Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0be0ecd9-28d4-4995-a745-2a2273b660f0.roa
File: 0be0ecd9-28d4-4995-a745-2a2273b660f0.roa (raw, json)
Hash identifier: vSX+xhQyhon4SfTU8KJRz/vGsoDwg08BvKpOA3UFZxw=
Subject key identifier: 4E:7B:EC:59:2F:DD:32:5C:8F:50:F5:02:3C:F1:0B:C8:59:BF:5C:42
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1FB32F55E5A133E8B0A92EF382CABB9FE9B447F3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0be0ecd9-28d4-4995-a745-2a2273b660f0.roa
Signing time: Fri 11 Oct 2024 00:00:00 +0000
ROA not before: Fri 11 Oct 2024 00:00:00 +0000
ROA not after: Fri 15 Nov 2024 23:59:59 +0000
asID: 14618
IP address blocks: 204.30.32.0/20 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 15:11:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:b3:2f:55:e5:a1:33:e8:b0:a9:2e:f3:82:ca:bb:9f:e9:b4:47:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 11 00:00:00 2024 GMT
Not After : Nov 15 23:59:59 2024 GMT
Subject: serialNumber=fbb46d4350f8ea3bfd35b246115e9ce873004d6b1030e92bb47fc1301ecd961e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:83:59:91:90:bd:0c:02:2c:6a:91:27:1f:a3:
29:e3:a1:b3:a0:f9:36:f9:19:04:84:87:61:07:69:
02:79:0c:4c:10:b7:da:24:65:d3:9c:6c:2e:d9:b6:
79:30:a7:e8:3e:34:82:58:53:cb:50:2d:76:fa:6a:
9e:c4:08:f9:71:8a:d7:7c:43:70:2b:46:57:5f:77:
f3:80:76:85:36:f6:0a:c7:40:fd:e2:36:68:d9:2e:
17:a8:79:19:c2:e5:e9:c9:19:8e:75:ec:c2:51:7e:
b7:f3:69:7d:7f:40:a8:54:fa:61:f9:66:de:3b:99:
c4:1c:13:57:ac:56:6e:57:35:4a:c0:82:80:a8:5f:
1a:d6:63:86:46:40:07:c8:e6:b8:ed:9c:58:a3:a3:
6a:da:cc:73:a4:e3:eb:ad:a3:f6:68:04:a6:62:d7:
a0:78:d6:68:0f:6e:92:08:13:17:fd:49:b3:5b:80:
3e:7e:4b:44:15:57:cb:eb:00:a3:3f:65:eb:31:25:
61:f2:f0:72:89:c0:c9:19:e7:1e:f4:36:f9:a7:78:
a0:84:28:c2:8f:98:1a:91:f6:19:ad:67:b1:2d:be:
6d:ba:b1:95:73:87:f2:83:ee:b8:dc:09:0e:18:14:
8e:e7:10:ed:ec:83:df:23:54:d2:41:e3:aa:96:67:
fb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7B:EC:59:2F:DD:32:5C:8F:50:F5:02:3C:F1:0B:C8:59:BF:5C:42
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0be0ecd9-28d4-4995-a745-2a2273b660f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.30.32.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:d0:9e:fd:20:b7:43:46:7d:57:5a:9c:bc:68:d5:50:e5:28:
0d:b1:5c:7f:01:9a:36:1f:7e:c3:c1:d1:f5:96:e3:b2:e2:fd:
3e:b7:d4:13:8e:66:b5:33:54:35:f0:ea:3d:25:11:09:79:1e:
d2:fc:69:00:3b:06:b9:b4:ef:d1:7d:cf:2a:4f:8a:7d:04:38:
de:a4:eb:1e:8d:c2:ef:c8:18:a7:4f:b6:78:15:13:20:30:89:
b4:04:46:51:d7:8f:95:51:1c:bd:66:15:df:15:be:a4:a0:1d:
63:8f:34:4a:d7:f4:67:a6:c7:6d:e4:db:93:2c:28:aa:6e:16:
24:65:79:43:0f:ab:89:4c:ad:de:5e:f2:d9:58:e3:cc:01:56:
8c:fd:87:96:c9:37:aa:be:9a:3d:ae:78:67:a7:bc:e6:81:67:
d1:8e:9f:ef:50:16:bc:61:ad:e8:45:68:45:ca:56:62:6c:e7:
4e:10:8a:24:de:a0:ff:16:a4:02:27:99:f7:50:cc:6e:5a:7b:
cf:ed:49:67:63:ba:1a:2d:a2:1a:b7:1b:6b:c7:04:3d:a4:ff:
33:b3:cb:44:f3:f4:98:b3:f0:1e:54:53:15:f8:d5:56:62:d5:
26:7b:d5:ef:40:77:b5:a2:64:7d:4f:58:16:53:97:73:59:f2:
b8:d4:e0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 17:28:40 2024 by rpki-client on console-fra.rpki-client.org