Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c6e6223e-3e7e-44b0-a136-5b21bfb1fde7.roa
File: c6e6223e-3e7e-44b0-a136-5b21bfb1fde7.roa (raw, json)
Hash identifier: FHwnK88+swXasABOJRfhPg6RCq3IalanPKbbeveYMQA=
Subject key identifier: D7:3E:0C:86:B2:60:4A:1A:94:D8:04:48:60:94:84:45:DE:1A:DB:76
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 73ACE598C9C8EEB07308BAEF928794AC795CB106
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c6e6223e-3e7e-44b0-a136-5b21bfb1fde7.roa
Signing time: Sat 08 Jun 2024 00:00:00 +0000
ROA not before: Sat 08 Jun 2024 00:00:00 +0000
ROA not after: Sat 13 Jul 2024 23:59:59 +0000
asID: 8987
IP address blocks: 2605:9cc0:f01d::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Jun 2024 18:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:ac:e5:98:c9:c8:ee:b0:73:08:ba:ef:92:87:94:ac:79:5c:b1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jun 8 00:00:00 2024 GMT
Not After : Jul 13 23:59:59 2024 GMT
Subject: serialNumber=803cce95c39495be271315af389bdf0069a9557f86dedd52b0dc24736b73ae83, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7c:27:ac:27:fb:85:c4:35:04:82:83:22:3d:
28:07:8c:7c:27:27:60:9f:32:2e:a3:ea:ed:aa:ed:
ed:05:bf:d0:ac:ad:69:97:20:38:36:76:9e:48:35:
d2:4f:2e:75:7f:64:53:fc:ee:50:61:e4:63:0d:a7:
48:7c:24:bc:9e:19:b9:2b:7f:4a:c2:88:a1:41:32:
cb:05:15:7b:26:ae:5b:98:20:e8:fc:44:36:f4:84:
98:c3:87:ac:d1:c9:22:d4:48:fa:c7:83:19:10:c0:
64:58:35:04:28:a9:fe:28:dc:99:05:e9:a8:ed:35:
ba:13:14:e5:af:6c:5c:35:8c:1e:f8:0a:45:6a:20:
80:13:03:56:ed:c4:21:6c:bd:62:58:16:0e:33:6d:
8e:5c:14:c6:78:8b:e8:2d:f7:0e:45:a1:20:b0:ca:
b2:64:5d:36:11:3f:df:2d:72:b5:24:05:8c:78:60:
e4:4d:dd:b7:6f:af:71:52:0f:55:2a:56:ac:28:30:
a9:0d:91:d9:dd:61:4c:85:8c:f6:b7:6b:1c:9c:5c:
1f:92:d2:05:38:dc:be:6b:24:5a:7b:9e:4f:b1:31:
74:13:d9:f2:49:40:4a:50:9a:d4:ac:f5:d8:d0:ee:
c3:ee:a9:45:ae:07:f9:6f:69:36:46:6c:78:20:e3:
72:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3E:0C:86:B2:60:4A:1A:94:D8:04:48:60:94:84:45:DE:1A:DB:76
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c6e6223e-3e7e-44b0-a136-5b21bfb1fde7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:f01d::/48
Signature Algorithm: sha256WithRSAEncryption
41:47:2f:83:7a:45:89:4f:74:d9:97:16:dc:2d:07:ea:0d:85:
87:7d:23:19:56:b1:c8:4b:37:5b:59:4c:cc:fa:a2:68:b2:c0:
3a:45:5c:c2:46:52:64:ec:fb:06:02:57:d0:27:32:36:45:ab:
48:dd:4f:8d:a8:f5:1b:79:33:54:a3:6f:1b:15:bb:fd:30:6e:
c4:24:15:47:da:1a:5b:e9:09:a8:cd:e2:15:f6:ca:93:06:dd:
b0:97:ff:85:f6:1a:75:3d:bb:b9:42:37:7b:7a:a4:86:e8:81:
71:b6:7b:26:ff:1c:4f:98:e8:d2:ee:a1:7b:af:af:88:47:6a:
ad:ad:25:a9:32:63:ae:aa:e2:70:86:f2:c3:16:5d:fa:eb:fb:
d2:95:79:be:ed:6a:fb:cd:1d:83:72:db:fb:2e:3f:d9:f0:4c:
8c:83:dc:d9:91:f5:13:8c:1b:e3:3d:28:bd:0d:db:60:d1:14:
ec:56:2c:8e:90:3a:28:44:e1:3a:7f:13:24:7a:0a:0e:cf:84:
4a:7d:6e:7f:df:be:5d:32:d4:07:6a:15:64:e2:ea:af:ef:96:
d6:b4:98:08:fe:b6:a6:99:d3:2a:6c:bd:c4:44:fb:ab:15:76:
a8:66:5c:5a:c0:1b:5f:f2:e2:99:60:73:45:77:2f:89:ab:e2:
20:8f:0a:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 11 20:46:51 2024 by rpki-client on console-fra.rpki-client.org