Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9581345d-9422-4bcc-9407-7079d53688dc.roa
File: 9581345d-9422-4bcc-9407-7079d53688dc.roa (raw, json)
Hash identifier: udrfQoJrSYVrdM//7ot2vC9dbLHpWCWwhOSZWuT6AAs=
Subject key identifier: D9:9D:C7:F2:75:46:D1:EA:87:E7:5E:9A:CE:93:71:0C:0B:87:1A:71
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 50E1319576D02670BC56BB34F751BB72AA6A2874
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9581345d-9422-4bcc-9407-7079d53688dc.roa
Signing time: Thu 27 Mar 2025 19:28:17 +0000
ROA not before: Thu 27 Mar 2025 19:28:17 +0000
ROA not after: Thu 01 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Mar 2025 19:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:e1:31:95:76:d0:26:70:bc:56:bb:34:f7:51:bb:72:aa:6a:28:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 27 19:28:17 2025 GMT
Not After : May 1 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:86:67:3b:21:a3:81:84:24:12:3e:7d:cf:1a:
55:1f:99:e3:5c:d4:51:0b:cb:ba:5f:46:2d:7e:e9:
f3:2c:80:7b:11:92:a9:68:2e:28:cf:42:09:56:b4:
1c:bd:ef:68:89:82:b5:fc:7e:d3:80:21:d6:c7:57:
ea:b2:78:bb:2a:29:67:c7:7b:22:0a:5f:c0:fe:fa:
ab:03:3f:02:54:15:fc:28:1a:8a:ab:a7:ef:a2:2d:
29:08:87:89:f5:c3:f8:2d:c0:15:a3:4f:aa:aa:3c:
05:9c:f0:9b:c2:5b:2d:3b:2a:73:f7:fb:75:c3:54:
cf:9b:a7:f6:db:36:ea:6f:88:0e:c9:ce:c7:8d:20:
76:6c:6a:d8:ca:de:e2:68:6d:6b:81:de:8a:f5:8b:
bc:04:98:e7:b1:0a:7f:40:e7:26:b5:86:10:58:bb:
21:cb:81:6a:6d:d9:fb:af:4c:ba:7e:12:aa:ff:2f:
05:47:5a:68:c7:6c:e5:33:25:56:cc:d5:3d:54:dc:
9e:eb:53:aa:1f:24:c6:9c:4a:a7:e9:de:8e:9d:cb:
ec:5a:18:94:b6:0b:9d:02:7d:06:4b:d2:8c:4e:93:
b0:61:ac:f8:b8:4b:97:53:37:c9:8d:76:3d:2c:70:
c0:09:52:7c:4d:b4:b5:ad:2a:13:9a:46:53:7a:95:
1c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9D:C7:F2:75:46:D1:EA:87:E7:5E:9A:CE:93:71:0C:0B:87:1A:71
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9581345d-9422-4bcc-9407-7079d53688dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
15:5a:ee:1c:de:56:82:ce:1d:39:6a:61:83:e9:96:e8:00:5a:
5e:b2:69:02:de:6c:b5:95:61:76:d4:e6:d5:28:72:69:9e:17:
c1:66:16:e1:71:17:00:d3:8f:6a:e6:66:fd:26:56:cf:2b:a7:
7c:8f:b4:97:9d:ca:78:10:df:93:05:a2:f5:0e:cd:80:d9:8d:
65:b5:03:24:ce:32:a8:5b:b4:f9:04:d3:e9:b4:3e:31:56:1b:
3b:43:f5:7f:01:0d:f7:db:56:dd:a9:b7:c9:00:23:03:a4:af:
3e:96:c4:75:ce:0f:a8:b9:e0:b9:7b:5a:c1:e0:28:ab:af:ef:
7c:aa:12:2c:97:07:2d:a0:38:1e:be:ba:c2:a4:0d:3f:23:fa:
d9:80:c1:83:f9:10:c1:7d:52:32:bd:5b:0d:61:e6:dd:ac:88:
b6:6a:4c:3f:e1:88:96:0d:a3:ab:b3:c5:4a:78:74:5e:05:25:
ba:23:0d:27:7d:01:99:fd:c5:aa:e0:8f:08:1b:3b:f8:73:d7:
b1:47:fe:13:6e:c6:82:73:94:fd:84:aa:e6:6a:fc:fd:f8:60:
b1:42:0e:1a:3a:23:42:eb:b4:49:33:55:e0:ab:87:cf:e4:c5:
61:4b:2f:34:c7:14:11:d2:5b:c5:74:58:ad:5e:20:d5:0c:c5:
e0:be:21:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:43:17 2025 by rpki-client