Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5408789c-97f1-4f47-ba64-b2e307733664.roa
File: 5408789c-97f1-4f47-ba64-b2e307733664.roa (raw, json)
Hash identifier: uTc35eURdO4WYLVTpiZcyqGhylEXLZpzsmLoU40wAt0=
Subject key identifier: 30:C9:BF:7C:03:F1:BC:5B:FB:A2:24:B6:76:DF:D2:56:7D:50:11:5A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 33D56C7EC85A1959082C675ADD612142644D8696
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5408789c-97f1-4f47-ba64-b2e307733664.roa
Signing time: Tue 04 Feb 2025 00:00:00 +0000
ROA not before: Tue 04 Feb 2025 00:00:00 +0000
ROA not after: Tue 11 Mar 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1ffb:8000::/39 maxlen: 39
Validation: Failed, certificate revoked on Tue 04 Feb 2025 18:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d5:6c:7e:c8:5a:19:59:08:2c:67:5a:dd:61:21:42:64:4d:86:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 4 00:00:00 2025 GMT
Not After : Mar 11 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:bf:67:6d:1d:5b:e1:e4:3e:ab:cc:20:c4:
6d:ef:2e:32:5c:4f:7c:19:e1:13:f4:1d:07:fc:d1:
41:86:ab:24:28:82:4c:7b:23:f2:a5:63:7c:72:b2:
ea:e0:6f:80:9c:05:63:2e:64:4c:6a:b8:17:9e:3f:
c5:0d:7a:3a:9d:40:0c:fc:a7:13:6e:ba:3e:60:0a:
e5:bc:6c:c8:a1:db:b2:23:6d:fd:f7:86:e5:de:ce:
03:cb:00:16:49:68:18:ee:58:38:e5:fd:60:02:73:
3c:02:ca:5b:02:3f:db:3c:2b:6c:37:35:b2:fa:af:
7f:0b:27:8d:9d:92:19:6e:25:3c:9c:8d:99:1e:0a:
b0:28:ad:21:89:0b:9e:81:6d:2b:6c:64:73:73:c1:
89:5c:4c:f7:1a:2f:47:8c:1f:13:07:c6:53:40:de:
84:d2:69:7b:8e:38:79:5b:cf:f7:35:88:b3:cd:9d:
a7:94:aa:9f:69:de:41:51:69:ef:70:21:6f:26:d4:
52:db:37:71:67:a7:5c:f0:68:0d:51:97:b6:bd:b9:
cf:e8:6a:2c:aa:32:84:35:93:55:f8:cb:c9:e0:c3:
2d:07:38:f9:f8:ef:ba:09:fe:42:6c:f3:67:3c:e7:
fe:a9:03:d8:3a:f1:b3:ed:fc:25:50:f4:06:1d:7e:
8b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C9:BF:7C:03:F1:BC:5B:FB:A2:24:B6:76:DF:D2:56:7D:50:11:5A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5408789c-97f1-4f47-ba64-b2e307733664.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffb:8000::/39
Signature Algorithm: sha256WithRSAEncryption
5e:4a:ef:ec:60:64:e4:ea:ad:1b:c0:ff:1b:b9:fc:4d:d4:1f:
74:fc:ba:14:28:78:62:e6:11:2b:77:a2:d4:93:31:d9:5d:60:
4a:7e:ff:a4:e2:93:52:bb:be:58:4d:d1:82:63:bc:31:5e:c5:
6f:98:2a:c5:b0:92:1a:b4:ba:ff:6c:5e:4a:b5:18:55:59:bc:
2f:04:e7:90:91:e0:41:83:40:44:b8:c8:71:db:54:51:64:41:
26:c7:71:86:99:7f:c7:54:11:52:af:21:6a:96:b6:b7:ca:c0:
b7:08:e2:79:87:51:07:26:2f:a1:5f:54:14:03:4f:ab:ba:d9:
4b:ae:6b:c6:9d:68:41:5e:c5:48:56:fe:cc:66:d8:c1:19:ad:
68:f3:23:03:61:03:5d:bc:d5:cd:ea:15:97:be:21:0c:ea:a8:
72:a3:ca:f1:fc:2f:c0:3a:7b:60:2e:2b:16:48:61:5c:08:ef:
eb:ab:2c:43:39:ca:62:af:7a:b2:5e:36:d2:e1:51:bf:65:20:
8d:a4:75:e3:4f:01:1b:15:2a:af:0c:20:07:fc:bb:9d:fb:c2:
c5:e2:0d:33:61:05:92:6d:6a:78:98:20:da:a8:e3:3f:42:59:
a8:39:b6:5c:26:30:7a:2c:9b:b6:b8:3e:2c:aa:78:19:52:27:
4e:7a:0f:85
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:53 2025 by rpki-client