Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6bb4c791-bbe0-4038-bbb8-fd743b6dac1e.roa
File: 6bb4c791-bbe0-4038-bbb8-fd743b6dac1e.roa (raw, json)
Hash identifier: WCUIBnEZ1Jvh/EWs5J1iQT6IS9Ump5VsHwEBA23YGJQ=
Subject key identifier: 1F:6E:06:C6:7C:D0:01:41:D6:5C:BE:7C:A6:D5:C7:F1:49:0B:A0:AE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 526EF5D2E781AD9993F93DB344B9C2361DEAEC07
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6bb4c791-bbe0-4038-bbb8-fd743b6dac1e.roa
Signing time: Wed 15 Jan 2025 00:00:00 +0000
ROA not before: Wed 15 Jan 2025 00:00:00 +0000
ROA not after: Wed 19 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 156.4.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 04:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:6e:f5:d2:e7:81:ad:99:93:f9:3d:b3:44:b9:c2:36:1d:ea:ec:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 15 00:00:00 2025 GMT
Not After : Feb 19 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d1:57:c0:d4:44:20:d6:24:a0:fc:5b:d7:e4:
b5:41:85:88:93:0c:c3:48:b9:a3:d9:d6:f6:a3:3b:
6a:89:53:13:3c:1f:f3:ef:4c:7a:6d:10:54:a8:65:
40:4e:32:c5:26:45:b3:77:b7:29:45:2d:52:49:93:
30:51:11:74:5e:3b:9e:28:f2:33:de:d6:92:8d:dc:
b6:3c:15:72:e5:58:48:bd:46:a6:98:2a:7d:b8:b4:
d2:03:8b:65:cd:70:13:09:3c:f9:50:10:24:07:65:
91:71:fe:74:9c:af:e0:7b:dd:f7:21:2b:c4:aa:80:
84:0e:be:24:bc:bb:ac:6a:54:13:88:66:f1:7b:4a:
70:8e:30:b1:c3:bd:41:6f:aa:2c:2c:8d:81:48:86:
2b:5b:9e:bd:9d:c1:33:3c:80:ce:f4:f6:2a:a7:72:
22:85:36:87:cc:1e:42:7a:28:d1:f7:ea:29:71:75:
4d:6b:e0:5a:a6:20:55:3b:7a:52:a9:db:23:23:36:
f0:48:11:8c:4b:5b:86:9e:4b:69:87:bb:08:19:1e:
f3:5a:cd:90:56:25:4d:1e:ae:59:00:97:8d:52:0f:
00:39:56:76:d2:f5:9c:ff:12:9f:e5:72:7e:a1:04:
7f:9b:2d:da:a6:eb:5a:12:d8:85:ad:18:26:09:84:
d4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6E:06:C6:7C:D0:01:41:D6:5C:BE:7C:A6:D5:C7:F1:49:0B:A0:AE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6bb4c791-bbe0-4038-bbb8-fd743b6dac1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.4.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:04:82:73:8e:b8:3d:87:e8:0c:fc:ab:8e:fb:6d:bf:42:83:
26:bf:bf:61:2e:5d:08:aa:73:fd:b0:d8:b2:0b:63:89:de:55:
e5:68:dd:7a:a0:66:8b:bc:64:40:5e:17:c8:31:ff:3d:a7:a4:
b9:d9:e9:23:48:d6:4b:73:bd:9d:58:38:c8:86:00:8f:a3:62:
8c:e0:72:be:ac:93:e1:be:b9:1a:2c:c0:b3:36:0c:2f:b4:88:
c3:11:dd:4a:25:42:6b:fc:73:be:ab:f9:13:8a:ee:93:f2:38:
62:0e:f9:60:98:05:54:8e:1a:e5:82:16:39:42:5d:d9:31:0f:
1e:3b:57:e8:7b:34:08:60:c8:77:e6:af:da:b9:75:c2:44:02:
fe:b6:03:81:02:1f:81:80:3b:3a:e5:8a:53:20:6a:b2:f0:d7:
15:e3:ed:9f:e4:a4:ef:f3:36:38:a3:f7:cf:23:f3:99:66:86:
7d:b6:66:48:2e:fc:29:d8:c1:01:1b:42:b4:51:a5:08:aa:db:
a1:3b:87:de:85:8a:88:e5:a6:f0:18:63:67:c5:66:3d:02:b7:
52:5e:4b:3b:e9:b1:b4:79:0c:e3:17:dc:38:dd:d6:4e:08:59:
80:f1:b5:21:33:19:dc:ac:11:42:66:e6:6b:34:2b:aa:1c:7b:
a4:33:9d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:11 2025 by rpki-client