Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2703fbac-bf99-43fc-b7f3-a5ffcd9d8dde.roa
File: 2703fbac-bf99-43fc-b7f3-a5ffcd9d8dde.roa (raw, json)
Hash identifier: FZquOhGo6RD2KLa371jdrjMbHVg8jTFU+VktHQC+KB8=
Subject key identifier: 8F:6E:58:36:96:44:E3:85:EA:50:DE:FF:97:C2:43:F7:2E:0C:54:51
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 3B5583DAB51774FF6EB5F3E203051C56318E6EE2
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2703fbac-bf99-43fc-b7f3-a5ffcd9d8dde.roa
Signing time: Sat 08 Jun 2024 00:00:00 +0000
ROA not before: Sat 08 Jun 2024 00:00:00 +0000
ROA not after: Sat 13 Jul 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:f021::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Jun 2024 19:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:55:83:da:b5:17:74:ff:6e:b5:f3:e2:03:05:1c:56:31:8e:6e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jun 8 00:00:00 2024 GMT
Not After : Jul 13 23:59:59 2024 GMT
Subject: serialNumber=bc79fd8afddce256595532029d5ba9525be471f21e8032ee5919e1ed7c3bc006, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:c9:7d:c4:e7:6f:cd:f6:b0:9b:82:70:6e:
e3:83:95:e8:a7:5b:f5:1a:de:1a:ad:1f:64:56:5d:
25:bf:8d:a8:61:b9:69:9a:2c:80:1c:f6:68:1d:77:
40:04:f3:d6:36:1d:cd:b1:91:78:dd:2d:3a:15:c4:
b8:dd:14:d0:bd:5a:db:47:2f:3c:6e:65:20:35:c8:
e1:02:03:84:46:62:0a:66:e9:4d:4c:f9:e2:0e:8c:
31:21:8b:24:02:71:57:6f:bc:c7:dd:b6:fc:95:2a:
d8:26:ee:29:8c:23:71:53:00:1f:c7:b1:15:39:8f:
f1:72:14:72:9b:11:d2:16:db:88:53:af:f0:59:93:
77:6d:0f:90:eb:05:4b:72:c1:c6:c6:27:16:53:37:
78:35:66:36:87:76:35:e8:b4:8d:b8:58:7c:33:d0:
ac:1d:5a:f0:7e:dd:10:09:a4:ec:02:6e:f0:44:0f:
46:2c:a1:07:ed:8a:dd:f4:aa:a2:2b:c3:8a:9b:06:
c6:ec:ac:14:55:3d:dc:e5:6e:e3:12:5a:2c:93:cb:
24:0d:bc:a7:99:cb:42:99:33:60:28:ca:9f:f0:10:
08:d6:71:b0:c9:43:1f:27:a4:8e:9f:53:38:49:73:
1a:fa:90:43:92:ff:18:f5:35:e3:ee:74:c4:a4:9b:
d4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6E:58:36:96:44:E3:85:EA:50:DE:FF:97:C2:43:F7:2E:0C:54:51
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2703fbac-bf99-43fc-b7f3-a5ffcd9d8dde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:f021::/48
Signature Algorithm: sha256WithRSAEncryption
51:13:37:71:aa:8b:d2:c7:11:e0:1f:a1:f0:f5:21:c2:32:9f:
7c:4c:bf:24:df:e0:7f:bb:c8:e6:26:54:dd:45:9d:f8:61:6b:
77:d1:4d:08:2b:f5:45:2f:f9:c0:44:ea:7c:8d:bb:0e:0c:37:
12:9d:35:ec:74:c9:3a:ef:6b:0b:9b:58:de:52:f1:79:a8:b8:
51:ce:22:8c:c7:4e:9b:c5:b3:96:0f:fd:4f:57:30:a9:b5:75:
f0:28:49:22:8e:a8:2d:e1:bf:c8:35:86:b9:e1:66:8f:e2:71:
2c:84:27:40:de:6d:09:85:95:d5:ba:85:e3:8d:75:35:94:67:
b8:6d:29:58:3e:eb:6c:fe:d8:b0:4e:e6:f5:cf:ab:4a:4c:cc:
40:f3:fb:52:5a:b8:55:c9:7d:a7:e7:83:f6:d2:ba:73:e3:3b:
ab:cb:87:ae:fd:a9:8c:b1:93:a6:53:42:1d:56:b3:63:34:61:
bb:36:98:d4:10:8d:1f:52:fe:2d:86:64:5e:df:be:5c:1f:60:
d0:e3:47:d7:4c:9d:98:ab:94:cf:53:49:f0:a2:69:c7:db:8d:
17:9f:b3:ef:c0:b9:4f:e2:ba:01:11:88:35:69:7d:aa:85:b8:
9f:f3:1f:ab:c8:98:13:37:fc:78:aa:32:f0:cc:56:11:a6:ea:
27:fa:25:bb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 11 20:46:50 2024 by rpki-client on console-fra.rpki-client.org