Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/451673e6-334d-4e4b-b936-5534942489c1.roa
File: 451673e6-334d-4e4b-b936-5534942489c1.roa (raw, json)
Hash identifier: iZ6VWKmvWJ9p/oAOc1UCwQQecPiDp1JzOnYzZ7y7XXc=
Subject key identifier: F1:7C:35:7F:A0:D8:B7:E2:6D:5B:F7:53:DD:F6:EE:91:6E:FC:C1:6C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 07278782B627C2805333B96ED48E9E1D9A87DC70
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/451673e6-334d-4e4b-b936-5534942489c1.roa
Signing time: Tue 04 Feb 2025 00:00:00 +0000
ROA not before: Tue 04 Feb 2025 00:00:00 +0000
ROA not after: Tue 11 Mar 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1fff:5000::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 04 Feb 2025 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:27:87:82:b6:27:c2:80:53:33:b9:6e:d4:8e:9e:1d:9a:87:dc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 4 00:00:00 2025 GMT
Not After : Mar 11 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:ce:ab:42:04:39:90:4a:f1:56:50:9b:91:
9a:75:fb:0e:4b:b7:87:bf:8a:41:ca:63:e0:5f:d4:
58:48:5a:cb:49:a5:68:e0:13:b0:3b:01:db:08:56:
70:85:79:71:af:9e:61:a1:d9:d5:d6:1c:99:10:ec:
87:02:a3:67:ed:8d:5c:30:56:de:f8:3f:69:59:ff:
04:38:3e:e8:f3:99:8d:de:90:e3:f8:fc:57:e3:1d:
58:55:97:60:20:d9:56:4a:b6:7e:6d:ed:08:f8:d7:
61:f4:62:ad:67:38:91:0c:09:c7:c8:b4:cc:18:ed:
eb:25:dc:ab:3a:bb:6a:aa:04:6f:46:ac:be:4b:72:
28:00:c7:d3:dd:87:d8:c9:b1:49:44:fb:39:b7:18:
5f:ce:22:cb:07:d8:fb:a2:40:a8:4f:c2:bb:33:51:
4e:2e:c8:70:aa:b1:0c:4c:1e:27:9b:72:92:f3:36:
5a:41:2f:d6:ab:9f:b9:4d:20:12:3b:a6:88:cc:e6:
91:aa:ba:14:74:45:c6:b8:6c:b5:e9:14:b0:21:ff:
de:34:1b:53:ad:9e:31:92:7f:5d:a2:a6:f5:bb:da:
3b:26:79:09:78:e1:79:5a:43:56:dc:6d:71:ca:03:
96:cd:6a:d9:72:5a:92:30:78:e1:ef:70:8f:fe:01:
80:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7C:35:7F:A0:D8:B7:E2:6D:5B:F7:53:DD:F6:EE:91:6E:FC:C1:6C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/451673e6-334d-4e4b-b936-5534942489c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:5000::/40
Signature Algorithm: sha256WithRSAEncryption
9c:47:9d:50:6e:5d:4c:b9:a7:e0:69:b5:62:a3:7d:d2:7f:c8:
45:c3:d2:0c:41:70:d3:7a:b0:08:df:5c:f4:33:48:76:a0:34:
b4:7f:f9:07:31:3f:16:c0:18:a4:7c:f3:2e:13:75:d2:05:34:
72:8f:22:91:de:4f:bb:bd:7e:ad:28:cd:fb:3e:c9:1d:36:d7:
bc:29:58:d1:57:c0:42:f3:0d:ad:43:b0:24:4d:82:ce:c2:a8:
e5:ac:e2:1a:c4:90:c5:20:26:d2:39:4a:11:74:f1:d3:21:4a:
ef:d6:4f:28:ec:96:25:32:40:fa:1e:07:6c:03:d7:2a:5f:1c:
05:d3:24:da:e4:f6:bb:ee:55:56:af:eb:59:fd:d4:29:04:69:
73:74:6a:4c:03:a2:65:b8:20:38:18:22:c0:6b:94:af:b7:f4:
58:31:67:5b:5a:72:e9:03:b3:72:c5:a1:3f:6c:1f:30:7d:d2:
8e:63:3f:39:2c:7b:a0:9c:61:60:97:7c:b1:6b:31:c8:ab:fc:
83:7d:47:d6:76:b4:d8:b1:02:ae:44:d5:61:cf:6a:86:7e:52:
50:f0:f0:c1:16:8b:6f:21:1b:44:dc:34:88:d9:50:48:f3:52:
9e:e3:59:05:a4:af:13:49:33:cb:af:a8:92:3a:21:24:d4:19:
38:55:a7:9c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 5 16:06:45 2025 by rpki-client