Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34a05f92-5789-4c03-a02c-fef5fc4e425a.roa
File: 34a05f92-5789-4c03-a02c-fef5fc4e425a.roa (raw, json)
Hash identifier: 6hfAMqOJoyCccyuwmWe4Jz65qA7xXJyQ5obP32I9XwM=
Subject key identifier: B6:D2:5F:D4:91:02:C7:21:35:4F:F1:9F:CA:C4:DB:09:2C:51:FA:13
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 46CC48811241357AF3038CFDDF4CCEA860F884E2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34a05f92-5789-4c03-a02c-fef5fc4e425a.roa
Signing time: Fri 11 Oct 2024 00:00:00 +0000
ROA not before: Fri 11 Oct 2024 00:00:00 +0000
ROA not after: Fri 15 Nov 2024 23:59:59 +0000
asID: 16509
IP address blocks: 204.31.80.0/20 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 15:11:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:cc:48:81:12:41:35:7a:f3:03:8c:fd:df:4c:ce:a8:60:f8:84:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 11 00:00:00 2024 GMT
Not After : Nov 15 23:59:59 2024 GMT
Subject: serialNumber=1c3a67fcf54e79307376590d2ddef3d94897e5b1be2ce0763d70e331fd32f836, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8f:f6:a0:18:46:68:61:f1:4d:d6:82:ac:32:
1d:68:71:43:54:b9:fc:6b:47:43:35:4c:a0:3b:57:
14:f6:3f:5c:cc:e3:26:11:90:45:b6:63:37:96:41:
94:6b:6e:f7:99:24:ae:9d:33:da:48:4a:cd:89:49:
54:b9:b0:8e:47:5f:20:78:0b:81:0f:cc:9c:90:e0:
05:95:83:81:41:44:a4:7d:46:10:35:99:a2:ec:6e:
b6:e4:db:fc:e9:dc:db:a9:4d:24:f9:4f:4b:79:0a:
55:70:90:30:8f:af:2a:a5:24:f1:78:16:60:ee:0c:
2f:71:a4:2c:1c:fa:99:c2:0a:63:a4:0d:19:2f:e8:
47:65:f1:ba:6f:95:87:77:52:6d:10:cb:ea:90:a4:
ec:12:11:72:84:a5:e3:49:68:6e:2d:b3:fa:fe:4f:
63:6a:ac:25:7a:88:ca:bf:be:ed:8b:0a:3f:a4:19:
c6:2c:68:50:ef:23:4e:2a:38:f4:9f:ae:a0:98:15:
6e:4b:8d:56:7a:c4:40:5c:ce:fd:95:76:8b:16:c2:
be:12:9e:5b:66:d4:69:b9:ed:56:1e:ba:e4:ee:6b:
67:82:06:85:bc:4d:37:11:43:31:d2:37:7c:93:35:
06:d7:36:00:8d:cd:d3:00:5e:e9:a7:e9:1c:f9:a9:
b5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D2:5F:D4:91:02:C7:21:35:4F:F1:9F:CA:C4:DB:09:2C:51:FA:13
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34a05f92-5789-4c03-a02c-fef5fc4e425a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.31.80.0/20
Signature Algorithm: sha256WithRSAEncryption
b5:ab:fd:66:b9:29:76:7e:dd:a6:fe:8b:2e:c5:cd:54:0d:79:
e6:b8:d9:23:2d:ee:18:02:8c:63:49:99:f7:7b:dc:8e:7a:66:
b9:00:62:eb:a6:72:bb:57:6d:00:27:95:07:ce:ae:25:2d:02:
ca:13:29:fc:04:fe:0a:3e:20:76:2a:2e:3c:f1:41:1b:94:71:
05:1a:ee:85:83:68:6b:c5:98:d6:8c:60:b9:49:d3:cd:02:db:
03:50:77:3a:48:34:f8:9f:f9:ff:23:6d:65:e2:a0:58:f9:42:
60:da:85:83:47:3e:95:f1:aa:31:f6:7a:f1:45:34:04:28:86:
63:12:86:44:7f:75:80:0d:f6:38:b7:cc:cc:b1:ed:5c:f7:2d:
f2:09:d0:63:cd:46:45:b3:4b:83:34:99:e9:bd:96:52:c3:2f:
58:12:75:b1:ce:ef:0f:a5:04:0b:95:ec:8a:aa:93:5e:83:3c:
d5:6f:78:87:41:64:b2:79:e3:70:7a:e8:4e:7c:b3:c4:50:49:
1b:c4:c0:02:ec:d1:f7:68:82:d7:2d:93:eb:7f:2b:e2:1f:80:
0b:75:94:4e:a4:32:69:6a:38:36:97:6c:38:98:43:26:93:7d:
af:62:36:14:1b:37:89:69:ac:bf:54:60:51:ec:3c:68:66:a8:
8f:d1:17:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 17:28:40 2024 by rpki-client on console-fra.rpki-client.org