Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d4d4917-8a69-4ada-bf17-f2cbb5d79b3c.roa
File: 7d4d4917-8a69-4ada-bf17-f2cbb5d79b3c.roa (raw, json)
Hash identifier: MCHdX2E5nuPv9jFD0H5mp2AtNP+hCn+USdEkYi+BTeE=
Subject key identifier: 05:0E:6D:2F:A9:54:D1:D1:D9:58:F0:33:8A:BF:77:FA:8F:2E:58:30
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0CF58DDA41FFA20DDA129AF740FA4ACCC21FBC5B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d4d4917-8a69-4ada-bf17-f2cbb5d79b3c.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 63.180.0.0/14 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Dec 2024 20:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:f5:8d:da:41:ff:a2:0d:da:12:9a:f7:40:fa:4a:cc:c2:1f:bc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: serialNumber=5aaa96fe9c018f2a99289af6fb71c3070dc69242f6483f02fca8a3805ead0084, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fa:58:81:67:b6:a9:c0:96:93:12:3e:35:0c:
b4:5e:4b:e6:51:3f:1d:71:1e:60:99:b4:0f:aa:37:
2f:f9:87:68:b2:f3:55:18:22:f3:96:8d:67:af:40:
e3:c3:fb:0f:7f:c9:d9:3f:f5:fc:7d:f2:eb:90:15:
ca:fb:79:90:5c:74:44:17:d2:34:03:e9:7a:e1:b1:
e9:7f:b6:8d:bc:f9:81:ad:6f:91:0e:38:d6:da:18:
d3:16:b1:44:91:66:21:fb:16:d6:b1:e0:d9:1d:76:
34:1e:ae:71:32:49:c6:e7:0b:b4:87:38:42:b8:44:
da:21:27:47:ff:c8:bc:6a:55:ee:83:2f:6e:34:6e:
49:bf:1c:a7:03:c0:9e:76:61:3c:f3:e3:e6:fd:8a:
52:f2:5d:11:44:01:f3:d3:79:f8:87:49:49:24:1d:
ec:81:a0:88:42:53:bf:a2:b1:ef:bb:c9:e0:d7:93:
c4:c8:fd:15:ed:65:6a:8d:ad:96:b3:aa:6e:ad:bc:
a8:22:d6:0d:b7:da:7e:c0:ff:d4:95:dc:17:26:b6:
45:78:e6:6a:56:98:65:80:d9:5e:83:f7:1a:cf:47:
c5:bc:da:8e:91:dc:2d:64:d7:bf:01:2e:85:f3:e7:
fa:f1:10:ad:1a:d0:71:be:09:f7:8a:4f:bd:b8:43:
1b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0E:6D:2F:A9:54:D1:D1:D9:58:F0:33:8A:BF:77:FA:8F:2E:58:30
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d4d4917-8a69-4ada-bf17-f2cbb5d79b3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.180.0.0/14
Signature Algorithm: sha256WithRSAEncryption
be:2c:d0:ed:45:c8:f5:58:0d:1b:52:89:c4:14:8c:28:eb:38:
f4:a6:80:5c:1e:1b:75:2a:ae:4d:45:70:c9:25:c8:9b:0d:18:
d0:b5:f3:8c:19:b1:54:b7:f5:ec:f5:58:2d:9b:4d:28:d4:6a:
58:70:f6:01:7d:50:50:0e:d7:08:69:ba:19:5c:c2:f6:f0:95:
73:9f:02:df:40:2b:66:87:e6:a6:42:e2:ce:6a:9b:41:05:84:
0e:36:a2:e0:07:a8:cb:54:ae:fb:ae:eb:50:03:c2:a0:0d:c8:
df:4c:bc:de:4f:bf:cb:1e:a1:06:70:1c:a1:e4:f3:f4:95:c6:
52:6c:24:79:8e:c6:7f:01:9a:6d:e5:ad:33:d8:4c:8a:ca:5c:
52:99:01:42:da:d5:f3:ba:5c:db:fe:df:e3:18:7a:5e:db:04:
fc:09:35:38:ef:0f:c2:ef:1b:d7:d6:ce:99:5d:ef:77:38:d5:
bd:e8:a0:07:3b:6d:d9:32:7a:b3:11:2a:fc:da:61:5a:3c:4d:
6c:01:92:f2:19:64:02:95:62:97:c9:dd:07:d2:cf:76:3b:82:
08:d4:c5:b0:b7:a9:df:8f:f1:a8:e0:e5:9c:a9:cb:f7:2d:c9:
7a:b0:c7:f4:9b:7e:92:9c:7b:89:5c:be:e3:66:1a:1c:8d:58:
16:7d:90:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 19 22:14:59 2024 by rpki-client on console-fra.rpki-client.org