Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4b51188f-e826-4dd4-bbdd-91f37c941fae.roa
File: 4b51188f-e826-4dd4-bbdd-91f37c941fae.roa (raw, json)
Hash identifier: C1mXu4KXTCqC4ohUzx6KYPZk9XyInbZFp4I2LhG4ByI=
Subject key identifier: 81:6E:46:EF:D2:A8:22:B3:8B:95:F1:08:65:7F:2D:6B:0B:73:B3:73
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 133DEB5E89A2A4790358FB47B9D7A02C3BA823
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4b51188f-e826-4dd4-bbdd-91f37c941fae.roa
Signing time: Mon 24 Mar 2025 11:03:17 +0000
ROA not before: Mon 24 Mar 2025 11:03:17 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 11:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:3d:eb:5e:89:a2:a4:79:03:58:fb:47:b9:d7:a0:2c:3b:a8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 24 11:03:17 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d3:f1:87:31:fb:f7:b4:b4:52:c4:d9:d2:0b:
9e:47:52:2e:c8:c6:18:46:a5:60:45:05:77:eb:ba:
4b:06:db:65:2a:a8:65:f8:63:8c:02:ae:46:7b:4c:
65:a5:c6:49:f7:92:fc:af:c0:06:8b:8f:55:65:79:
3e:51:ce:bb:f4:28:ce:d1:0b:30:72:33:b4:fb:db:
d2:28:3f:07:0e:04:21:08:79:20:d9:5e:26:e5:65:
ee:f5:9b:68:e0:96:91:5b:6b:b4:c6:c9:94:47:5b:
ef:6f:5c:7c:ae:58:8a:61:01:d2:91:40:4a:b3:24:
b5:1c:38:b4:9a:e3:3b:ce:c9:a6:5f:0c:57:4b:0b:
e2:97:2f:5e:47:cb:7a:4b:1c:1b:1a:ce:ec:df:8f:
c3:69:46:aa:84:e3:6a:43:ef:91:e6:bc:be:a0:2a:
ac:28:37:45:17:bc:ff:72:46:a6:c9:87:31:08:77:
f2:2c:40:7f:58:c4:93:e3:60:b9:e6:94:5f:87:fd:
96:06:43:6e:af:17:69:8d:29:35:56:3e:d4:f1:9a:
ef:b6:4f:d4:9a:71:27:ea:03:e3:cf:5c:cf:46:c9:
bc:62:38:c9:d7:42:c4:0b:31:51:ea:74:fe:9b:c2:
aa:28:fb:0f:b7:de:2c:b2:0c:c9:24:55:d4:e3:dd:
44:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6E:46:EF:D2:A8:22:B3:8B:95:F1:08:65:7F:2D:6B:0B:73:B3:73
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4b51188f-e826-4dd4-bbdd-91f37c941fae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:1f:24:1a:80:0c:cd:b5:27:41:e2:f3:b8:d7:a1:50:a4:15:
fe:e1:8f:12:f8:d2:2c:6b:81:a0:07:97:7f:f1:ab:d2:98:a9:
f2:88:2e:e2:09:da:62:97:48:b1:e5:1a:76:28:b4:3c:d6:58:
91:55:48:70:64:12:d5:15:a1:90:8a:6f:f6:7c:58:03:ed:93:
9b:cf:41:85:11:7e:16:36:18:32:3f:6e:ad:d0:9e:e4:1b:cc:
3c:a3:73:6e:a6:7e:1f:b6:c5:3c:f5:88:48:2f:b5:18:93:9f:
ea:0f:a3:73:b7:62:09:61:5f:8f:f8:d0:7a:7d:f2:18:8b:df:
5d:07:ae:9b:8e:b5:05:1c:47:7d:ff:b8:47:77:5c:d9:6b:03:
2e:38:27:b3:41:e5:4d:a2:6b:36:d2:c3:c7:ad:58:09:4f:18:
68:58:d9:1a:ac:ef:4e:e3:12:56:24:2e:a2:d3:1d:60:09:85:
75:06:3d:96:c2:6c:38:ac:99:d4:34:b5:2d:2e:c0:fe:dc:82:
98:3e:9c:cb:d4:83:2b:ab:ae:a9:c7:6d:ed:13:ac:e7:aa:89:
27:52:80:b2:37:8d:d9:5d:89:48:6a:d9:f2:aa:ce:84:e0:b8:
1a:a8:4e:02:7b:d9:f0:9b:75:f3:3c:83:b7:12:31:a3:58:b1:
fa:a6:e0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:30 2025 by rpki-client