Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8d59946e-7736-4541-a602-69ac3ef215af.roa
File: 8d59946e-7736-4541-a602-69ac3ef215af.roa (raw, json)
Hash identifier: MZmuB4knaeWeFXOtCoVZY1fu8AEO7SnZXZX9vIdGymU=
Subject key identifier: A8:A7:31:C9:38:B7:31:B6:98:D0:E9:CC:25:6F:19:5F:7D:0C:72:7E
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 581EDF7CA60293C96BE9404DFC45B458607D9969
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8d59946e-7736-4541-a602-69ac3ef215af.roa
Signing time: Wed 24 Apr 2024 00:00:00 +0000
ROA not before: Wed 24 Apr 2024 00:00:00 +0000
ROA not after: Wed 29 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:f002::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 24 Apr 2024 12:41:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:1e:df:7c:a6:02:93:c9:6b:e9:40:4d:fc:45:b4:58:60:7d:99:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Apr 24 00:00:00 2024 GMT
Not After : May 29 23:59:59 2024 GMT
Subject: serialNumber=fefe6d288cbdc070b40a114bfb7443c1dd06696d5de66e2874a0afe4abf95e86, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:b9:86:2c:f3:10:6c:c4:ee:bc:00:c0:b6:
f8:96:16:85:ad:11:fc:d8:bb:2c:36:08:e5:9f:e8:
04:15:f7:5b:79:0f:cc:cf:e8:4a:49:86:3a:1f:33:
7c:42:70:a5:48:5d:b9:45:0a:d8:c5:db:9a:75:74:
66:e5:8b:c3:d2:c4:51:e6:80:25:02:f4:48:9e:da:
8e:9c:c3:f9:05:c3:9b:48:f4:91:71:30:20:2a:c8:
bc:36:45:7b:9a:b8:a6:65:4d:9e:aa:77:d9:58:84:
76:f6:ca:32:a2:f7:af:47:5c:57:cb:1d:dc:9a:54:
68:ec:fa:0d:28:45:b6:f5:7b:7d:bb:c9:3f:78:19:
ba:44:c4:10:b2:65:d1:5c:f2:3f:44:8c:cc:1a:b3:
b4:ff:02:ee:a0:46:19:6c:e9:5c:fb:74:f0:55:cc:
0a:55:a4:f6:2c:31:db:4e:f0:62:f9:d0:ae:fd:96:
de:93:55:ac:85:fd:71:2f:a6:fd:88:74:9a:f6:5f:
8a:ae:92:97:9c:8e:53:1f:66:23:88:d2:9a:28:04:
4e:16:e3:c3:84:da:24:e6:a0:1b:08:04:6e:0e:ef:
c2:9e:f9:19:74:9a:80:98:e5:55:de:14:73:31:46:
89:86:ad:b7:1e:7e:4a:63:3d:fe:e9:57:16:9b:31:
ea:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A7:31:C9:38:B7:31:B6:98:D0:E9:CC:25:6F:19:5F:7D:0C:72:7E
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8d59946e-7736-4541-a602-69ac3ef215af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:f002::/48
Signature Algorithm: sha256WithRSAEncryption
67:c6:ee:9d:0a:37:65:cf:7e:24:0f:d6:36:95:fe:c6:11:e0:
ff:fd:b1:00:28:b8:9b:d2:eb:46:04:ef:df:e7:db:cb:70:5f:
58:e1:c0:0b:b5:89:e6:20:76:22:a8:7c:c3:fc:ae:2c:a2:15:
61:60:a7:1d:16:4c:66:d1:db:1c:c1:37:f7:46:4c:33:51:4b:
64:3c:1f:0c:6f:67:b6:77:e8:0c:f3:76:cc:db:ac:ee:9e:e8:
e6:0b:ba:9f:b3:0d:89:5e:74:a7:96:a2:80:dd:51:53:95:93:
2d:25:c3:cf:27:ce:da:54:18:48:12:6d:27:ce:f5:d6:97:a9:
1e:e5:53:6e:b9:ad:cd:25:1a:7d:f8:29:b9:00:1e:34:f0:f5:
17:b9:95:85:de:8c:39:97:99:e6:f6:11:78:f7:04:ce:3e:7b:
89:53:ae:97:80:f2:63:27:b2:90:cf:bd:6b:20:86:a1:08:6d:
7b:7c:f1:4f:b9:34:d2:2a:46:0e:35:56:1f:df:25:69:1f:2e:
47:f7:b6:46:36:f8:81:84:85:99:31:0d:24:c1:d3:9a:ac:dc:
52:56:21:b6:cf:b4:b5:5e:ff:04:14:f1:bf:5e:e3:73:4d:25:
8a:78:1e:88:d6:5a:17:32:df:1d:80:01:8f:82:0a:ee:5b:8c:
ad:2b:89:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 24 14:49:12 2024 by rpki-client on console-ams.rpki-client.org