Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/765a6816-c1d2-4393-a19a-9b71e954d1fe.roa
File: 765a6816-c1d2-4393-a19a-9b71e954d1fe.roa (raw, json)
Hash identifier: zfImkWvRFN+s+ZD2iR24q6Mj3auNTbd7nfDoiB287y8=
Subject key identifier: 05:CB:EF:9E:2B:6F:21:EB:3F:7F:4B:0B:BD:8E:64:58:2C:B4:3C:B4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6F9F179A64763FF46C70D14BF1B565898D0F3186
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/765a6816-c1d2-4393-a19a-9b71e954d1fe.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 40.194.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 22:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:9f:17:9a:64:76:3f:f4:6c:70:d1:4b:f1:b5:65:89:8d:0f:31:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:1d:1f:7a:15:a8:d2:73:72:26:ff:32:44:
75:cf:0e:55:26:19:5e:5c:c2:56:f8:69:4d:e0:62:
62:c3:71:c7:eb:ae:47:13:ed:b0:4a:a2:95:88:cb:
20:eb:18:52:2c:23:40:1e:b0:8e:a0:19:dc:87:4a:
6a:f7:bd:3f:34:52:92:64:18:0c:71:0b:35:4a:b7:
94:1d:10:2e:72:92:6c:75:04:af:c0:a6:f6:8f:85:
35:92:05:7f:f3:44:2b:05:df:33:81:58:b1:57:62:
3a:ac:fa:ef:f0:e8:00:57:70:bf:72:0d:3e:b0:95:
a0:e9:e8:f9:48:30:57:47:19:e2:89:5c:f7:c1:06:
b8:07:d6:d6:86:29:c9:ff:45:28:4e:3e:2b:74:89:
de:f8:43:1d:18:8d:df:9e:d8:62:fe:5e:65:a6:88:
cf:9d:24:aa:31:30:23:28:d0:0e:65:4a:11:7c:a9:
e1:25:4a:bc:23:d7:c7:80:1c:52:c7:42:cd:dd:48:
ec:c5:fb:18:df:60:36:13:c3:32:8b:72:bd:80:6f:
6d:51:43:8c:0f:67:ca:ad:0e:60:0f:f5:a3:ac:b5:
ca:85:84:5e:d1:9e:a6:a1:f6:b8:3b:18:4a:49:51:
a5:da:2e:4f:d3:d6:57:0e:9d:0f:e3:05:db:0c:90:
17:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CB:EF:9E:2B:6F:21:EB:3F:7F:4B:0B:BD:8E:64:58:2C:B4:3C:B4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/765a6816-c1d2-4393-a19a-9b71e954d1fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.194.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b7:ff:9c:79:a2:69:6d:a1:bf:75:ab:af:8a:64:44:a0:52:89:
36:f0:99:c3:99:01:55:b8:09:cc:af:81:9e:c4:f5:9d:ff:27:
2c:ea:3a:7e:77:c8:d5:47:11:f4:f1:4c:27:1d:33:81:d2:14:
22:93:40:96:e5:9e:98:0a:bb:83:1c:4d:6c:db:72:c7:9f:45:
3f:89:aa:c3:ac:7b:56:0d:d6:bb:b5:af:2a:86:04:b7:01:fa:
31:8c:12:a8:fb:1c:62:5a:ea:24:a3:27:93:f0:63:2d:62:70:
f0:ee:8c:67:77:0a:64:84:62:b1:02:0a:7b:f5:f4:13:c2:8b:
00:19:f3:fc:64:44:b8:9b:1d:dd:94:15:b5:fa:e1:35:0a:db:
37:58:95:3a:f6:53:b2:bc:d6:3c:98:7c:cf:9f:ae:26:57:98:
64:3e:cd:c6:97:21:3a:3e:cc:fa:dc:69:c0:d2:ac:d6:80:53:
86:95:3c:b4:5a:de:81:84:3e:88:fc:4f:cc:71:5b:6f:ee:52:
71:d2:21:b8:37:19:70:6e:be:5a:32:33:cb:6e:48:67:05:fd:
f1:f7:3b:8b:70:92:e7:29:ae:3e:48:46:db:97:a3:dc:41:7a:
9e:03:d8:c6:34:ce:5c:8a:02:0a:82:3d:d5:ea:61:64:2d:12:
e6:f7:d3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:05 2025 by rpki-client