Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fef43f04-85a5-4d69-bee0-cb9b3d5c29c2.roa
File: fef43f04-85a5-4d69-bee0-cb9b3d5c29c2.roa (raw, json)
Hash identifier: Ev0zu4gdkXTxH4beN7bklw6WVy+9UrZ7tClpZCsqj5E=
Subject key identifier: 8A:FF:B1:E9:87:FF:24:DD:53:49:A2:20:37:34:F6:64:73:9A:F9:E8
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 26CC3C2BFB4B7AE40BB3A017FF027A5539DE87E5
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fef43f04-85a5-4d69-bee0-cb9b3d5c29c2.roa
Signing time: Fri 07 Jun 2024 00:00:00 +0000
ROA not before: Fri 07 Jun 2024 00:00:00 +0000
ROA not after: Fri 12 Jul 2024 23:59:59 +0000
asID: 8987
IP address blocks: 2605:9cc0:f00f::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Jun 2024 18:58:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:cc:3c:2b:fb:4b:7a:e4:0b:b3:a0:17:ff:02:7a:55:39:de:87:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jun 7 00:00:00 2024 GMT
Not After : Jul 12 23:59:59 2024 GMT
Subject: serialNumber=63fca047f79753af0c6739ad623079d9ed5be442c445a6fedbb75f8dcf0042b9, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ec:70:54:d3:89:ff:99:f5:c6:9b:06:5a:48:
f8:c0:a1:92:00:73:9f:fd:6e:57:bf:8d:43:a2:6f:
2b:f7:4a:c4:87:b0:61:fd:36:c3:76:65:26:19:e2:
b8:f7:15:4f:cb:3a:6b:37:52:15:fd:11:89:ce:18:
54:06:3a:42:50:f4:2d:b8:8a:53:1c:2e:ff:ce:7d:
ae:c7:31:86:35:6b:93:f4:02:46:8f:c8:80:53:4f:
76:98:c7:33:08:a0:06:72:65:49:05:a2:b4:6d:ed:
53:36:a6:ce:a1:6c:5b:d3:fd:63:ff:ac:a3:5d:7e:
d6:79:43:5a:f9:44:b7:5c:d5:f5:a6:7a:9c:0d:83:
82:57:a0:41:04:fb:70:6e:1e:e2:1e:b3:fc:3f:0d:
0c:fd:b3:89:68:80:43:a7:c0:66:c9:97:f5:fd:61:
29:f0:07:b9:cb:fd:61:aa:e6:71:b4:65:c9:51:d6:
78:8d:db:71:42:a3:f2:41:6d:f0:e6:f1:24:8e:f7:
04:39:d0:49:b2:53:1c:ee:a3:df:e1:33:c7:50:b2:
ea:8c:a3:ed:70:61:5a:67:dd:68:f9:c3:c5:04:f7:
d7:7e:18:5d:d1:be:98:2c:32:b1:1e:ed:0e:e3:d7:
47:72:f1:e4:c9:08:58:87:69:07:39:f6:1f:f7:ab:
fd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FF:B1:E9:87:FF:24:DD:53:49:A2:20:37:34:F6:64:73:9A:F9:E8
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fef43f04-85a5-4d69-bee0-cb9b3d5c29c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:f00f::/48
Signature Algorithm: sha256WithRSAEncryption
8b:c6:cf:4b:38:b4:81:a4:f9:ec:16:4e:e4:40:f5:85:19:c5:
a1:1c:71:44:19:cb:ca:66:c9:4a:04:a9:1a:bc:09:77:3e:e2:
6e:d6:e2:3d:82:40:1f:5a:36:9a:1d:1c:60:47:92:2b:db:b1:
93:bb:87:90:52:eb:a1:a7:2f:37:d8:fd:c5:89:e4:b3:4b:8d:
00:20:bc:b7:f3:17:ac:42:6b:44:e3:d6:40:84:08:72:6d:9d:
59:4d:30:d3:3b:a7:d6:6f:67:bf:4f:0e:0b:5d:5e:29:01:24:
2f:b3:16:3c:f5:26:df:86:34:8b:c0:a9:15:9f:03:65:4b:f8:
c4:c7:9c:a4:6b:10:42:6f:27:8b:a8:97:dc:61:74:34:43:44:
6b:be:1a:09:3c:e6:38:95:d2:88:a8:8f:dc:0b:a3:7a:4a:9c:
0f:42:18:1d:cd:d3:d2:f3:ff:88:05:26:50:18:61:31:fa:4f:
f4:fd:f6:9d:36:f7:e2:6b:da:e5:10:9c:6c:51:98:3f:98:33:
78:bb:35:02:03:93:4c:1a:4a:90:98:28:de:c2:52:85:c3:6d:
1e:34:da:23:eb:5a:70:3d:8f:db:9e:28:df:9b:f8:eb:2e:b5:
78:d2:a2:c9:d5:15:db:8e:0f:a0:53:d7:ee:b6:86:52:c5:5c:
15:48:16:f8
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUJsw8K/tLeuQLs6AX/wJ6VTneh+UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQwNjA3MDAwMDAwWhcNMjQwNzEyMjM1OTU5
WjB6MUkwRwYDVQQFE0A2M2ZjYTA0N2Y3OTc1M2FmMGM2NzM5YWQ2MjMwNzlkOWVk
NWJlNDQyYzQ0NWE2ZmVkYmI3NWY4ZGNmMDA0MmI5MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCb7HBU04n/mfXGmwZaSPjAoZIAc5/9ble/jUOibyv3SsSH
sGH9NsN2ZSYZ4rj3FU/LOms3UhX9EYnOGFQGOkJQ9C24ilMcLv/Ofa7HMYY1a5P0
AkaPyIBTT3aYxzMIoAZyZUkForRt7VM2ps6hbFvT/WP/rKNdftZ5Q1r5RLdc1fWm
epwNg4JXoEEE+3BuHuIes/w/DQz9s4logEOnwGbJl/X9YSnwB7nL/WGq5nG0ZclR
1niN23FCo/JBbfDm8SSO9wQ50EmyUxzuo9/hM8dQsuqMo+1wYVpn3Wj5w8UE99d+
GF3RvpgsMrEe7Q7j10dy8eTJCFiHaQc59h/3q/1VAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUiv+x6Yf/JN1TSaIgNzT2ZHOa+egwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiL2ZlZjQzZjA0LTg1YTUtNGQ2OS1iZWUwLWNiOWIzZDVjMjljMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzA8A8wDQYJKoZIhvcNAQELBQADggEBAIvGz0s4tIGk+ewWTuRA9YUZ
xaEccUQZy8pmyUoEqRq8CXc+4m7W4j2CQB9aNpodHGBHkivbsZO7h5BS66GnLzfY
/cWJ5LNLjQAgvLfzF6xCa0Tj1kCECHJtnVlNMNM7p9ZvZ79PDgtdXikBJC+zFjz1
Jt+GNIvAqRWfA2VL+MTHnKRrEEJvJ4uol9xhdDRDRGu+Ggk85jiV0oioj9wLo3pK
nA9CGB3N09Lz/4gFJlAYYTH6T/T99p029+Jr2uUQnGxRmD+YM3i7NQIDk0waSpCY
KN7CUoXDbR402iPrWnA9j9ueKN+b+OsutXjSosnVFduOD6BT1+62hlLFXBVIFvg=
-----END CERTIFICATE-----
Generated at Tue Jun 11 20:46:51 2024 by rpki-client on console-fra.rpki-client.org