Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36abedd0-558b-48a5-8138-2734946bc4ce.roa
File: 36abedd0-558b-48a5-8138-2734946bc4ce.roa (raw, json)
Hash identifier: SJjclE+qup0oQOUAKuXlWKbIZ4o8d/1Q6wRCRSGehjE=
Subject key identifier: A9:3E:13:DC:E9:36:A5:E1:B9:71:43:2B:FE:3C:76:20:D2:80:81:B9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2BA42FAB7FECEBF9939ACF2F4DBFC25388CF793C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36abedd0-558b-48a5-8138-2734946bc4ce.roa
Signing time: Fri 14 Mar 2025 00:40:20 +0000
ROA not before: Fri 14 Mar 2025 00:40:20 +0000
ROA not after: Fri 18 Apr 2025 23:59:59 +0000
asID: 19047
IP address blocks: 70.130.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 17:23:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:a4:2f:ab:7f:ec:eb:f9:93:9a:cf:2f:4d:bf:c2:53:88:cf:79:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 14 00:40:20 2025 GMT
Not After : Apr 18 23:59:59 2025 GMT
Subject: serialNumber=16948b3670b69cacd74e8e29526796164ca35a9a15d6a4bc4c892728d870f75a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:68:3e:1b:b2:f5:11:f5:1b:2a:62:2c:6c:
16:1e:0c:d7:f6:1b:13:e8:3f:c3:94:86:80:fe:2c:
0f:dd:1d:63:a9:7b:ea:10:c3:2f:9b:02:89:c8:7c:
62:e0:dd:9a:62:a8:ea:ae:6e:98:05:a1:63:ce:40:
c0:e3:70:5c:5f:f6:0e:21:2e:63:d2:85:32:95:ec:
31:38:b0:cc:0e:0f:36:90:25:79:85:ef:db:01:fc:
4b:56:f5:56:05:a2:ad:18:7c:a4:31:6c:70:c5:40:
ef:62:bd:ce:ce:1c:57:82:24:22:4d:08:46:2b:7c:
d7:0d:ce:f8:ff:6f:ae:72:80:16:50:12:3a:15:45:
09:f8:ad:16:5e:5c:4d:8b:03:4f:20:f7:cd:a6:00:
2f:03:72:34:ab:33:9e:0e:46:67:99:09:f5:72:78:
ab:e1:31:72:7e:54:1c:28:dc:e1:89:36:10:c8:b8:
5e:8b:47:91:8f:f4:76:bf:b0:27:d6:ec:12:ad:0b:
de:a5:3c:59:89:7f:06:8e:3f:85:c9:a0:14:19:93:
47:f5:8e:a6:4c:88:64:6b:68:ee:a7:48:de:45:91:
a0:0a:36:57:3c:1f:13:1f:b3:89:d5:e8:94:f0:2c:
33:51:6a:f8:40:35:6c:84:ff:5d:6c:d6:19:35:29:
70:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3E:13:DC:E9:36:A5:E1:B9:71:43:2B:FE:3C:76:20:D2:80:81:B9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36abedd0-558b-48a5-8138-2734946bc4ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.130.213.0/24
Signature Algorithm: sha256WithRSAEncryption
64:62:3d:ae:0c:e9:8b:3c:70:26:90:81:50:7f:0f:49:83:08:
03:1f:4b:d5:af:05:f3:78:9d:74:18:de:18:fe:97:e8:f3:d8:
b5:9b:be:aa:31:07:03:84:d6:0c:50:1b:38:47:4d:23:6f:f9:
ac:65:47:07:b6:6e:cb:87:19:e1:f5:0d:28:a3:7c:3c:fb:8e:
aa:12:76:58:81:6e:4f:2d:77:cf:1b:c1:1b:21:fb:2a:13:97:
3e:78:90:c5:9d:ed:17:0a:44:07:a1:b0:05:8a:60:50:19:87:
06:f6:8f:c6:bd:5e:63:0d:71:33:f6:95:01:03:c7:5a:da:5d:
a3:ab:7d:5d:6a:97:76:46:ee:14:02:c6:5a:c5:72:e8:7c:f2:
d2:ec:1d:6f:40:a7:70:31:3e:4a:d7:42:15:3e:55:74:f9:e8:
14:bb:97:30:7f:e5:48:1c:41:61:cb:e4:86:cf:5f:20:cd:5b:
76:97:26:96:5f:81:9d:09:96:7f:b2:8b:9e:76:4c:47:e6:af:
2f:39:4c:22:f4:6f:cc:23:57:12:e5:b6:43:56:68:b2:10:7d:
f5:5e:92:24:38:25:36:46:7c:7c:40:59:5b:cc:6a:61:aa:ff:
fa:8b:16:b4:ef:7e:bd:75:06:9a:bf:6a:0a:9d:8a:e3:c3:16:
90:37:42:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:17:55 2025 by rpki-client