Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/67086cdf-7464-4229-ba7e-ac65523ed979.roa
File: 67086cdf-7464-4229-ba7e-ac65523ed979.roa (raw, json)
Hash identifier: H2KqRWHclGz0iO2gD+RFB9OPPg0e33SM5w9W/MOjrtU=
Subject key identifier: 25:8C:1D:1B:B8:DB:17:85:2C:1F:6B:41:F5:8E:4B:31:84:7F:63:90
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2B3F399ABAEE29E29A03903AEF17D74E4D8A199E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/67086cdf-7464-4229-ba7e-ac65523ed979.roa
Signing time: Mon 03 Mar 2025 20:53:18 +0000
ROA not before: Mon 03 Mar 2025 20:53:18 +0000
ROA not after: Mon 07 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:3f:39:9a:ba:ee:29:e2:9a:03:90:3a:ef:17:d7:4e:4d:8a:19:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 3 20:53:18 2025 GMT
Not After : Apr 7 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:6d:82:d3:d8:fc:4e:32:fa:6d:c6:d8:8a:
d3:99:b3:66:28:b2:2c:c4:84:90:7b:a7:9b:b3:ee:
31:f1:f0:a5:0f:4c:c0:74:ff:f0:2c:63:1e:c3:da:
31:fc:1c:67:fa:ba:57:a5:c3:72:53:a8:4e:5b:d0:
98:9c:a1:7e:50:7e:7d:16:b9:20:e3:0c:d4:1a:0d:
4d:2e:95:b1:f7:6e:ac:2a:e3:06:f2:9d:29:12:38:
27:e9:7a:cb:b8:87:c7:56:34:2d:58:00:17:fb:ad:
95:81:7e:42:6a:5d:15:68:ff:d5:00:f6:2e:b7:4a:
21:dd:86:2a:4c:64:b5:e1:81:39:29:3b:43:1f:2f:
68:22:ed:06:b2:bd:a3:90:56:79:2c:d1:93:28:3a:
d6:a8:dc:39:fd:d1:fd:56:41:20:d0:c7:b6:c3:75:
99:e5:a3:91:0d:63:f8:a1:71:7d:e9:73:f7:52:f8:
f7:48:7c:d2:11:0a:82:a0:fc:88:f1:69:4c:66:f8:
7a:73:1e:aa:bc:13:df:d4:af:5b:80:e0:d2:ed:f6:
ac:ef:c5:2f:77:6f:12:a8:de:7e:f8:28:00:6c:f9:
43:74:30:f9:22:64:0f:74:1a:e0:54:91:ca:e9:c1:
80:14:63:a4:0c:c0:76:e0:21:9d:c6:aa:71:d1:05:
e5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8C:1D:1B:B8:DB:17:85:2C:1F:6B:41:F5:8E:4B:31:84:7F:63:90
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/67086cdf-7464-4229-ba7e-ac65523ed979.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e5:a9:b5:e0:07:57:45:07:da:68:7e:db:7a:b9:b5:00:33:
59:2a:65:88:fc:2b:d8:48:7e:e1:6e:aa:69:33:00:12:bf:de:
eb:03:23:db:9e:df:e8:47:92:5b:30:34:46:c0:14:60:83:fd:
bc:d2:10:4e:ef:61:20:56:46:7a:c1:26:b3:65:66:7d:ab:f4:
05:4d:16:72:37:df:4e:78:01:2c:7e:91:36:7f:9d:ba:3b:68:
16:b0:02:3c:89:09:d6:4f:e1:57:84:a2:4d:20:27:65:73:a6:
73:0d:f2:55:2a:58:73:1e:06:09:86:24:7c:a6:ab:90:c5:37:
dd:d4:69:6f:85:6f:72:0d:f6:0d:13:3d:41:ac:43:88:21:53:
d2:bf:ed:98:e7:12:6f:83:33:b3:a1:3f:0e:a7:58:d3:f0:21:
ad:a8:06:92:4e:29:5b:08:0a:53:ef:4c:26:36:1d:95:fa:fa:
76:49:af:c3:3b:37:be:9f:4c:81:b2:08:c4:53:37:74:55:d8:
57:10:c8:76:3c:68:6a:c8:28:1a:71:3b:4c:f3:52:be:91:7c:
54:b2:6d:2a:2f:85:f6:e4:39:47:25:0b:9f:9b:7b:ac:04:17:
e0:c6:ce:21:fa:e1:b5:a5:1f:10:32:9c:3e:ed:56:ba:af:8f:
14:a6:25:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:21:31 2025 by rpki-client