Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ce7df3de-6d55-4f87-aca2-c0c4c3a51678.roa
File: ce7df3de-6d55-4f87-aca2-c0c4c3a51678.roa (raw, json)
Hash identifier: FvrJAD5OGegDggz3oZdGFcWJ3Xsths3TlI+ol159tjo=
Subject key identifier: C0:63:32:75:44:15:2E:D0:92:92:70:53:34:1B:0E:E7:09:E3:07:78
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 12E878F02189D1D660F73D86AC990344F728D722
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ce7df3de-6d55-4f87-aca2-c0c4c3a51678.roa
Signing time: Sun 04 May 2025 16:18:16 +0000
ROA not before: Sun 04 May 2025 16:18:16 +0000
ROA not after: Sun 08 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 May 2025 16:38:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:e8:78:f0:21:89:d1:d6:60:f7:3d:86:ac:99:03:44:f7:28:d7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 4 16:18:16 2025 GMT
Not After : Jun 8 23:59:59 2025 GMT
Subject: serialNumber=f023fbdb9f4c524e3ad919659dfb2f48311065c537481bba66c1b14619d2e910, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f7:f6:b3:be:4e:08:55:d2:9f:80:ec:30:a0:
46:69:54:5d:14:75:af:de:71:71:1c:66:64:f3:cd:
07:4d:a4:a4:95:55:78:ab:78:3e:75:22:fd:d7:05:
dc:a0:03:16:05:ec:87:4c:60:2d:ba:20:6a:a9:4c:
ec:a7:bf:ce:83:9f:63:8f:f6:6c:b5:a8:80:57:9e:
4e:da:7d:65:60:bf:1c:1d:43:04:4e:58:0c:b3:46:
6d:e6:13:1f:8a:0e:26:f8:04:2f:1c:18:62:e6:de:
21:66:21:c6:d0:6c:06:74:e9:66:a9:48:a4:e4:0b:
1d:65:5e:15:0f:73:8e:ef:ff:c9:4a:59:a6:f5:6e:
a9:a9:e0:15:cd:6a:c7:4f:b6:cd:50:32:81:cf:2c:
8e:3a:e7:c5:f9:17:f3:b0:f1:16:4a:d1:69:d8:ab:
31:29:b1:ad:ca:ca:07:b8:47:3b:74:25:76:27:2e:
14:30:cb:66:ea:f7:c1:a0:3c:0e:9b:91:28:f8:2e:
f3:da:5b:27:b0:0a:de:1d:70:c1:60:4f:50:da:81:
94:bb:45:88:6d:ee:5c:c2:2e:5e:e9:c8:bf:53:36:
9a:ae:c1:35:22:1c:41:00:e4:41:28:a3:62:65:0d:
41:dd:9a:98:43:fc:a0:3c:75:17:56:85:86:a6:22:
83:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:63:32:75:44:15:2E:D0:92:92:70:53:34:1B:0E:E7:09:E3:07:78
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ce7df3de-6d55-4f87-aca2-c0c4c3a51678.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
84:83:6c:89:0b:fe:a4:63:98:5c:80:ae:77:be:7c:d4:a5:2c:
5b:e3:d3:b8:03:40:41:ff:29:b8:e1:4a:b0:b9:34:34:6b:01:
7b:66:e5:cc:21:20:cb:a9:46:64:0b:4c:6f:ec:d1:07:68:a2:
26:2f:3b:92:3f:d6:79:39:9e:d3:e3:01:11:a9:4f:8b:d6:42:
a1:6c:c9:ed:fc:67:27:d6:5d:4f:16:19:1f:b0:92:88:c6:21:
aa:26:a2:30:fc:f2:8b:74:18:22:a2:71:0a:ec:79:83:29:cc:
14:d1:b0:b8:63:8c:6c:83:64:b6:da:1d:0f:12:6a:7b:75:44:
0f:20:f7:e9:f6:4c:df:db:7f:3d:68:d3:94:fc:2d:c9:b3:49:
38:ba:e8:ec:4a:5f:a3:c2:f3:48:69:3e:42:31:8b:1f:5d:d8:
d7:4e:14:9b:bc:18:7c:b8:83:2c:28:ae:e1:50:b0:24:1b:55:
5f:a4:7a:20:00:41:01:9b:ff:9d:bf:6f:96:c1:88:72:72:57:
49:59:ea:ab:15:96:bc:66:a8:47:4c:3d:ff:5a:8b:55:d9:f1:
99:c7:11:18:73:3c:18:96:d4:52:87:9d:be:3c:1c:f5:12:b0:
eb:a5:1d:d2:ea:55:6e:b7:33:9b:4c:d4:dd:32:a3:e2:31:68:
b9:00:a2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:18:23 2025 by rpki-client