Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/94a2c802-7fd2-47cf-b755-a77a6f18b56d.roa
File: 94a2c802-7fd2-47cf-b755-a77a6f18b56d.roa (raw, json)
Hash identifier: BXXaWv6eooglKrbdpTe+SzBZ3YKU4NrUeSAH4fGaiSs=
Subject key identifier: 33:A1:FC:E7:D5:A2:94:EA:F9:37:21:EE:11:55:11:0A:10:47:52:CE
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 2F93D1A557498B165CE5A39AC4D0C34A3132660C
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/94a2c802-7fd2-47cf-b755-a77a6f18b56d.roa
Signing time: Sat 08 Jun 2024 00:00:00 +0000
ROA not before: Sat 08 Jun 2024 00:00:00 +0000
ROA not after: Sat 13 Jul 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:f01d::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Jun 2024 18:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:93:d1:a5:57:49:8b:16:5c:e5:a3:9a:c4:d0:c3:4a:31:32:66:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jun 8 00:00:00 2024 GMT
Not After : Jul 13 23:59:59 2024 GMT
Subject: serialNumber=27f1705f11c93dee198644e8933965ba0cf0116175be149b7b37b4171c782908, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:e5:97:4c:9e:c2:27:a4:0f:a7:65:77:d1:
2e:46:ee:af:16:8a:eb:ac:f5:e9:e4:70:db:eb:21:
c5:34:8d:16:8d:be:ea:05:20:c1:7d:f2:5f:ac:c4:
c3:76:22:c1:a0:8e:f6:27:10:80:ea:f9:6d:2c:9c:
ec:a6:a9:9a:29:9b:67:89:99:b2:d7:c2:99:a3:23:
bb:de:eb:ed:98:de:9a:21:79:20:17:e1:e5:7e:ad:
ba:be:34:c4:59:3a:e9:f8:06:9f:ce:19:c8:f9:70:
2c:48:a1:16:62:cf:63:85:75:94:24:7d:89:31:0b:
7b:60:0f:1b:9d:73:8e:8b:bd:77:09:fc:fb:51:7d:
93:a5:c8:e1:26:21:5c:a8:38:f6:3b:1d:c6:65:2f:
8a:d8:cd:61:c7:26:18:0e:70:2d:83:12:da:a1:06:
e3:30:e9:9b:a6:3c:b4:76:93:c1:58:1d:ec:31:3a:
60:1c:e5:19:d0:ee:63:02:0b:3c:86:d1:78:17:8e:
4a:79:73:3a:d0:76:bf:73:d1:ca:2c:73:1a:ed:20:
6e:86:c6:a2:8e:6b:8c:74:b0:9f:61:a9:30:21:06:
1a:c2:98:75:ed:c4:c4:85:8d:16:52:09:53:d5:be:
ca:9f:95:d5:8a:43:db:ae:55:37:25:6f:27:b1:d0:
53:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A1:FC:E7:D5:A2:94:EA:F9:37:21:EE:11:55:11:0A:10:47:52:CE
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/94a2c802-7fd2-47cf-b755-a77a6f18b56d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:f01d::/48
Signature Algorithm: sha256WithRSAEncryption
83:d9:7e:b5:58:d2:e1:72:0f:bf:a7:80:ce:94:2a:82:eb:8b:
2d:6a:8a:ae:26:c5:3e:c6:65:8f:1a:94:0e:33:8a:bf:01:b2:
3e:0a:e8:da:ca:d9:97:91:74:1d:1d:a4:26:27:38:07:3e:dd:
b8:68:45:f6:40:96:b1:06:a8:db:76:a7:f7:24:90:b5:ee:d0:
04:b8:2c:e8:23:5c:31:11:1a:fd:f9:ce:a5:ec:09:a0:64:3d:
8a:23:7a:1d:8a:1f:7a:ea:d0:d4:45:ea:16:48:d8:00:c9:77:
29:4a:b1:d2:ed:54:ab:5d:d8:7e:bc:66:91:af:30:bd:c0:e9:
7f:99:75:bb:b6:b1:b2:8c:8d:66:3a:cb:ab:7c:75:1b:59:ae:
98:cb:9a:32:9a:27:5e:6b:ff:fe:70:26:15:0f:63:8e:bc:7b:
95:38:90:ec:2c:73:33:be:53:3c:f2:33:58:96:2d:c4:7a:40:
a8:af:87:e4:26:b7:47:31:9a:52:f0:04:55:1b:55:d8:f3:29:
78:b3:4e:ba:5a:dc:ac:f9:de:8c:6b:66:ed:64:93:0f:a9:97:
1f:bb:a5:ac:ac:b4:c3:7e:5f:35:14:9f:87:6c:dc:e0:f5:c6:
9a:2f:57:ff:99:e6:9a:fa:d6:5a:c1:3d:7e:34:3d:4e:3f:61:
76:e3:c7:f3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 11 20:46:51 2024 by rpki-client on console-fra.rpki-client.org