Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/79ee09ba-5fa3-4c77-a78b-c271da083085.roa
File: 79ee09ba-5fa3-4c77-a78b-c271da083085.roa (raw, json)
Hash identifier: 6LfKNW1Bmsg6VlIMMkiFO0+KD1WpVNPHKf8ZUto+/mQ=
Subject key identifier: B7:BA:54:66:05:D2:88:7A:C8:5D:5E:DD:1A:C3:A5:0E:7F:2F:83:51
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 51A85E89DEB83FA6F98CED7B5A2EBD960DCD5C82
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/79ee09ba-5fa3-4c77-a78b-c271da083085.roa
Signing time: Fri 07 Mar 2025 00:20:18 +0000
ROA not before: Fri 07 Mar 2025 00:20:18 +0000
ROA not after: Fri 11 Apr 2025 23:59:59 +0000
asID: 6167
IP address blocks: 155.146.0.0/19 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 16:52:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:a8:5e:89:de:b8:3f:a6:f9:8c:ed:7b:5a:2e:bd:96:0d:cd:5c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Mar 7 00:20:18 2025 GMT
Not After : Apr 11 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:10:31:06:7d:9e:06:42:b1:36:fc:af:b7:95:
2b:bf:5a:1a:eb:38:c4:78:d6:c3:55:f6:a4:14:48:
0d:c0:33:4a:50:45:1a:c1:2c:b8:9a:3f:95:f9:17:
b2:78:fc:f0:b5:f5:22:30:fd:b3:b1:2d:44:13:6b:
08:95:d4:bc:10:90:70:be:ac:ce:c2:d6:f0:0c:91:
53:bc:78:59:c0:00:8c:48:30:44:8e:6f:db:18:06:
3e:3a:0f:3d:21:0a:9b:c7:da:8b:0a:c0:7b:55:04:
f5:ad:b0:80:00:1f:21:08:fe:c4:b4:99:2e:cd:43:
10:6f:97:e6:3c:64:2e:6d:87:d1:6f:d8:21:25:e8:
b6:82:1d:bc:74:03:44:c9:40:e3:e3:46:b2:af:42:
9f:16:dd:4e:a1:b7:d4:c7:a1:35:fb:40:b4:78:ce:
c8:55:9b:12:ca:a0:b1:6e:47:80:5c:0c:8e:35:6b:
22:00:07:80:b2:b0:4b:72:ff:1d:f2:38:d0:3b:da:
24:4d:ac:81:d7:86:1f:66:fb:b0:06:a9:32:53:36:
0b:5b:d6:34:85:43:64:cd:93:6e:9b:f1:6e:c2:d4:
e8:93:a9:99:04:4c:d7:f9:a9:e9:b1:92:0f:12:04:
f9:5c:c0:57:ff:5b:42:cf:06:f5:f1:4e:d5:85:95:
91:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BA:54:66:05:D2:88:7A:C8:5D:5E:DD:1A:C3:A5:0E:7F:2F:83:51
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/79ee09ba-5fa3-4c77-a78b-c271da083085.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.146.0.0/19
Signature Algorithm: sha256WithRSAEncryption
48:9c:ac:70:0d:45:bf:62:00:d5:d4:ec:8f:f8:27:3b:15:a5:
b2:3d:8d:81:54:60:0c:fe:27:70:a5:78:35:e3:88:ed:44:ff:
51:14:b8:62:b0:2f:c7:bd:f5:40:62:9d:c9:f3:6e:8e:cd:41:
8e:81:b5:f7:f1:6e:91:90:b6:4f:8c:da:fa:e7:fe:19:86:f0:
d5:c2:b8:ee:20:32:e2:aa:7b:ec:6c:17:69:85:0e:a9:71:70:
e7:ea:01:dc:79:30:9a:c3:8d:76:c0:2e:3d:19:03:db:ec:49:
53:0d:92:bd:07:b5:01:55:f6:be:48:1f:a8:76:ea:38:4b:9e:
9b:1c:32:36:01:01:be:c9:85:f3:86:43:4d:87:5b:73:79:72:
3c:97:2d:24:f0:8d:03:b6:97:6c:e1:63:c3:b0:65:32:ed:fe:
0c:ba:9b:f7:50:34:97:84:1c:3d:b2:35:a4:5c:c8:e8:72:54:
85:4a:c7:09:21:8e:19:ee:e0:97:ad:5c:33:53:e5:f2:5f:92:
bc:4a:27:1b:5a:27:0e:73:ab:b2:84:34:27:5c:61:e3:02:43:
81:2f:08:17:3f:9e:c9:df:35:b0:f4:97:29:d4:33:79:e1:7b:
24:c2:bb:12:ff:09:e3:32:a0:d4:db:5d:4e:31:0b:b1:50:c4:
71:53:42:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:08 2025 by rpki-client