Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d56adf4-4a08-4b7f-b25d-a277cef945a5.roa
File: 4d56adf4-4a08-4b7f-b25d-a277cef945a5.roa (raw, json)
Hash identifier: zosbIgLRViSz9mmcDf5dH4i9tiWhzdlhy3r186VuATk=
Subject key identifier: 3D:A3:41:84:C1:EB:54:21:29:12:36:47:86:55:0E:F0:D5:64:36:63
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6CCFE46E61C1E2A6BBD99BD7A5025054000C5BC9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d56adf4-4a08-4b7f-b25d-a277cef945a5.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 107.21.64.0/18 maxlen: 18
Validation: Failed, certificate revoked on Mon 13 Jan 2025 16:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:cf:e4:6e:61:c1:e2:a6:bb:d9:9b:d7:a5:02:50:54:00:0c:5b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:e7:8c:21:ce:20:59:88:ad:57:fe:f0:b2:
11:71:1f:d3:a8:a8:54:20:35:b8:d8:d3:d5:d5:41:
1c:15:74:fc:77:79:9a:5a:b3:0e:d2:54:86:73:b8:
df:4e:52:81:d3:ed:70:39:fc:92:09:b2:94:a6:65:
ce:59:d5:84:4a:3d:20:28:51:80:85:b8:b4:2f:75:
36:96:1e:3a:0b:45:cd:f1:c9:d3:cc:ac:2e:9c:28:
bc:f3:37:e6:5e:a9:81:e0:fb:38:bd:29:e7:66:9b:
37:4e:ea:4e:5f:ee:ed:99:fa:cd:d2:f6:4c:50:c8:
b3:fe:df:b8:ac:32:ac:ae:24:38:a5:9c:d6:55:ba:
28:2c:e9:6f:e4:a8:37:70:83:06:ff:01:0b:5c:8e:
37:16:b7:47:c9:02:66:48:7d:92:0d:97:b7:3c:2f:
b0:d8:78:88:f5:ce:fd:81:18:04:d2:96:4f:a1:7c:
83:5f:d6:f6:09:a7:e7:7b:ca:e5:01:67:0c:a7:d3:
56:f5:61:c6:ec:dd:d3:2b:f6:1f:36:f6:37:71:b0:
b6:b7:12:34:cf:9e:c3:29:2b:90:2a:74:b2:b3:92:
05:3e:40:f2:0f:e1:50:8e:b4:ad:ca:71:f5:4f:b9:
6a:ad:73:a3:a5:db:99:25:6b:8b:92:0f:37:a2:b1:
0f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A3:41:84:C1:EB:54:21:29:12:36:47:86:55:0E:F0:D5:64:36:63
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d56adf4-4a08-4b7f-b25d-a277cef945a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.21.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3a:b3:18:52:e8:c4:a0:cd:2f:2e:dd:8e:97:e8:97:f6:63:63:
b4:07:42:b9:8f:60:7a:92:0a:43:2d:f0:d8:65:90:a7:2c:36:
d0:4b:71:cb:99:f0:a8:a2:58:16:18:a5:49:76:1f:d3:a8:4e:
ce:ac:6d:64:c1:88:7b:f6:86:e6:2f:e1:7d:65:a6:c9:0e:4d:
9e:ef:7b:62:51:73:38:55:12:23:a0:ee:da:63:88:09:18:52:
60:19:b9:f3:d1:91:1e:a2:5c:d3:4c:41:f0:43:bc:6d:1e:19:
f2:e6:ea:b2:7f:9f:ab:fe:16:66:36:14:54:0d:32:1d:bc:e6:
4a:6a:68:ce:4b:e8:cd:37:b9:0b:aa:4e:58:3b:1f:d7:e1:78:
2f:56:1a:bd:da:6b:be:5f:28:2d:ce:56:19:61:d3:8a:43:82:
62:07:c9:85:22:0a:16:4b:fa:ca:1f:77:48:8d:fc:67:5f:e9:
7d:2c:e7:e2:0c:57:2f:af:02:1b:da:95:67:30:95:72:a0:80:
f7:65:b7:52:b8:d7:a2:0b:47:e6:01:3e:18:d5:a1:0e:03:29:
9c:3c:b8:51:90:89:4d:03:63:c1:75:c5:fb:ed:56:2d:d5:be:
af:0a:00:5d:12:3a:c2:66:0f:e4:4a:d0:eb:01:68:1d:9f:cb:
67:9d:ec:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:05 2025 by rpki-client