Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8329dbe2-4df9-4bf3-9077-92d6796dbdfd.roa
File: 8329dbe2-4df9-4bf3-9077-92d6796dbdfd.roa (raw, json)
Hash identifier: /gfVx9u/5MYXOzDe59FB/CMyCufEVS62LCe+vlO96L8=
Subject key identifier: C3:74:D3:E5:B8:B9:3B:3F:53:FC:93:7A:E7:B0:7E:D3:13:B0:F8:BC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 24810F72D9F91B1A2A5A5DE1F70D7F872816C24C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8329dbe2-4df9-4bf3-9077-92d6796dbdfd.roa
Signing time: Tue 04 Feb 2025 00:00:00 +0000
ROA not before: Tue 04 Feb 2025 00:00:00 +0000
ROA not after: Tue 11 Mar 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f15:4000::/36 maxlen: 36
Validation: Failed, certificate revoked on Tue 04 Feb 2025 21:11:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:81:0f:72:d9:f9:1b:1a:2a:5a:5d:e1:f7:0d:7f:87:28:16:c2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 4 00:00:00 2025 GMT
Not After : Mar 11 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:93:a0:b1:85:46:56:7e:d1:6e:90:d2:e3:d6:
35:bc:ca:97:17:8b:01:cd:55:3f:02:23:55:96:db:
32:9e:05:8b:e3:9c:11:35:8a:94:54:27:67:da:5d:
ac:6b:08:ad:e2:59:0d:9b:2f:e3:9e:63:5b:ae:f0:
3c:ea:2c:23:9c:18:28:a8:af:bb:09:f7:7c:fa:41:
88:99:ae:42:6c:67:96:7c:7a:f6:8b:8e:f7:a7:d2:
9e:6d:fd:a9:cb:d4:1d:9a:b4:c1:3c:39:b8:f0:69:
52:85:f7:19:cf:2f:e5:06:57:40:2d:2a:13:32:b6:
06:73:73:df:86:da:a0:36:48:df:13:a9:81:8d:1e:
11:8b:94:84:82:91:bb:0c:7e:ad:e3:fd:5e:7a:1b:
d8:b9:5f:dd:88:bf:6b:7e:ac:ef:00:3e:dd:34:64:
d2:6b:1e:7b:32:f7:1b:5c:e4:64:6d:30:e9:c9:c7:
2c:11:7f:05:99:e8:4a:e2:5b:6a:b7:74:9e:f4:37:
1f:d7:67:67:82:fd:79:37:01:1d:03:8f:9a:d8:1d:
d6:89:7f:bc:12:76:fe:c4:42:b4:14:9e:ed:98:8e:
20:3e:8c:ec:2b:fa:50:dc:0f:1c:0e:80:c4:e4:25:
41:ff:09:8a:4c:42:0d:52:35:4f:0a:28:d4:3a:b1:
da:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:74:D3:E5:B8:B9:3B:3F:53:FC:93:7A:E7:B0:7E:D3:13:B0:F8:BC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8329dbe2-4df9-4bf3-9077-92d6796dbdfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f15:4000::/36
Signature Algorithm: sha256WithRSAEncryption
9d:bf:8a:4b:c7:11:77:40:25:94:28:6d:2f:07:0c:b0:12:f0:
f0:fd:35:94:a0:56:d9:7d:ac:52:13:58:07:cd:78:1b:73:29:
ab:bf:44:49:4c:a5:f1:a9:39:c6:e8:2c:18:98:bd:04:b8:d3:
0f:c8:1c:a0:08:ec:e4:d7:48:81:4b:f0:c2:eb:12:33:61:58:
84:06:cd:8a:40:de:5f:9a:6e:4f:64:79:b5:e1:5a:50:7a:d0:
28:bb:55:a2:4c:a4:d1:57:69:dd:17:3c:07:72:49:46:b9:b8:
61:b1:75:4c:a4:1d:8e:f2:3b:40:82:00:42:2d:ee:a7:ee:e1:
9a:66:49:c4:de:39:11:b6:ad:37:98:ca:d9:32:47:f3:41:56:
dc:10:c2:99:45:49:c0:46:4b:e8:91:4a:fe:dc:23:7c:5f:9e:
e8:44:dc:ae:16:3d:65:70:2e:3b:1d:57:67:f0:ef:a5:a9:61:
d5:3c:12:da:76:10:91:dc:ee:0e:31:8b:ea:5a:e9:73:7d:91:
f2:ea:cc:f3:25:f9:d5:c4:69:fe:10:1a:68:48:cc:a7:5f:1e:
7d:80:04:ee:50:3e:6e:9b:e3:94:65:6e:2a:f2:e2:62:68:46:
7b:af:5a:a6:aa:57:55:75:74:1c:f8:9c:ce:bf:2d:b5:52:61:
b2:08:be:07
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:46 2025 by rpki-client