Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/954e13eb-7603-450c-b81f-093d12fea1f3.roa
File: 954e13eb-7603-450c-b81f-093d12fea1f3.roa (raw, json)
Hash identifier: B19SQU0fDZ57aQrTpH0c526reaPpKlPJSl4cPX3ODZM=
Subject key identifier: A8:32:C4:65:2D:6D:90:A9:AE:4A:ED:7D:A1:F3:E4:7D:1F:7B:85:3E
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 27FBC9272FAFA6C8B726BCE8E7CB3F01E47199F6
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/954e13eb-7603-450c-b81f-093d12fea1f3.roa
Signing time: Fri 07 Jun 2024 00:00:00 +0000
ROA not before: Fri 07 Jun 2024 00:00:00 +0000
ROA not after: Fri 12 Jul 2024 23:59:59 +0000
asID: 8987
IP address blocks: 2605:9cc0:f012::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Jun 2024 18:58:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:fb:c9:27:2f:af:a6:c8:b7:26:bc:e8:e7:cb:3f:01:e4:71:99:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jun 7 00:00:00 2024 GMT
Not After : Jul 12 23:59:59 2024 GMT
Subject: serialNumber=1aed1be0e3d9e75aa4c382ed3139de918b522864bb35ad7de28e51e5fc509189, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:98:d1:ce:c6:7a:ac:7e:fa:33:6e:c8:81:
b2:95:cf:0e:66:66:4b:93:ce:82:8e:aa:65:de:3a:
ef:a2:bd:35:63:26:13:aa:5e:e2:c5:be:6f:bb:64:
c0:e8:94:fc:39:9c:4e:9e:dd:cb:49:14:84:01:e2:
2f:62:b4:72:fb:5d:22:a3:0a:55:32:6f:c1:5d:ab:
02:f6:71:65:91:41:95:60:00:f0:04:b0:c8:28:70:
e7:dc:94:73:39:f2:97:e7:60:03:39:4e:bc:91:b4:
f5:e4:f9:ab:ed:a8:00:c8:f8:a6:53:28:58:96:92:
b8:57:8d:da:8f:1c:d2:f9:6a:ff:43:ab:bf:7e:d5:
42:0c:29:52:ff:46:93:06:1d:2f:b2:9b:69:01:13:
c8:97:4b:d6:07:01:4f:07:40:37:08:ff:ed:c5:18:
7a:ca:ab:f7:63:7b:87:1d:69:58:aa:9f:0a:f8:a6:
ae:5d:f1:89:bf:63:00:43:41:fd:eb:34:fb:a4:ad:
97:e2:f0:11:e4:49:6c:96:a4:c6:17:5a:d8:1b:66:
91:92:29:97:a4:ab:06:e2:57:fb:2e:1b:6c:8c:1f:
36:72:59:02:5e:76:aa:9d:2f:eb:c8:6a:1d:b1:04:
80:5f:fa:ca:1d:6f:91:16:cb:21:15:91:34:16:82:
31:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:32:C4:65:2D:6D:90:A9:AE:4A:ED:7D:A1:F3:E4:7D:1F:7B:85:3E
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/954e13eb-7603-450c-b81f-093d12fea1f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:f012::/48
Signature Algorithm: sha256WithRSAEncryption
08:45:ec:f1:1b:40:f2:70:cc:03:26:c8:b6:81:b9:8f:c0:7f:
41:6c:f0:84:35:d3:8e:3c:11:f5:fb:10:a9:04:91:50:a5:10:
43:b7:0e:16:e7:81:2d:0e:68:42:4f:ca:5e:9b:ee:22:db:da:
7d:e6:d6:24:cf:8e:cf:38:94:0a:13:c1:da:4f:3a:2a:61:72:
8f:91:1b:d3:cb:6c:37:57:7a:65:75:2d:75:cc:f2:f0:bc:3a:
8e:57:06:e0:96:c4:af:f9:20:2e:dc:12:33:ae:eb:f3:ab:ba:
fb:9c:7a:88:d5:31:e3:e1:fd:d8:de:e1:69:0c:da:2b:ab:60:
bd:8b:ba:9d:0a:b6:b5:e2:09:3f:50:fc:4b:3c:d9:15:37:59:
ac:fb:c5:22:3f:81:d5:c5:04:7c:9c:4e:a0:e2:e0:bc:46:53:
5e:ce:b9:5f:06:fe:fa:5e:f7:f6:e0:03:31:2d:ac:1f:eb:b8:
d0:1f:05:c5:66:c9:43:9c:4a:1f:56:77:d4:87:7a:ea:5f:6e:
0f:10:f4:df:cf:29:a6:32:bc:fa:a8:0b:23:cd:9b:ca:4d:dd:
58:e8:73:7d:79:36:40:d0:e2:9d:7c:f9:6e:48:5c:e3:41:46:
3b:c6:3b:72:59:79:ad:63:7b:d4:3e:56:57:bc:d2:51:ff:53:
10:34:61:23
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 11 20:46:51 2024 by rpki-client on console-fra.rpki-client.org