Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b52da11-ac4a-46f5-a7e3-443cc9d71c56.roa
File: 0b52da11-ac4a-46f5-a7e3-443cc9d71c56.roa (raw, json)
Hash identifier: 4xKUnowgIDi7e8v56CTMALO6M80tFpRK3tY1KmF7BcA=
Subject key identifier: D6:37:29:F5:8D:B6:58:F9:D1:D7:A1:CB:82:2D:19:3B:E1:4A:1D:B2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6F8EB8DC2EEB81719423A0D68BEF55138B01943E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b52da11-ac4a-46f5-a7e3-443cc9d71c56.roa
Signing time: Sat 15 Mar 2025 00:30:31 +0000
ROA not before: Sat 15 Mar 2025 00:30:31 +0000
ROA not after: Sat 19 Apr 2025 23:59:59 +0000
asID: 19047
IP address blocks: 70.130.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 17:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:8e:b8:dc:2e:eb:81:71:94:23:a0:d6:8b:ef:55:13:8b:01:94:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 15 00:30:31 2025 GMT
Not After : Apr 19 23:59:59 2025 GMT
Subject: serialNumber=b8a8ff0e0addaf3331d422ebd05e438162f3f1fe373a68f46cb1e9529d4ae145, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:68:2a:e0:c1:a2:9e:d4:93:76:95:20:74:
37:1e:c2:4a:db:3d:b1:4d:5b:f1:57:be:6b:1b:9b:
96:1f:e0:1d:40:19:bf:dd:29:22:e2:d3:d0:98:0a:
65:33:af:d7:5d:ca:0c:a2:ba:27:18:aa:f7:0c:bc:
3f:f3:ef:8f:fb:66:f5:09:1d:82:73:98:f5:f3:57:
4f:69:f1:4e:1d:01:a1:0c:d4:01:82:f2:e2:6c:89:
d6:46:94:6b:79:68:04:39:95:2e:a6:52:1f:1d:74:
71:e7:17:f1:5b:a6:1f:fc:f1:ba:50:f1:82:81:72:
88:c8:80:f2:bf:3a:47:42:aa:ce:ea:e0:3e:dc:66:
dd:87:bd:47:e9:1d:d0:12:8c:0e:d2:54:a3:2f:99:
06:09:15:68:fc:73:51:ba:86:3e:07:68:e5:a7:6d:
33:ba:3a:be:b5:da:fa:ef:fc:4e:b3:a4:4a:86:41:
e0:15:c2:59:e7:33:d1:89:06:80:6e:d7:e8:ad:e3:
68:3f:32:6d:33:b7:e1:79:d2:b6:42:a2:5e:8d:aa:
b5:34:1e:be:84:e8:e6:83:5f:64:8b:b4:eb:1e:e1:
70:84:4a:89:12:3a:ae:09:a8:fd:d8:5c:f5:2d:0c:
28:45:25:27:fd:01:b9:61:f0:c8:fc:44:cc:43:e3:
8b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:37:29:F5:8D:B6:58:F9:D1:D7:A1:CB:82:2D:19:3B:E1:4A:1D:B2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b52da11-ac4a-46f5-a7e3-443cc9d71c56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.130.200.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:88:53:54:a1:79:6d:53:e9:03:82:7e:bb:93:b8:85:1e:7b:
49:a6:d1:86:28:af:be:7a:15:bf:e4:e5:1b:79:f5:0f:7b:9f:
5e:05:7a:1d:74:00:9c:ce:54:ac:07:6f:c1:59:28:c7:8b:72:
ac:61:fb:3a:8a:67:53:f4:00:e6:b2:71:95:c3:85:20:54:42:
13:72:09:70:64:93:fb:2e:68:fe:10:90:90:e3:d9:f1:33:0c:
2b:f4:80:b2:5a:89:64:3e:17:a2:92:75:ed:a7:eb:8f:49:85:
24:69:e6:63:f9:6c:63:b2:96:42:7e:e0:5b:f6:83:3b:72:2d:
7b:b9:f2:1b:35:0e:24:96:cf:26:31:31:6b:73:4d:60:c7:09:
31:88:63:8f:7b:67:62:25:9f:0c:e4:e6:ff:72:50:7f:7e:59:
af:74:e2:a0:81:df:fa:94:d5:83:25:ba:6e:62:24:42:ee:12:
df:ce:4c:8d:e4:0b:4b:55:33:49:f7:c6:f5:fd:b2:97:73:94:
9d:bf:b2:87:29:a5:32:1e:13:12:b4:24:7b:41:50:7d:f7:34:
84:f0:95:b4:22:0d:24:51:be:9a:df:9f:fa:9d:41:6e:94:fa:
31:4f:d5:86:c0:f4:e9:5f:b8:4c:d9:95:8c:a7:6f:3a:28:91:
69:74:2d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:54:37 2025 by rpki-client