Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3c813456-06a6-4e7a-a7b6-0a02faf89bcf.roa
File: 3c813456-06a6-4e7a-a7b6-0a02faf89bcf.roa (raw, json)
Hash identifier: PGgIPgtlEXgVGZSmZL8B2/6BHuxU9KMT9AIZMyVaauE=
Subject key identifier: EA:B0:DD:B9:2D:03:A7:7E:1F:E3:4B:6A:5B:C3:09:15:9C:FE:90:30
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 4CCEE40A75193DD9C8B24BE5F0EC2359AB10AAF0
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3c813456-06a6-4e7a-a7b6-0a02faf89bcf.roa
Signing time: Fri 24 May 2024 00:00:00 +0000
ROA not before: Fri 24 May 2024 00:00:00 +0000
ROA not after: Fri 28 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:621::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Jun 2024 18:56:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ce:e4:0a:75:19:3d:d9:c8:b2:4b:e5:f0:ec:23:59:ab:10:aa:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: May 24 00:00:00 2024 GMT
Not After : Jun 28 23:59:59 2024 GMT
Subject: serialNumber=f6da9c17261b3bdd9a939fb714dffab94c92e6b465eff96d9d2f00c0a2f7a662, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:6f:d8:1b:b2:ed:b2:f4:9d:11:62:60:f4:
87:c7:dc:d5:1e:7b:06:42:3a:58:6b:0c:3f:e6:ec:
78:2c:5b:f3:22:9e:92:ef:ae:cf:45:65:01:0c:38:
d8:eb:a7:ed:b9:02:d3:4f:56:99:b5:4b:9b:f4:f8:
aa:21:97:62:b4:9b:a3:b0:e8:16:49:59:b5:b0:4a:
99:f4:dc:e5:67:1f:0f:5c:af:02:08:cd:12:cb:7d:
16:bc:63:94:d3:6a:ad:4d:ef:d8:0b:26:67:77:4d:
50:7c:21:af:7a:47:e8:1a:bd:a9:ec:60:57:0f:8e:
b1:2f:29:c5:78:8a:dc:87:29:94:18:7e:18:7e:29:
0f:d6:94:23:68:a2:4c:4e:dd:c3:53:2d:52:c8:89:
69:8d:c1:c7:d2:f2:d0:8b:0c:a8:85:ce:70:ab:4a:
ef:d5:e1:fe:3c:62:ec:27:aa:a2:3c:9a:9b:cd:ce:
a5:20:35:61:5b:01:fc:59:10:5e:5b:09:a6:37:ad:
06:26:af:b6:c6:0b:7d:0c:c8:f1:f9:9d:b0:27:6a:
5c:38:a1:9f:e9:5b:59:e6:20:f5:91:11:00:8e:c9:
46:a1:85:45:0b:90:48:02:30:0b:87:81:76:27:72:
25:1d:bc:69:ea:85:ca:48:7e:28:b8:22:03:91:0f:
55:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B0:DD:B9:2D:03:A7:7E:1F:E3:4B:6A:5B:C3:09:15:9C:FE:90:30
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3c813456-06a6-4e7a-a7b6-0a02faf89bcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:621::/48
Signature Algorithm: sha256WithRSAEncryption
a5:99:34:17:c3:16:00:14:9f:3f:e9:5d:b4:0c:89:98:36:67:
31:07:07:fc:19:83:65:a4:2c:b0:1f:ac:2a:49:91:7a:a0:ec:
02:b5:10:02:32:73:2e:15:90:d6:f4:e8:4c:34:4b:64:fb:98:
50:d4:27:42:a4:5c:c3:7f:be:dd:77:db:48:06:34:ac:50:f3:
36:7d:ba:ad:3f:09:2a:a9:68:67:f5:92:c3:04:7f:4d:e5:6e:
43:cb:5b:1f:8c:b2:6e:08:b9:0d:6c:76:62:a8:d1:3a:4c:ce:
a0:83:00:d3:fa:26:6b:9c:e1:25:13:49:ce:6a:07:c6:76:96:
28:ee:f0:ba:39:4c:a7:97:e4:bc:ab:49:4b:67:a8:a2:a9:cb:
03:ef:52:01:8e:d6:9e:2f:44:4d:7b:eb:f7:15:92:7c:13:f8:
1b:4f:e9:0a:1f:ca:de:82:8c:07:72:70:5c:13:14:66:80:af:
b8:bd:f2:28:d4:6e:23:d3:ac:f5:cd:d2:29:7e:4e:61:20:b2:
49:ee:31:fb:3a:bd:d4:5c:6b:3a:0c:94:a9:43:a9:3f:76:80:
67:06:4a:9b:a8:0d:dd:e4:3b:20:d4:31:8b:f9:e5:f7:8d:cc:
d5:c5:26:89:78:b8:4d:14:7f:f1:7f:3e:8e:6f:1e:90:3c:60:
01:44:49:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 11 20:46:50 2024 by rpki-client on console-fra.rpki-client.org