Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/321e122d-4953-42fc-a89c-0207fc29d9e3.roa
File: 321e122d-4953-42fc-a89c-0207fc29d9e3.roa (raw, json)
Hash identifier: DoS2uISwSYwu9MySiM+vls3+Wgq8uDNtJD/m6Zzx06o=
Subject key identifier: 8C:33:E3:F6:ED:F9:26:3D:0F:30:C0:0D:D3:75:0E:F0:51:87:BA:7B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 55BB67454F421660E8C6BEECF21485AE85B120E8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/321e122d-4953-42fc-a89c-0207fc29d9e3.roa
Signing time: Sat 15 Mar 2025 00:30:25 +0000
ROA not before: Sat 15 Mar 2025 00:30:25 +0000
ROA not after: Sat 19 Apr 2025 23:59:59 +0000
asID: 19047
IP address blocks: 70.130.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 17:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:bb:67:45:4f:42:16:60:e8:c6:be:ec:f2:14:85:ae:85:b1:20:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 15 00:30:25 2025 GMT
Not After : Apr 19 23:59:59 2025 GMT
Subject: serialNumber=e993ab654b29ec25acc15ded26262a442088639deaa0eb0e23638ec0c1d148f4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cd:71:84:d6:e7:2c:be:f4:ca:ba:3e:06:dd:
f2:0c:76:c0:2a:ae:e7:fd:29:be:49:10:5e:de:4a:
48:3f:e9:cb:20:e2:f4:76:e6:57:2f:10:35:54:71:
3b:ea:67:40:9a:43:c4:94:02:98:ba:ea:c8:ae:03:
ec:28:77:92:db:bd:76:ed:c7:cf:1a:f9:11:0e:dc:
57:ac:dc:ef:5e:23:51:69:77:92:88:31:39:43:1c:
a4:65:94:f9:d2:eb:16:c5:67:32:0b:e4:34:c4:cf:
c0:24:94:66:6c:5d:60:35:df:81:d9:f9:12:dc:f8:
89:b2:55:2c:c5:37:e9:d8:75:2c:3a:19:c1:13:92:
a7:b0:05:1d:c5:ab:1a:8a:5c:d4:32:ab:31:3f:f6:
3a:9f:4b:24:56:f1:43:ac:9a:2d:a4:59:cc:a5:e1:
c6:bc:f5:f6:d4:6e:e9:56:bf:49:b6:07:01:9d:a5:
72:7a:bc:c2:e7:21:15:43:82:50:d8:22:e6:a8:1c:
d0:df:51:20:ed:0e:46:23:9b:62:19:87:c6:57:a1:
f6:63:52:3f:2b:a5:89:9c:55:19:90:2a:55:ac:fc:
93:75:37:d0:4a:e7:a4:44:fa:e5:88:b7:3c:52:e5:
ff:0f:6b:8a:9d:d7:a6:75:0d:9d:71:f8:0a:b8:48:
64:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:33:E3:F6:ED:F9:26:3D:0F:30:C0:0D:D3:75:0E:F0:51:87:BA:7B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/321e122d-4953-42fc-a89c-0207fc29d9e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.130.203.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:c2:d9:d2:b9:db:a2:3a:f6:f6:50:02:f5:8b:1e:3a:72:71:
87:5a:7a:0a:62:58:39:ab:c4:1d:27:a8:5e:80:05:b8:fd:7e:
5e:e9:a8:83:8d:e1:89:a3:d4:fd:aa:ff:1c:ce:21:a1:1d:90:
4a:36:ca:d3:9d:00:2e:41:8d:37:23:8d:c4:c4:a8:fc:e2:d9:
a6:bf:d6:3a:4d:2c:a7:75:d2:ff:ef:c8:2e:df:98:f3:a9:9d:
7b:b7:42:35:f0:6a:a2:2b:73:bf:62:04:23:30:e2:52:ec:3f:
1d:6e:8a:0c:8a:88:5b:b7:1c:d5:fa:12:90:8b:1d:3d:d0:4b:
95:48:4b:b4:30:ab:88:de:d0:d5:e0:53:a0:88:75:14:43:b9:
b1:16:75:7b:06:57:08:91:f7:ba:27:cb:61:45:2b:9b:15:3f:
f0:ec:cc:cb:74:21:a7:df:ed:52:39:87:bd:a8:84:92:31:b4:
50:e2:d4:f8:92:86:9f:32:b4:60:e7:fe:cb:e3:52:3f:24:f8:
c5:1c:70:86:1f:27:b8:d8:4a:d3:5e:fb:cd:77:1c:9c:c5:f1:
63:0e:57:53:ea:d3:46:83:5c:84:51:b2:98:67:ab:25:f8:48:
5b:39:2e:90:4a:ae:3c:4f:0f:c6:55:44:02:bf:7b:82:83:ea:
ca:1e:72:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:41:05 2025 by rpki-client