Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d4badfa5-2954-40d9-9a67-96a834378829.roa
File: d4badfa5-2954-40d9-9a67-96a834378829.roa (raw, json)
Hash identifier: uDFwvRafVoNcwpAeLQJ8TFXqMQsq3NdOejhaCZskEus=
Subject key identifier: 98:22:7B:7D:B4:4D:68:CE:52:41:B7:D8:8F:57:D5:57:8C:1F:E3:35
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 6A8CE083CE9CCD9B66B7A84903186BEAAF4244CA
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d4badfa5-2954-40d9-9a67-96a834378829.roa
Signing time: Fri 07 Jun 2024 00:00:00 +0000
ROA not before: Fri 07 Jun 2024 00:00:00 +0000
ROA not after: Fri 12 Jul 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:f00c::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Jun 2024 18:58:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:8c:e0:83:ce:9c:cd:9b:66:b7:a8:49:03:18:6b:ea:af:42:44:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jun 7 00:00:00 2024 GMT
Not After : Jul 12 23:59:59 2024 GMT
Subject: serialNumber=aafb3dfd7dc20f772d3d89e261b352d8805ada42ae4be6ed30a1296e34ec55d4, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9b:0a:4e:9d:e7:c4:96:b3:96:e2:99:e2:a3:
45:29:cb:61:3e:e5:c4:b3:55:b7:c0:3c:d4:17:fa:
35:00:3b:52:da:6e:fa:45:76:d1:69:29:fd:d8:d4:
ef:16:de:d6:b5:d5:14:82:9f:14:c4:6e:59:50:9f:
83:48:b9:bf:94:db:be:78:67:01:24:ac:ab:fb:10:
e7:de:ad:29:6c:73:6c:b1:50:8b:f3:fc:a7:01:37:
ea:4c:50:cb:70:e4:0c:e0:8c:92:04:7c:b4:6d:8b:
51:b8:f2:f9:15:f2:99:a8:12:03:80:3e:d1:30:e8:
f6:d9:bd:e8:28:7f:20:fa:16:4a:b0:0d:74:36:5c:
e1:da:92:95:96:40:cd:d8:8a:92:18:88:6b:b5:6a:
f9:fd:a9:7c:4e:1e:b1:1e:94:d6:a9:98:9c:ea:34:
f0:60:6e:ce:28:bc:48:90:16:22:36:00:56:b2:b4:
2f:19:f4:fb:d9:c4:2a:3a:14:08:25:6a:fd:6f:a7:
b2:b6:df:c0:5d:32:be:d3:b4:f2:d5:68:b3:e8:48:
34:0e:3d:f9:9f:a6:28:6f:79:ad:cd:de:80:95:c8:
bf:cc:cb:94:8d:c7:03:6a:69:b4:83:5a:70:c1:2c:
bc:cb:48:45:a1:ee:28:9b:46:2b:30:38:33:96:fe:
af:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:22:7B:7D:B4:4D:68:CE:52:41:B7:D8:8F:57:D5:57:8C:1F:E3:35
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d4badfa5-2954-40d9-9a67-96a834378829.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:f00c::/48
Signature Algorithm: sha256WithRSAEncryption
87:20:64:e8:8d:02:6b:71:7f:1d:18:c6:11:f3:9c:e5:26:17:
1c:f4:ed:2d:db:96:15:3c:41:cc:d3:04:10:b6:c4:58:dc:dc:
b2:de:7f:40:c2:1a:29:86:98:17:cd:54:01:c0:44:43:ae:6f:
f1:c2:e4:c2:b8:a9:31:d1:ce:d3:4b:19:39:c3:c5:3a:b3:8f:
01:85:61:5a:ec:11:0f:bc:a8:8d:dd:7c:7d:9a:77:2a:83:18:
5a:6d:9c:27:5c:72:8b:ce:a8:5f:82:0c:1e:84:35:fd:fc:c4:
15:ec:5c:95:ca:7a:6a:04:02:fa:95:3c:15:c0:3d:50:fe:49:
32:e9:62:2f:50:56:72:cf:50:f3:52:13:08:b0:49:8e:1f:ba:
47:c3:fe:9e:8b:bb:66:d8:9a:9c:11:87:8d:40:d6:89:27:1b:
e5:ce:d7:60:22:32:3a:ea:63:2b:4f:b0:39:43:2d:64:e3:2d:
1f:65:92:46:13:13:9f:4b:2a:84:2e:30:68:d7:7f:c4:f5:ad:
cb:5a:62:ae:fd:fc:65:54:db:e8:f1:73:84:87:d9:c5:73:5b:
2c:8a:f2:a9:c8:7d:3e:80:85:2b:4d:95:ed:6e:ed:ae:40:c2:
33:21:ad:c4:02:92:f5:5c:c0:15:2e:93:3a:0a:cf:20:b9:4d:
83:c9:1b:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 11 20:46:51 2024 by rpki-client on console-fra.rpki-client.org