Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/238b91ff-7b5d-4a23-b862-d82b489fbff8.roa
File: 238b91ff-7b5d-4a23-b862-d82b489fbff8.roa (raw, json)
Hash identifier: j5RQeYOsw8tZhZOaIMPscMGilxpYgmr3wQA7hcYoYQA=
Subject key identifier: A4:BB:EA:4D:85:04:B4:79:92:5C:63:7F:AF:8A:76:FA:51:06:C7:46
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 7BD9561903925454EEB948494680A9DC7786F304
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/238b91ff-7b5d-4a23-b862-d82b489fbff8.roa
Signing time: Mon 10 Jun 2024 00:00:00 +0000
ROA not before: Mon 10 Jun 2024 00:00:00 +0000
ROA not after: Mon 15 Jul 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:f029::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Jun 2024 19:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:d9:56:19:03:92:54:54:ee:b9:48:49:46:80:a9:dc:77:86:f3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jun 10 00:00:00 2024 GMT
Not After : Jul 15 23:59:59 2024 GMT
Subject: serialNumber=0331e85246a0d8db6570640cb42d728142095fe0221178872794e87edd8f2af9, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:8a:a0:47:20:92:d3:36:cc:81:de:80:41:
a5:fe:25:9e:2f:f3:f9:f7:48:03:29:16:a8:43:5d:
9d:8c:89:b7:d5:25:80:24:f6:e5:fc:0e:02:6a:54:
72:bd:6d:5d:5c:d8:90:af:82:a4:48:3e:6e:16:40:
72:2e:af:d1:fc:a4:7b:cc:ee:67:2d:bd:72:89:87:
ec:98:8c:a1:31:bf:11:4a:67:54:ac:f3:d8:23:cd:
26:40:06:2e:60:1b:50:10:5a:d0:2a:93:8a:ff:2a:
69:5c:fe:6e:30:1b:47:56:b9:c5:ae:f2:c6:fb:f9:
73:3b:15:aa:d7:ed:54:70:98:bf:de:9e:2b:40:9a:
48:0c:b0:5c:a0:2b:7b:9e:a3:16:18:8a:ef:e8:cc:
46:6c:4a:79:da:9f:18:42:9e:bf:78:6e:4d:85:51:
72:a0:9b:3a:e2:4d:8a:24:6e:02:59:64:ab:8f:57:
c4:fc:6f:aa:66:f8:c4:f2:af:87:36:f7:03:2d:51:
10:73:94:29:94:94:f1:31:ed:dd:65:e2:b6:7a:ea:
ca:a5:1f:19:d0:5f:86:72:83:7c:9b:79:62:89:b9:
65:64:de:d9:16:89:ad:ff:ad:bd:3f:ce:f6:88:29:
e4:2f:8b:90:12:b1:2d:20:67:02:86:81:27:a0:86:
58:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BB:EA:4D:85:04:B4:79:92:5C:63:7F:AF:8A:76:FA:51:06:C7:46
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/238b91ff-7b5d-4a23-b862-d82b489fbff8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:f029::/48
Signature Algorithm: sha256WithRSAEncryption
51:bc:ba:38:d2:94:40:da:b5:05:04:85:68:20:28:cb:48:bc:
1f:fa:72:58:54:29:8c:82:5f:80:78:ba:31:33:83:48:58:09:
2c:6f:13:e5:4e:88:cc:3f:dc:74:64:58:d2:84:db:6f:ff:6d:
65:90:2d:79:b5:e0:16:b2:58:ae:07:2e:a9:7f:8e:47:78:9c:
48:fd:1d:ec:50:45:38:5f:8c:f3:96:6d:db:49:a7:ef:07:59:
29:e2:a6:d3:95:20:c0:fc:02:f5:88:0f:67:bf:db:15:43:34:
df:78:0c:2c:1d:08:b9:39:19:15:85:1b:39:47:a6:5d:ff:78:
d7:2b:d5:b2:18:eb:ce:40:2a:f3:4a:b3:d4:68:31:bf:2f:c1:
76:c0:28:97:19:bc:db:6f:bd:23:2f:d7:cb:6b:03:95:46:31:
e8:42:d9:df:2c:63:66:03:0b:2a:3c:bf:52:ad:c1:c6:da:44:
72:b4:26:d1:c7:0a:33:a3:1f:31:81:0c:cc:da:be:a7:2a:7a:
40:9e:b9:71:c7:d1:93:0f:c4:f3:3f:fd:93:93:13:93:98:89:
2f:e4:9f:9d:a8:3d:56:d0:d2:e7:77:55:58:08:f3:59:6f:16:
9a:dc:6e:e2:33:fe:dd:9e:d2:ad:23:76:f1:a7:06:0f:24:9a:
40:ab:7b:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 11 20:46:50 2024 by rpki-client on console-fra.rpki-client.org