:e4:6f:86:44:6f:11:c3:63:e2:f7:3b:5a:bd:
c5:73:f9:55:2f:4e:78:e3:a8:f1:a4:5a:3f:96:c7:
95:b5:bb:d3:e0:d0:eb:aa:8b:2d:64:6e:8b:3b:eb:
7a:cd:1b:fe:68:bf:b1:42:04:9c:01:b6:ce:67:dd:
81:08:dd:06:6e:73:16:68:01:00:90:00:3c:a0:1e:
fe:44:a8:a5:1d:42:e3:24:6d:a8:3b:b6:43:41:49:
a9:3b:a2:4b:22:c1:c3:c9:d5:a1:fc:28:f3:5c:1b:
d3:b5:8c:6b:40:47:bb:24:a4:06:54:c1:2a:95:c9:
2b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:12:B3:A8:EB:DB:FA:B0:3D:88:69:43:49:F1:B1:42:EB:4E:25:21
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ccf4bad1-7319-4e2b-925f-7405bfb54189.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
89:3b:d3:c2:c7:6d:64:c1:4d:bf:7a:e7:21:b0:6a:94:66:29:
dc:f3:0b:b6:5b:43:67:d5:ee:fa:43:2c:ad:78:65:05:0c:53:
48:8b:8e:6a:9a:16:79:cd:bf:df:54:ff:ef:1b:00:98:0b:82:
f8:b9:f3:65:a1:94:15:ae:91:8b:52:d8:fc:15:7e:ca:57:34:
84:2f:02:ba:f0:6c:b2:28:1e:00:8b:ab:61:af:3c:e2:49:a9:
b4:e1:0c:bd:28:25:8d:24:fe:b5:fc:97:2c:bf:6b:dc:43:b8:
36:b4:88:4d:d5:52:60:f1:6b:8b:3f:01:03:75:de:b4:52:5f:
ce:ff:03:9a:c7:a6:43:7f:07:fb:92:f1:1f:d0:cd:ce:f9:bf:
6b:16:75:30:d2:7c:e0:b9:79:44:04:34:0b:e5:98:99:d7:97:
91:c1:eb:bf:2e:22:b2:ca:d0:ba:bc:a7:14:23:a0:c8:20:37:
7c:f8:ae:4e:43:fc:58:21:14:79:f3:97:78:b6:f5:12:db:9c:
c9:56:9e:c2:54:62:0e:57:51:46:c5:76:79:20:78:00:27:0f:
26:75:45:79:e8:b8:d4:cb:3a:db:0d:b7:f6:85:d5:56:15:bb:
68:25:ca:40:ad:ed:3c:aa:0b:75:68:f1:fa:d0:e0:83:42:b1:
8b:75:a3:c1
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHupFO4tLssEPg8PHzaFoegUfiaQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNDIyMDM0ODIyWhcNMjUwNTI3MjM1OTU5
WjB6MUkwRwYDVQQFE0AwNDY1ZDM3MzdhY2FjMDRmZjhmNWUwOGNhNmQ3ZGYwN2Jj
OTEzYTY5ZjA1YjkxNDkwNzQwOWEyMWNiMjJmYzllMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDTLmWSoTFhFgU+QQ9tXQZexWdnu6JiJMm3KGcnmycKjUUo
EzX37BiIETZdQ+fo6VHJJpYU5TwDkPqL9NRdkBM5JctbeN0EMWyEK1V6wJBMbrsa
PIcY4qnXMA26rlxf5Y84N3T2OQh88mfOg/t6zOAAF1viVsne7x/9QgGKxosY9rCT
5XOMfCvC5G+GRG8Rw2Pi9ztavcVz+VUvTnjjqPGkWj+Wx5W1u9Pg0Ouqiy1kbos7
63rNG/5ov7FCBJwBts5n3YEI3QZucxZoAQCQADygHv5EqKUdQuMkbag7tkNBSak7
oksiwcPJ1aH8KPNcG9O1jGtAR7skpAZUwSqVySupAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU0hKzqOvb+rA9iGlDSfGxQutOJSEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2NjZjRiYWQxLTczMTktNGUyYi05MjVmLTc0MDViZmI1NDE4OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIk708LHbWTBTb965yGwapRmKdzz
C7ZbQ2fV7vpDLK14ZQUMU0iLjmqaFnnNv99U/+8bAJgLgvi582WhlBWukYtS2PwV
fspXNIQvArrwbLIoHgCLq2GvPOJJqbThDL0oJY0k/rX8lyy/a9xDuDa0iE3VUmDx
a4s/AQN13rRSX87/A5rHpkN/B/uS8R/Qzc75v2sWdTDSfOC5eUQENAvlmJnXl5HB
678uIrLK0Lq8pxQjoMggN3z4rk5D/FghFHnzl3i29RLbnMlWnsJUYg5XUUbFdnkg
eAAnDyZ1RXnouNTLOtsNt/aF1VYVu2glykCt7TyqC3Vo8frQ4INCsYt1o8E=
-----END CERTIFICATE-----
Generated at Sat May 10 19:09:17 2025 by rpki-client