Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ab67b7d-0a4f-4571-a30b-9102eb413093.roa
File: 0ab67b7d-0a4f-4571-a30b-9102eb413093.roa (raw, json)
Hash identifier: EUJcev2BuuePZt0MlxFWoHOCe+oN8jPtqiYtohrnCfA=
Subject key identifier: 56:93:9C:E4:88:3A:7F:B8:1D:D9:8B:C5:2A:BB:23:A0:F3:0A:91:C3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2C939D2F20FF9A26F7FED0B32C18185D4F17EA1D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ab67b7d-0a4f-4571-a30b-9102eb413093.roa
Signing time: Tue 08 Jul 2025 16:01:54 +0000
ROA not before: Tue 08 Jul 2025 16:01:54 +0000
ROA not after: Tue 12 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffb:1000::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 30 Jul 2025 19:08:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:93:9d:2f:20:ff:9a:26:f7:fe:d0:b3:2c:18:18:5d:4f:17:ea:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 8 16:01:54 2025 GMT
Not After : Aug 12 23:59:59 2025 GMT
Subject: serialNumber=4605e488f3f81fb88dcf94b468cf7ef915595c07bd09248940597c2ba78a177f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:33:54:de:45:00:d5:e3:76:22:83:b0:62:ab:
6e:41:07:86:c0:6e:93:8a:dc:b4:87:eb:87:2e:c6:
0f:a2:f9:cc:40:95:97:0f:55:a6:4f:6d:49:9c:0e:
3a:d3:a1:22:eb:28:3b:1c:2f:29:18:c2:02:13:fd:
a1:20:19:da:2f:33:14:77:49:30:1c:67:de:a9:fa:
fa:a9:9f:f8:25:b5:af:fe:c9:42:d5:54:3e:7b:9e:
7a:b1:32:d8:09:49:f5:b2:4c:3a:26:db:71:7e:3b:
9e:d0:ae:f7:cd:0d:58:48:d9:d9:0c:ff:41:ad:af:
de:33:43:d8:6f:df:c6:96:a8:c4:06:cc:55:89:dc:
f5:4d:f8:4b:b7:e9:9d:ba:79:8d:b5:0c:bd:23:02:
52:f4:8b:0d:b6:8e:31:41:37:d9:79:e0:91:e8:17:
bd:7b:dd:06:74:b5:17:2c:a5:f6:d0:c0:fc:e2:ee:
ab:d3:cf:5a:25:97:0f:26:9d:e1:0d:28:04:1b:12:
8b:4d:5c:14:6b:b0:8c:73:a8:f9:c4:4f:47:e5:3f:
37:a5:41:de:a1:5e:57:2c:e2:5d:7e:6d:b7:7e:5d:
eb:75:87:e4:28:79:81:b3:30:81:e0:3d:c7:07:05:
4e:03:55:56:4d:e4:14:e7:77:44:bb:6c:c6:3b:ff:
22:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:93:9C:E4:88:3A:7F:B8:1D:D9:8B:C5:2A:BB:23:A0:F3:0A:91:C3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ab67b7d-0a4f-4571-a30b-9102eb413093.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffb:1000::/40
Signature Algorithm: sha256WithRSAEncryption
4b:5e:92:cb:d4:28:85:98:bd:e8:c7:fa:55:9d:96:59:db:fd:
cf:88:c7:77:df:f1:a0:5e:fe:2a:a4:e4:c1:a6:50:e5:03:37:
93:3c:4e:7a:78:f1:ff:25:ec:d4:c6:51:b1:66:04:77:ec:b6:
c0:8f:9e:d7:87:70:db:77:cf:3c:b4:e6:9c:4b:5b:ab:c2:b9:
dd:3f:65:27:f8:d1:30:b2:de:3a:d1:7f:fe:97:ea:bf:d4:4c:
a0:bb:f6:79:7a:8b:d4:a3:aa:ae:fe:7e:77:81:66:30:a5:b5:
42:ea:c4:bd:7c:48:35:3c:9b:55:22:70:cf:b6:f4:68:5c:fd:
49:da:c4:cf:22:6d:96:57:1c:87:ce:1d:ad:7f:67:67:ea:15:
a6:71:f3:4d:56:3c:4b:ef:3a:de:5c:ff:38:63:ad:15:35:e1:
18:77:63:3f:b6:10:02:d7:ac:b0:0b:ff:8b:44:5d:4e:f6:aa:
54:28:c3:87:5f:0c:c8:cd:df:5b:0e:cd:2d:e5:55:c8:7d:48:
db:73:cb:1a:92:38:17:a8:7b:44:b2:75:66:21:a8:25:dd:b8:
ea:1d:fc:5c:bb:56:52:e9:be:4a:c2:a2:4e:b0:a5:29:81:ab:
b6:73:40:b3:eb:88:d3:4a:8a:e4:bf:72:9c:95:8d:12:f5:66:
2c:6a:63:e6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 31 01:12:14 2025 by rpki-client