Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2fcf8f2c-9927-4a21-aaf0-14fbd63ec70b.roa
File: 2fcf8f2c-9927-4a21-aaf0-14fbd63ec70b.roa (raw, json)
Hash identifier: 2RJtpEBZyfK+5mrCnzTumr5K+Zvz5I66It51Zk4/RP8=
Subject key identifier: 6F:7A:34:2E:DF:89:35:CE:EE:7F:B3:59:53:5A:3C:E2:A3:42:14:A3
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 464E5DDFCEDFE4FD2E58E412B04D76A2F8BF7F8D
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2fcf8f2c-9927-4a21-aaf0-14fbd63ec70b.roa
Signing time: Sat 08 Jun 2024 00:00:00 +0000
ROA not before: Sat 08 Jun 2024 00:00:00 +0000
ROA not after: Sat 13 Jul 2024 23:59:59 +0000
asID: 8987
IP address blocks: 2605:9cc0:f01e::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Jun 2024 18:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:4e:5d:df:ce:df:e4:fd:2e:58:e4:12:b0:4d:76:a2:f8:bf:7f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jun 8 00:00:00 2024 GMT
Not After : Jul 13 23:59:59 2024 GMT
Subject: serialNumber=d2fcc3519db4aad4c6760dfe3e0c8305be5b7cfa93fb525434cbdd01a580e8cf, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:da:89:06:1f:f0:44:25:37:88:cb:7e:de:
44:f7:24:fb:0a:87:b0:9c:7a:1d:84:37:fd:0a:90:
9a:23:1d:d4:c3:69:2f:71:93:cb:15:0d:2c:f4:2f:
a1:e5:5d:b6:ba:0d:6f:7f:f4:17:77:9d:99:d4:9e:
81:f1:53:19:9a:30:a1:c5:71:82:88:09:32:2b:c1:
cf:9c:7b:c4:3c:88:e1:3b:bc:65:ed:cb:a9:e0:2c:
19:51:fd:ee:e7:17:c2:da:1f:81:a7:52:9b:d5:97:
b3:9a:96:de:f4:f9:4f:fa:23:e0:b7:5d:a8:fd:f0:
be:e3:78:58:fa:05:52:e1:03:81:65:04:28:e6:1e:
dd:b6:97:80:b2:3a:bf:2c:9c:cb:32:ce:9e:a8:af:
5a:30:b7:43:e4:d6:f3:0d:37:6c:61:68:3f:99:09:
b6:e0:ba:d7:28:59:cf:af:71:9a:09:7f:57:e7:85:
4b:2d:4d:07:8f:ff:1e:83:6d:e9:9b:f0:2b:05:7f:
ee:5f:54:7f:08:86:71:7f:ef:da:24:1e:0e:ce:4b:
2e:fd:e9:9a:69:e3:0d:b4:21:a2:d6:14:76:27:cb:
14:22:d9:88:4b:16:6d:9c:40:59:a0:b7:65:37:39:
76:67:4e:c2:66:97:e1:89:15:bc:6b:8b:b3:43:79:
a2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7A:34:2E:DF:89:35:CE:EE:7F:B3:59:53:5A:3C:E2:A3:42:14:A3
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2fcf8f2c-9927-4a21-aaf0-14fbd63ec70b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:f01e::/48
Signature Algorithm: sha256WithRSAEncryption
51:7f:d5:52:9f:6d:c4:30:03:22:1a:6b:40:30:4a:b2:5a:1c:
e8:58:65:80:fc:76:b9:35:8f:c0:9f:bf:5b:36:5e:aa:fe:31:
60:c4:93:f9:f7:9c:22:78:a8:a9:05:2b:ad:bd:7b:48:a8:ed:
12:68:9b:4e:da:a3:1d:87:01:6f:32:1f:e9:c1:82:1b:a1:e1:
fe:88:cc:f6:94:fa:c6:2d:f1:64:7b:79:76:41:c6:e2:79:a2:
7d:af:be:fa:77:6b:a7:42:e7:e4:9c:94:97:b9:a9:ab:d6:58:
f9:a1:62:e4:3e:44:20:8f:c9:b4:17:b7:c1:be:58:26:8b:5e:
26:de:b3:57:ba:e4:0f:41:34:20:5c:68:fb:58:68:c5:a2:95:
44:a2:c4:19:10:16:7b:32:39:b8:17:f2:ee:58:05:b0:af:33:
c3:77:a9:d4:15:ce:72:ee:3c:3b:d0:e7:98:83:39:fe:18:9c:
a0:99:1d:99:a2:0f:f4:a2:20:e3:06:a0:88:56:02:9f:35:4f:
3b:b5:27:29:fc:fc:df:07:af:9a:21:c5:8e:f3:13:1b:a9:80:
d1:e4:09:33:25:dd:f5:8e:4a:da:bb:fb:c8:92:f9:36:ce:07:
4e:74:b2:15:16:60:2f:5a:51:d2:fc:18:ff:60:cd:44:d6:dc:
d5:e7:90:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 11 20:46:50 2024 by rpki-client on console-fra.rpki-client.org