Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cc0aebb-f3bc-4f9b-a19c-f51e546c950d.roa
File: 2cc0aebb-f3bc-4f9b-a19c-f51e546c950d.roa (raw, json)
Hash identifier: IngmmM9Yp2C6GIi/M8hsXbVXHG66WvFdNYKboyPsC6A=
Subject key identifier: 30:D1:44:30:30:C3:0B:E2:D7:39:90:F3:25:EC:CB:EF:0F:D6:D7:4E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 31E9ED0FD3E7379BBB892BEE74D5A6FAAAA8B9E7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cc0aebb-f3bc-4f9b-a19c-f51e546c950d.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 155.41.0.0/17 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 09:07:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:e9:ed:0f:d3:e7:37:9b:bb:89:2b:ee:74:d5:a6:fa:aa:a8:b9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:07:d5:dc:ee:a9:4f:35:69:42:8e:bc:76:
67:75:2d:7d:78:43:58:91:17:98:05:1c:eb:a3:c8:
80:3c:85:de:2a:47:e1:d2:ea:74:fa:a7:c5:98:56:
15:cc:dd:fa:34:03:64:f7:9c:bf:74:f8:29:96:74:
09:ef:2c:fd:e4:07:d5:87:21:d5:70:31:54:66:99:
da:a2:6b:82:63:b9:3c:9e:bc:38:04:c4:76:d1:05:
51:3f:d2:30:af:31:ee:24:35:bf:b6:55:0e:ce:98:
98:05:9c:31:54:3e:60:cb:33:75:f3:f1:3c:89:e6:
11:b4:b3:4a:09:e7:ea:96:41:04:4f:99:c1:cc:6a:
3f:fe:1a:6e:89:c9:5d:18:79:67:60:92:3f:88:48:
48:38:05:75:be:d5:a4:77:a4:95:7b:42:44:8f:3d:
31:1c:47:3a:7b:a9:36:29:aa:08:47:1a:e0:cb:9b:
9d:2e:c1:e4:81:7d:da:4b:17:66:75:34:a0:95:18:
39:a0:f8:0f:fa:c7:b3:7f:0e:c9:97:22:52:53:b0:
b8:81:da:cc:4e:28:89:41:f4:dc:5b:24:64:39:9e:
99:e9:3b:fb:7d:41:84:cf:ab:ee:1c:40:a1:8d:e9:
11:5a:06:9d:96:f9:b4:0a:1b:7b:16:7e:16:ff:48:
d6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D1:44:30:30:C3:0B:E2:D7:39:90:F3:25:EC:CB:EF:0F:D6:D7:4E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cc0aebb-f3bc-4f9b-a19c-f51e546c950d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.41.0.0/17
Signature Algorithm: sha256WithRSAEncryption
78:24:a0:d3:52:c7:c2:ef:0a:40:0f:b5:89:46:b6:cd:9e:74:
f5:eb:08:d3:01:af:9c:4d:12:76:7b:57:1c:5b:85:96:28:d5:
40:7b:b0:10:55:a7:8c:79:fc:5e:14:5d:d4:68:13:ac:a6:01:
25:83:68:04:eb:c7:d2:48:78:5f:31:10:58:cd:7a:1d:73:a1:
b3:82:bd:fe:73:e1:98:da:7a:60:e1:53:b4:1d:68:60:07:08:
d1:0f:ea:db:a2:1d:16:98:d0:e0:22:fa:ce:37:a1:b3:75:7b:
f5:97:6e:23:d5:2e:f7:50:40:53:ac:7c:6f:71:4d:3f:24:92:
37:e6:0c:dd:6b:49:ee:a0:1f:e3:58:62:9b:01:14:1a:71:6f:
89:22:51:d2:c6:78:64:93:d7:59:c9:06:91:bf:44:97:2f:99:
e9:5c:64:ad:95:01:ac:52:d6:df:d4:50:ea:40:41:7a:43:c8:
62:bc:81:4f:79:73:fa:42:71:9d:03:b9:18:40:06:76:67:7a:
50:f9:33:27:d6:b9:12:fb:52:67:5d:df:27:47:92:1d:03:5b:
68:b5:04:fd:2c:09:ac:38:2c:23:61:b9:80:60:97:07:d7:9c:
4e:f7:6e:a7:a4:f3:2e:66:94:fe:30:f8:34:00:ee:ef:0c:4f:
95:7c:09:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:12 2025 by rpki-client