Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/eaf96404-f47b-426b-b4f2-c85c0d7dab7c.roa
File: eaf96404-f47b-426b-b4f2-c85c0d7dab7c.roa (raw, json)
Hash identifier: 8pLRjBkF1c3gIKPCJCtnd3LDE8VA84snqrTT+zJcqJ4=
Subject key identifier: B6:CC:B5:E2:C6:FE:18:20:22:DC:03:6A:27:88:00:5A:E6:D1:D9:71
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 36C113EBC7EBC7CB109C488B3D16BF1465BD5702
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/eaf96404-f47b-426b-b4f2-c85c0d7dab7c.roa
Signing time: Sat 08 Jun 2024 00:00:00 +0000
ROA not before: Sat 08 Jun 2024 00:00:00 +0000
ROA not after: Sat 13 Jul 2024 23:59:59 +0000
asID: 8987
IP address blocks: 2605:9cc0:f01c::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Jun 2024 18:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:c1:13:eb:c7:eb:c7:cb:10:9c:48:8b:3d:16:bf:14:65:bd:57:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jun 8 00:00:00 2024 GMT
Not After : Jul 13 23:59:59 2024 GMT
Subject: serialNumber=6e727afe912a3c8f0acafdbed0c1d6fcc7afbd142f8c805aaf3eed186edd1cd8, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:52:11:7c:4f:7c:81:0e:d9:a4:76:6b:69:8b:
f6:ef:f9:16:16:d0:5e:cc:50:01:59:2d:48:0a:97:
69:5d:5d:28:2e:5a:6a:a6:ec:73:3f:d8:fa:86:c7:
02:94:df:67:3a:0a:70:48:01:f2:31:95:a3:59:6d:
00:ea:db:ef:fa:c9:69:b4:4e:7a:71:80:7f:ac:b3:
a2:fe:f0:dd:8e:6f:c5:31:4d:d0:e2:bc:0a:c0:f3:
bb:8a:05:22:e8:98:ff:e9:97:68:b4:0a:b1:83:92:
65:be:2e:55:96:a9:7e:48:16:32:01:8c:02:4a:27:
e1:c9:3a:5d:78:e0:89:7d:6f:eb:b1:0d:13:19:0d:
67:67:33:4a:f9:b5:a0:bf:c4:10:f6:1d:fc:f8:d0:
90:37:8a:c3:ff:37:b5:6c:02:81:64:8c:58:0a:b2:
ef:31:7d:8c:5c:b6:5f:3c:23:2f:c5:60:79:bf:ca:
25:de:a8:d2:51:2f:fb:2b:0d:ac:90:3b:27:cb:6c:
70:0d:7d:4c:cc:d6:91:b6:3b:ff:0d:6b:c2:2a:f8:
3f:73:97:63:25:8b:9d:72:4d:58:55:33:03:b6:47:
04:d9:68:a8:0c:0c:2f:21:9c:b7:09:49:11:55:40:
a8:91:39:1c:0f:a1:a2:ec:37:40:b7:c6:ad:e9:9e:
d2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CC:B5:E2:C6:FE:18:20:22:DC:03:6A:27:88:00:5A:E6:D1:D9:71
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/eaf96404-f47b-426b-b4f2-c85c0d7dab7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:f01c::/48
Signature Algorithm: sha256WithRSAEncryption
ae:50:98:1f:11:0f:e7:14:fd:14:bc:00:1b:fb:71:e1:95:c6:
81:61:d4:47:24:08:fb:db:fd:b3:c0:04:54:62:19:c0:d4:91:
6b:bd:fa:65:b0:29:b9:92:4b:54:fb:e8:20:58:9c:1e:cf:f5:
b0:0b:43:2d:fb:10:fc:7d:f6:29:5a:f5:19:62:0b:f7:48:33:
c4:b4:1d:b2:b4:fd:3e:97:fa:4c:41:ab:f9:54:a9:5b:f1:31:
e3:6b:9e:73:db:5c:91:bf:e1:c0:df:16:87:6f:da:ea:c2:e8:
75:26:5a:6e:3c:b5:69:ba:b9:c5:ed:d5:6c:66:95:3e:bc:40:
ac:00:ec:a2:ca:dd:bb:88:2d:d4:a2:49:71:d8:c6:4c:91:95:
2c:f1:e0:be:b7:fe:de:e9:8e:20:ce:2b:6d:91:bf:0b:33:24:
8b:95:d4:66:88:52:d6:62:6b:13:da:25:c3:05:c0:b0:d1:1e:
85:e5:53:e1:97:bb:87:d1:d8:a3:f7:cc:59:af:7e:59:dc:a8:
e1:a1:c3:51:46:1a:82:3f:bc:b0:98:db:3c:b4:4f:54:d1:ac:
d0:c5:75:90:1a:6f:59:1a:fa:ba:1a:3a:7e:2e:10:b3:cc:4c:
c5:fb:c3:1d:46:a8:8b:60:73:47:87:65:53:c1:2c:a3:11:85:
13:01:29:c3
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUNsET68frx8sQnEiLPRa/FGW9VwIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQwNjA4MDAwMDAwWhcNMjQwNzEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZTcyN2FmZTkxMmEzYzhmMGFjYWZkYmVkMGMxZDZmY2M3
YWZiZDE0MmY4YzgwNWFhZjNlZWQxODZlZGQxY2Q4MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCnUhF8T3yBDtmkdmtpi/bv+RYW0F7MUAFZLUgKl2ldXSgu
Wmqm7HM/2PqGxwKU32c6CnBIAfIxlaNZbQDq2+/6yWm0TnpxgH+ss6L+8N2Ob8Ux
TdDivArA87uKBSLomP/pl2i0CrGDkmW+LlWWqX5IFjIBjAJKJ+HJOl144Il9b+ux
DRMZDWdnM0r5taC/xBD2Hfz40JA3isP/N7VsAoFkjFgKsu8xfYxctl88Iy/FYHm/
yiXeqNJRL/srDayQOyfLbHANfUzM1pG2O/8Na8Iq+D9zl2Mli51yTVhVMwO2RwTZ
aKgMDC8hnLcJSRFVQKiRORwPoaLsN0C3xq3pntK7AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUtsy14sb+GCAi3ANqJ4gAWubR2XEwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiL2VhZjk2NDA0LWY0N2ItNDI2Yi1iNGYyLWM4NWMwZDdkYWI3Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzA8BwwDQYJKoZIhvcNAQELBQADggEBAK5QmB8RD+cU/RS8ABv7ceGV
xoFh1EckCPvb/bPABFRiGcDUkWu9+mWwKbmSS1T76CBYnB7P9bALQy37EPx99ila
9RliC/dIM8S0HbK0/T6X+kxBq/lUqVvxMeNrnnPbXJG/4cDfFodv2urC6HUmWm48
tWm6ucXt1WxmlT68QKwA7KLK3buILdSiSXHYxkyRlSzx4L63/t7pjiDOK22Rvwsz
JIuV1GaIUtZiaxPaJcMFwLDRHoXlU+GXu4fR2KP3zFmvflncqOGhw1FGGoI/vLCY
2zy0T1TRrNDFdZAab1ka+roaOn4uELPMTMX7wx1GqItgc0eHZVPBLKMRhRMBKcM=
-----END CERTIFICATE-----
Generated at Tue Jun 11 20:46:51 2024 by rpki-client on console-fra.rpki-client.org