Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac3d75ef-cf4d-4c2a-b9d6-c63c2aab79c9.roa
File: ac3d75ef-cf4d-4c2a-b9d6-c63c2aab79c9.roa (raw, json)
Hash identifier: 4niOl5aUj+aIr7wI9GiCp5Eue/OB1p2JP9QFhsWLhK4=
Subject key identifier: 13:A7:3B:FF:04:8E:BD:79:40:1E:F1:0A:F0:DC:DF:47:A6:DC:BF:65
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3BDEF017BA73955585008D7AB336076AC71EE629
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac3d75ef-cf4d-4c2a-b9d6-c63c2aab79c9.roa
Signing time: Tue 04 Feb 2025 00:00:00 +0000
ROA not before: Tue 04 Feb 2025 00:00:00 +0000
ROA not after: Tue 11 Mar 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1f69:2000::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 04 Feb 2025 17:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:de:f0:17:ba:73:95:55:85:00:8d:7a:b3:36:07:6a:c7:1e:e6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 4 00:00:00 2025 GMT
Not After : Mar 11 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8d:45:77:38:96:97:fe:d2:aa:94:b7:af:cc:
58:b4:29:f0:22:c5:f2:3f:66:33:76:2f:93:fa:3a:
7a:2d:e9:f6:b8:fd:58:cc:26:ea:5a:49:13:06:6e:
d3:ed:55:54:54:8d:81:92:ef:f8:f3:f4:93:b3:da:
e0:f6:17:6b:43:70:56:49:21:f0:43:d0:da:71:bd:
07:76:43:67:63:bb:55:c8:53:f5:3c:4f:24:ee:b8:
46:60:8c:e8:a8:ea:a9:72:4c:d7:8e:8b:14:82:d0:
32:38:51:da:83:a3:0a:5b:43:91:0e:37:d3:7b:41:
74:95:bc:b1:53:c5:64:40:28:67:c6:5f:6f:dd:5b:
fa:04:d6:7c:88:70:11:39:1f:3e:be:b8:97:65:ec:
63:ad:63:f2:f1:09:50:1e:a5:53:17:64:14:15:32:
e2:91:c2:28:85:09:2f:00:30:e6:66:ba:a6:34:11:
d0:9b:88:47:fc:69:6a:43:45:b1:ca:9c:e3:60:46:
35:d2:83:59:a2:e9:7c:74:76:29:12:ce:7f:f3:47:
72:a4:7a:03:d0:e6:ff:3e:ac:8f:f2:b6:46:37:18:
b2:21:45:05:78:53:32:a0:17:8b:7e:6c:bb:8d:c0:
82:54:03:77:32:4e:5d:9a:f2:3d:5d:f6:7e:9d:6b:
0a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A7:3B:FF:04:8E:BD:79:40:1E:F1:0A:F0:DC:DF:47:A6:DC:BF:65
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac3d75ef-cf4d-4c2a-b9d6-c63c2aab79c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f69:2000::/40
Signature Algorithm: sha256WithRSAEncryption
cd:29:83:41:dc:39:79:58:5a:37:91:74:5d:21:f2:81:13:73:
a6:a6:f6:66:15:c4:28:96:b4:37:a7:a8:04:ae:ac:de:9d:ac:
6c:61:b2:76:53:a2:43:9e:5f:6b:91:97:9c:59:b8:ef:4e:da:
c7:dd:ec:56:07:77:fb:83:04:9a:8a:90:25:68:3a:3c:bd:6e:
9e:15:a5:84:96:ff:51:5d:f5:ae:e8:71:47:89:d5:ad:52:5f:
b6:24:4d:3e:df:e1:a3:34:1d:9f:10:a6:e7:57:79:de:b5:b7:
6e:6a:1c:b1:c5:8e:b5:36:83:4c:1f:1b:80:0f:79:20:70:e7:
52:c6:61:ce:64:79:2d:a2:62:e7:fe:0f:0c:c9:c4:b4:8c:82:
88:d7:ae:61:75:94:9c:5a:52:72:84:a4:cc:22:5c:f9:5a:b4:
4f:7d:e9:9c:e7:c6:52:5e:9f:66:28:e5:83:c4:b9:9a:18:75:
ee:53:84:09:62:a2:51:a9:e5:e9:4a:38:70:90:c8:22:18:37:
27:d3:07:ed:d3:70:96:dc:06:a3:1c:57:48:b1:2e:1b:43:0d:
47:2f:02:c3:85:f1:2b:9f:41:07:04:fc:48:a4:ec:0b:de:00:
24:fc:5c:e1:2c:50:a0:e1:63:f8:75:34:6a:0c:8d:57:9f:fc:
59:b6:b1:40
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 5 15:52:14 2025 by rpki-client