Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69f5fc0a-604d-4737-91d0-fb70b7f8d47f.roa
File: 69f5fc0a-604d-4737-91d0-fb70b7f8d47f.roa (raw, json)
Hash identifier: Tt5F9aiKSVgzhzsCxi/TZcEZZjgwmg3C3zOpiW3jgNE=
Subject key identifier: C3:5A:78:CC:5B:92:73:A3:16:39:3C:26:52:9B:C6:FC:7B:32:94:D8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 714EC2A840201C8225DDFB3587031A397BD7731E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69f5fc0a-604d-4737-91d0-fb70b7f8d47f.roa
Signing time: Tue 04 Feb 2025 00:00:00 +0000
ROA not before: Tue 04 Feb 2025 00:00:00 +0000
ROA not after: Tue 11 Mar 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f21:4000::/36 maxlen: 36
Validation: Failed, certificate revoked on Tue 04 Feb 2025 21:10:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:4e:c2:a8:40:20:1c:82:25:dd:fb:35:87:03:1a:39:7b:d7:73:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 4 00:00:00 2025 GMT
Not After : Mar 11 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:99:a1:8b:a8:1d:5f:e1:74:4b:1a:5f:59:80:
2f:21:a0:b1:3f:5d:bf:c8:d7:02:f7:b1:47:04:dd:
4c:96:eb:19:9b:85:39:e3:6d:eb:5c:b1:de:5b:11:
e5:16:bf:5a:a3:6c:0f:ea:e0:ec:28:4b:f9:84:22:
27:50:ba:96:16:c3:ff:5b:56:72:48:c0:a0:05:03:
e3:b2:41:76:4d:3c:26:7d:8c:f2:fd:ea:a0:17:56:
5a:5e:56:4e:ea:f2:7c:fe:f0:49:b1:81:40:ce:72:
fc:f3:5f:fb:47:c4:38:51:fa:b2:7f:3c:27:6e:ed:
84:b3:28:e0:87:98:56:4c:57:66:6e:b1:a1:3c:bc:
f5:d0:13:55:49:57:cc:ac:c4:a0:52:b7:b2:6e:d9:
4d:44:88:5a:38:e4:d1:7a:71:2c:57:e5:34:40:a1:
0f:c4:17:d6:f8:22:95:c8:c7:a3:30:4a:ff:19:49:
2a:69:4d:e3:97:7e:86:9c:c9:08:ca:5f:fc:eb:74:
1c:d1:9b:a6:58:52:60:31:2e:4d:3c:04:3e:4d:2a:
e4:7c:49:33:e5:e5:b8:8a:f8:d6:bb:2f:51:41:d0:
c6:e0:3a:30:d8:43:27:02:e7:7d:4d:67:ad:10:19:
e0:28:32:0f:37:e4:63:3b:02:39:69:e0:df:ac:c0:
37:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5A:78:CC:5B:92:73:A3:16:39:3C:26:52:9B:C6:FC:7B:32:94:D8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69f5fc0a-604d-4737-91d0-fb70b7f8d47f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f21:4000::/36
Signature Algorithm: sha256WithRSAEncryption
8d:03:5b:8e:cf:d3:9f:6e:33:53:d3:ef:61:42:9f:56:a9:3b:
d8:4d:c1:58:fd:09:ca:df:93:cc:a7:17:0d:78:eb:f2:b0:f4:
b3:71:bf:d6:4b:35:b8:95:5b:33:b6:62:ad:03:57:e3:8f:f5:
f8:46:26:ec:b0:2a:6e:4f:71:fa:30:53:b9:6a:56:ea:7e:1e:
89:45:1b:6f:37:46:d5:a5:cf:b8:68:3b:4a:9e:d6:70:9a:e1:
bb:38:91:7c:43:3a:2c:8d:a1:ce:c1:77:e6:14:ef:b6:e0:5f:
8f:bd:e4:c9:90:d2:10:b1:70:85:a8:fd:e9:25:91:cc:ce:99:
e4:56:38:a4:ac:f5:df:f4:a9:f2:18:9b:c3:9d:c3:84:bf:b3:
43:16:fc:b3:6c:4c:01:0e:10:9e:7b:f5:d7:2d:3e:e7:cb:2d:
d5:75:e4:02:e8:c3:04:f5:43:bd:5a:a0:b8:50:03:29:13:6c:
21:44:c2:39:b2:86:39:e7:54:b3:52:f7:18:29:fb:ca:51:8e:
40:6d:a8:af:58:88:9d:5a:f3:ac:77:ae:ed:b2:27:d7:8c:6c:
e2:f5:ca:ca:25:e2:ff:41:85:f7:51:e3:c7:2a:9e:29:f4:11:
d1:d9:c5:82:bf:35:7c:36:df:06:9a:1c:1a:68:76:65:52:35:
aa:d8:c8:12
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:30 2025 by rpki-client