Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9f1140df-42e1-48f3-bfb1-3c733d43843e.roa
File: 9f1140df-42e1-48f3-bfb1-3c733d43843e.roa (raw, json)
Hash identifier: XwpuqxN938ofMaHBBdu7/A21Uugh57Zo4R5XSDhlQ+0=
Subject key identifier: 2D:A4:70:D9:1B:7B:BC:11:FF:A6:69:2D:A1:EE:F4:04:22:ED:6B:BC
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 453CA2034CEA33C19823140318A3BBFE010347C8
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9f1140df-42e1-48f3-bfb1-3c733d43843e.roa
Signing time: Sat 08 Jun 2024 00:00:00 +0000
ROA not before: Sat 08 Jun 2024 00:00:00 +0000
ROA not after: Sat 13 Jul 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:f01f::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Jun 2024 18:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:3c:a2:03:4c:ea:33:c1:98:23:14:03:18:a3:bb:fe:01:03:47:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jun 8 00:00:00 2024 GMT
Not After : Jul 13 23:59:59 2024 GMT
Subject: serialNumber=586b872101b098fb0049dc4d91df67145d5db5d44366463a904a4b9d7aa75afd, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:69:65:6f:d1:bf:6c:93:01:1c:d0:7d:33:f5:
9a:db:52:e0:da:d1:a2:92:55:73:f4:db:eb:68:d0:
4b:7b:2f:c0:6c:d6:7f:ee:28:f3:10:f2:58:8d:0e:
d2:84:d3:9c:fd:0f:94:90:59:95:dd:4c:4f:0e:9f:
93:1d:25:eb:a6:e5:c6:df:74:ea:74:3b:ec:97:fe:
56:0f:d4:cd:43:e8:96:aa:53:58:da:b2:57:25:98:
2d:e7:ef:2e:86:7c:56:c2:11:ec:94:bb:7f:17:a1:
6e:3d:d1:93:85:7b:fc:b7:f3:cb:be:02:dc:c0:69:
af:cf:e0:de:88:d5:a6:74:ee:1e:9e:d8:a8:d1:a5:
ab:12:4b:3b:d7:07:e0:bf:dc:55:c1:e1:a3:b7:d1:
aa:d9:a4:2b:85:de:63:a7:4c:3b:2f:8b:b1:48:c2:
ab:f1:07:89:42:64:84:0d:14:44:33:83:b0:45:79:
26:54:67:68:66:fd:0c:4a:40:51:b6:7a:91:3a:8d:
d4:cf:3b:e9:7e:93:b3:55:55:df:a8:bf:02:45:72:
03:83:a0:22:fe:aa:8e:36:13:91:50:5c:47:67:58:
17:1a:87:f4:18:2b:70:c9:fd:70:fd:e6:f6:35:d8:
38:15:f4:dd:0f:b8:c7:e5:db:a4:1e:e1:0a:50:0c:
a7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A4:70:D9:1B:7B:BC:11:FF:A6:69:2D:A1:EE:F4:04:22:ED:6B:BC
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9f1140df-42e1-48f3-bfb1-3c733d43843e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:f01f::/48
Signature Algorithm: sha256WithRSAEncryption
45:64:58:50:ed:5e:f0:b5:17:83:10:e8:fb:66:1c:f5:e7:d8:
dd:3c:47:f9:a2:69:14:4f:b6:6b:2a:cc:34:c5:01:17:57:15:
c0:1d:f2:e9:48:8a:5d:f8:53:4a:ed:a1:93:b7:65:41:af:a5:
5e:10:2b:cf:83:c4:17:a5:6a:1b:5a:7d:c9:26:56:3d:8d:74:
04:3e:f9:10:9a:27:38:f7:52:e5:06:b3:6c:20:89:3d:67:51:
fe:60:de:02:6b:f7:1c:b3:26:33:1d:89:5b:0d:0a:02:f5:64:
9c:03:ed:a4:ca:5f:21:d1:ea:d6:ba:3e:52:9e:64:34:19:aa:
eb:ff:ac:7b:3d:1e:ee:74:27:46:30:4f:7b:f4:61:88:4a:f0:
0b:dc:5e:38:2d:39:0e:4c:89:52:bb:db:31:47:92:d0:92:cd:
f8:fc:30:b4:13:21:53:61:7f:a1:7f:ba:ab:7c:09:8a:86:fa:
16:3d:b2:c2:1f:43:83:95:b2:a0:4f:3a:c6:36:92:2c:54:75:
6f:6e:66:17:00:cd:2e:8d:ad:65:c2:a1:60:f6:8a:5c:bb:13:
ad:41:c8:b0:45:3b:02:90:80:ca:6b:86:b2:58:3e:e3:0e:83:
aa:7d:ee:74:79:95:d8:e5:68:da:f0:f1:d1:73:dd:24:b3:94:
cb:44:2c:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 11 20:46:51 2024 by rpki-client on console-fra.rpki-client.org