Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c8627e56-9ab9-4f6b-94f8-d85fb9dafbc3.roa
File: c8627e56-9ab9-4f6b-94f8-d85fb9dafbc3.roa (raw, json)
Hash identifier: wVLEX6eIVBDZKIYj2Qm2qUToBFqyQ0RIUjk8RprVOvU=
Subject key identifier: CD:6A:2C:52:75:B1:02:BB:8A:9B:C7:8F:11:F9:87:99:8B:EC:EA:B5
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 35605C22F50AB5FE1D8B701C8CF758C43D767749
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c8627e56-9ab9-4f6b-94f8-d85fb9dafbc3.roa
Signing time: Sat 08 Jun 2024 00:00:00 +0000
ROA not before: Sat 08 Jun 2024 00:00:00 +0000
ROA not after: Sat 13 Jul 2024 23:59:59 +0000
asID: 8987
IP address blocks: 2605:9cc0:f01a::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Jun 2024 18:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:60:5c:22:f5:0a:b5:fe:1d:8b:70:1c:8c:f7:58:c4:3d:76:77:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jun 8 00:00:00 2024 GMT
Not After : Jul 13 23:59:59 2024 GMT
Subject: serialNumber=ec718c969a71c270bf03fbadac1f30a864edde7a2f6f836ad9cfafb998583804, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:8f:33:35:26:4a:59:17:89:49:cb:50:cb:c0:
19:1b:a4:c1:b4:c4:c7:74:65:02:ef:f8:99:1e:53:
b5:e1:23:cd:d8:ea:f9:16:77:bb:86:42:8e:e4:ab:
8d:0f:cc:a4:1a:b0:ef:2f:eb:05:21:fc:f3:1e:73:
48:11:38:c8:20:f1:a4:b7:e6:bb:e0:19:4d:8a:96:
bd:fc:f6:d9:f3:31:ab:13:9d:f3:5b:85:78:ea:28:
20:5c:ab:cf:97:af:a5:4c:22:22:91:b3:17:63:b3:
95:96:af:5a:d9:58:0e:af:e7:7d:8e:77:2b:ba:bb:
99:87:a0:d3:6e:97:67:92:82:ce:e6:5b:51:81:d8:
6b:9b:c8:5c:1c:04:cd:08:64:e2:58:bf:7e:9f:4b:
3b:30:98:6f:0e:75:13:81:99:83:cd:97:44:02:ca:
9c:48:92:af:34:1b:13:92:3f:e0:3e:34:1d:12:33:
ec:25:86:a0:ef:12:76:c8:ec:38:37:32:c2:6a:2d:
51:55:2c:f4:02:a7:9f:25:db:3f:4f:81:89:cf:f4:
04:24:39:b2:7a:71:ab:cc:4a:71:c9:58:fe:8f:d3:
e2:35:e9:a2:30:17:12:4c:46:36:1d:81:6a:4c:bf:
18:14:8e:36:b4:ca:43:a2:78:48:ae:82:61:35:1e:
25:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6A:2C:52:75:B1:02:BB:8A:9B:C7:8F:11:F9:87:99:8B:EC:EA:B5
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c8627e56-9ab9-4f6b-94f8-d85fb9dafbc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:f01a::/48
Signature Algorithm: sha256WithRSAEncryption
a1:4b:9e:2c:2a:52:c5:74:aa:f4:7e:3f:82:39:a6:f7:8d:9c:
31:8b:43:cd:2f:97:a1:19:73:0b:ec:ad:32:ad:77:15:59:fc:
88:35:b4:7d:2d:a8:5a:9a:39:c3:b5:90:cf:ba:42:b9:99:a5:
65:14:42:ec:fc:f0:48:c3:0c:34:70:21:36:9c:9d:06:3c:c5:
07:14:0a:05:55:93:90:d1:2b:5a:65:87:42:50:d6:4c:27:89:
ca:92:3e:f9:9c:ce:59:2b:18:08:37:3c:d7:60:4b:a6:e1:8a:
4d:89:59:52:3f:42:6e:cd:3b:c7:11:f7:b3:56:2f:c2:40:c1:
0a:46:1b:9b:4b:65:47:9e:a4:3d:2a:7b:49:3e:77:ac:4e:43:
1f:a6:e6:92:82:cd:a8:2e:64:c9:1b:b3:f7:0f:48:ae:1a:2c:
0a:b3:73:13:42:e9:c5:fc:b5:36:73:1e:64:1d:9b:79:b3:8f:
be:58:b1:8b:b8:94:24:76:94:ee:0f:23:32:86:cd:0e:ec:8f:
30:41:16:2e:51:53:ee:e2:95:ea:c3:9f:7e:d8:9a:e8:ca:9e:
34:a2:27:f1:eb:bf:60:60:dc:4f:6c:b4:48:67:d5:6c:92:ee:
96:6b:85:f1:4a:cc:f0:5c:a7:6b:e5:13:a7:40:ac:c9:2f:be:
e1:5e:59:dd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 11 20:46:51 2024 by rpki-client on console-fra.rpki-client.org