Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/04e6634f-6b7e-4c29-8c78-a7889feccd03.roa
File: 04e6634f-6b7e-4c29-8c78-a7889feccd03.roa (raw, json)
Hash identifier: E1GtRyWqSvGdPkf4ITJHvdgvCOqNuBO9rka5gCBzTko=
Subject key identifier: 9A:35:5D:0F:20:38:80:DB:21:B5:DB:0B:25:E3:5B:A4:DC:69:DC:63
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 498F850854A55862B017CB0D733A64AC95451C2B
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/04e6634f-6b7e-4c29-8c78-a7889feccd03.roa
Signing time: Sat 08 Jun 2024 00:00:00 +0000
ROA not before: Sat 08 Jun 2024 00:00:00 +0000
ROA not after: Sat 13 Jul 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:f017::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Jun 2024 18:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:8f:85:08:54:a5:58:62:b0:17:cb:0d:73:3a:64:ac:95:45:1c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jun 8 00:00:00 2024 GMT
Not After : Jul 13 23:59:59 2024 GMT
Subject: serialNumber=f7b902066d4f625e3cd24f3fb3cbdd2b18c3a3e4a311f051eb583e33df47d096, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7f:66:bd:f2:80:e8:84:02:02:b3:1b:53:e0:
6f:86:d1:30:19:9c:49:4a:36:91:a4:e0:48:67:4c:
b7:27:00:a3:c0:44:a9:b6:27:ae:41:30:6f:45:c9:
63:af:c1:2f:a8:e4:0b:1b:63:b6:cf:ac:55:d9:75:
70:0b:27:d8:6e:be:e5:84:71:47:3f:54:f3:70:0d:
f3:3f:78:d7:78:94:48:0f:3e:84:f4:50:39:a4:ad:
38:66:49:bc:e5:83:65:36:e5:95:e2:7e:d4:54:97:
86:01:47:61:bb:f4:67:ad:f8:27:1a:e7:46:66:cd:
aa:21:b0:f7:b9:a4:59:d2:d8:91:e3:ce:91:9a:22:
79:f0:3c:0f:ac:9b:d5:df:72:67:02:e9:8c:5e:bd:
83:8a:88:00:a2:6a:bf:ca:d7:dd:ed:d4:71:11:fb:
7c:21:7b:67:9b:30:b5:41:97:3f:20:41:fd:92:77:
5b:d6:c6:72:a5:b7:16:ae:2a:92:c6:9f:a6:86:25:
8a:f2:af:1a:5c:87:93:93:d6:7f:fd:17:08:72:28:
a3:96:3e:f1:43:26:a0:e8:93:18:ef:a9:d2:b6:15:
a0:43:74:b9:7e:0a:75:ce:eb:af:c1:62:76:8e:dc:
20:4c:90:99:0c:6a:1b:21:23:1b:2e:f6:73:f4:51:
a3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:35:5D:0F:20:38:80:DB:21:B5:DB:0B:25:E3:5B:A4:DC:69:DC:63
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/04e6634f-6b7e-4c29-8c78-a7889feccd03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:f017::/48
Signature Algorithm: sha256WithRSAEncryption
6c:2d:08:22:99:48:f3:4b:6c:52:8b:3d:9d:48:50:e4:1d:69:
ff:0c:d5:db:63:ab:a3:b6:2a:f4:ba:bc:f3:1e:b5:52:5a:aa:
fa:c3:3d:50:f7:9a:49:75:92:f3:f9:e7:ce:f6:ae:f0:23:74:
7c:f9:08:0a:87:4a:ab:9b:a7:31:51:bd:8e:c2:5a:09:51:03:
ce:41:7f:88:fa:bc:ac:b2:86:a4:1d:40:c9:3c:dd:1f:f6:83:
0a:ae:55:99:a6:aa:1d:2d:7b:2a:8a:7d:ab:db:f9:ba:3e:44:
18:9e:e0:ca:65:27:10:ac:9b:af:3c:b6:88:a4:8f:28:5a:97:
39:aa:3c:69:9a:27:15:ae:41:cd:34:75:17:65:85:63:b7:21:
02:23:07:2d:dc:6b:78:95:1a:bf:1e:14:84:bd:28:5e:d5:7c:
27:4d:db:d2:5e:dd:16:5b:24:e8:1a:79:67:ba:5b:23:06:21:
a4:6c:1c:30:94:6a:1d:9d:7c:13:5f:a9:ff:66:03:42:3b:67:
5b:2f:77:78:aa:fa:22:df:6d:cf:03:ca:4c:cd:08:7d:ab:df:
50:80:f8:1c:09:8c:16:eb:ef:66:03:81:bc:21:9f:f6:3c:65:
6d:c0:6d:0b:5b:ce:a0:a8:e0:59:89:ce:ec:e7:7d:23:ea:e6:
de:05:f1:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 11 20:46:49 2024 by rpki-client on console-fra.rpki-client.org