Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8305547a-da17-456f-b279-caefe677572d.roa
File: 8305547a-da17-456f-b279-caefe677572d.roa (raw, json)
Hash identifier: RVWsmOJNp9n9dD9cOBDMKnEjIKkfbiBMLZK4rcKz3YA=
Subject key identifier: 6E:79:E5:FE:3F:DB:8A:5C:C3:4F:C5:D9:1B:C0:9F:FC:93:A1:ED:F0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5CC4F34AF767050324CC0E9855A234A5884D9485
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8305547a-da17-456f-b279-caefe677572d.roa
Signing time: Tue 04 Feb 2025 00:00:00 +0000
ROA not before: Tue 04 Feb 2025 00:00:00 +0000
ROA not after: Tue 11 Mar 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1ff7:2000::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 04 Feb 2025 17:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:c4:f3:4a:f7:67:05:03:24:cc:0e:98:55:a2:34:a5:88:4d:94:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 4 00:00:00 2025 GMT
Not After : Mar 11 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:d0:c7:45:6e:9a:3a:d3:a0:ab:af:f8:7a:
ba:33:5a:f1:e8:82:08:de:a0:73:7a:7b:75:84:aa:
86:f1:97:18:49:d8:3b:02:8c:7e:8f:4b:5d:4f:1c:
ed:d2:f0:30:f5:f2:a0:a4:f6:a2:91:74:52:40:83:
84:86:d2:77:6a:96:01:64:f4:c0:50:29:08:68:fe:
ef:13:17:c5:59:ec:89:35:28:d3:87:8b:39:c5:72:
af:d7:f2:a3:e9:7c:3e:9f:de:96:67:20:54:07:22:
9a:be:96:df:68:9f:5f:b0:9d:c0:9b:2c:ed:a9:46:
dd:b9:58:66:b0:d1:70:3b:11:d7:9a:a5:f1:d0:86:
84:23:ea:2f:60:11:db:f0:21:66:a5:cc:8f:48:71:
67:2f:b7:1e:bb:83:fe:d6:25:94:ba:d5:0a:31:1c:
b9:6f:a1:06:fd:9a:30:df:63:e2:cb:30:95:0d:d3:
01:fb:51:d7:db:27:44:bd:a2:6e:b4:d4:fd:b1:26:
a1:fd:ed:84:4f:a1:4f:3c:0e:8a:8c:7c:da:c4:02:
9f:98:c1:3f:f6:11:07:42:8e:de:3e:06:6c:4e:ba:
6b:48:9a:f7:a0:66:f4:0b:65:43:ed:40:b5:f0:bc:
09:b1:e1:e5:5f:2e:34:98:85:78:f3:f4:a7:43:68:
c7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:79:E5:FE:3F:DB:8A:5C:C3:4F:C5:D9:1B:C0:9F:FC:93:A1:ED:F0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8305547a-da17-456f-b279-caefe677572d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff7:2000::/40
Signature Algorithm: sha256WithRSAEncryption
12:38:d8:26:88:3c:8e:85:9a:fe:bd:4e:69:b2:0c:e4:b6:cd:
a3:8f:59:57:b6:1f:27:0c:e4:e9:44:38:90:0d:9d:a7:59:28:
b7:bb:a5:f6:6d:f5:44:f3:3f:37:0b:f6:7e:24:57:96:67:c9:
ca:08:1d:1f:cd:13:d9:5d:3f:c1:19:d1:b9:42:4c:80:5b:41:
5d:51:4a:26:49:fa:e9:76:40:94:51:01:d1:a3:72:fe:ca:83:
27:d7:87:d3:3f:df:ce:79:d7:f3:65:13:4c:a0:df:5f:0d:65:
e8:d8:04:c7:8c:c8:c7:cf:10:00:21:47:f8:11:55:33:3d:28:
2c:e1:c1:5f:82:7a:4f:51:09:3b:b1:bc:89:e1:21:0a:62:62:
e2:14:75:d9:3f:ae:b1:c6:39:a2:67:e3:46:ac:f9:c2:f9:7e:
52:40:81:43:0e:3c:34:65:7b:4f:96:92:ee:0a:f5:0b:a5:da:
62:65:e9:c2:a7:20:3a:1b:6a:92:d0:bd:60:35:40:db:7c:0c:
19:17:69:dd:8a:f2:0a:58:9c:fd:08:cd:34:59:42:65:d3:24:
ca:99:49:66:e6:d2:55:3e:cf:25:a0:2b:b6:bf:8b:e7:5e:1d:
25:c8:f0:ef:89:69:be:80:b8:82:a8:84:f2:13:f2:2f:6d:18:
45:b5:11:38
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 5 16:02:49 2025 by rpki-client