Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6429146-b7e1-47bb-8574-eacbd68eba9f.roa
File: b6429146-b7e1-47bb-8574-eacbd68eba9f.roa (raw, json)
Hash identifier: ewRUH65CcSWpsH84bn9+VYNO6H0hro4vtRIPWrnHOrc=
Subject key identifier: 49:91:06:DC:8E:8B:3B:5B:BF:B8:D4:69:2E:04:4C:0A:E2:4C:79:B5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5BC1F3D4BC507D40E43E16E4919A91EAD99807F6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6429146-b7e1-47bb-8574-eacbd68eba9f.roa
Signing time: Tue 08 Jul 2025 16:21:27 +0000
ROA not before: Tue 08 Jul 2025 16:21:27 +0000
ROA not after: Tue 12 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffb:7400::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 30 Jul 2025 19:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:c1:f3:d4:bc:50:7d:40:e4:3e:16:e4:91:9a:91:ea:d9:98:07:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 8 16:21:27 2025 GMT
Not After : Aug 12 23:59:59 2025 GMT
Subject: serialNumber=cc2bff0850260b716475a11629b4f1050f014438a420b8717a92e1e652dd9011, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:60:9b:e1:95:36:ad:de:46:a6:ca:8a:0c:c6:
29:b9:fb:ea:65:1e:0f:97:56:ab:44:a7:38:5e:0f:
73:0d:b7:9d:d0:14:97:f0:42:bb:a5:41:b0:41:7b:
7b:f2:79:6b:c8:47:c5:1e:02:df:8d:0f:f0:ef:36:
3b:01:da:ed:d8:88:6b:5f:a0:b2:41:04:a2:eb:25:
5f:5f:17:52:50:8b:d0:1a:cc:9c:21:9c:96:7f:cc:
83:ae:fd:04:89:36:04:80:6b:ad:ca:01:c2:9f:cd:
ab:7f:4f:37:5f:ae:0c:c5:3d:9a:9e:69:ae:c3:5b:
5a:73:80:0e:34:1b:3e:36:64:06:04:67:95:eb:74:
fa:e5:05:8c:d2:a5:7e:aa:2c:82:9b:f4:bb:08:d4:
97:52:0c:36:b3:da:18:a8:2c:bb:08:5d:7a:48:0c:
cc:ca:fe:f5:48:b8:f5:c0:0a:2b:7c:f1:99:50:65:
a0:0b:ef:3c:7c:69:9a:bc:f0:e4:2c:de:48:1e:5b:
51:05:c0:2c:79:8d:06:67:c8:00:d4:2b:44:ae:1f:
ea:fc:c3:7c:1f:16:0b:41:f9:2e:90:6d:e1:54:ab:
ec:8e:e2:ac:86:41:c1:b9:48:65:a9:bc:77:84:66:
e0:94:cd:55:9c:12:8c:73:ae:22:c2:da:4b:b4:fb:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:91:06:DC:8E:8B:3B:5B:BF:B8:D4:69:2E:04:4C:0A:E2:4C:79:B5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6429146-b7e1-47bb-8574-eacbd68eba9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffb:7400::/40
Signature Algorithm: sha256WithRSAEncryption
80:d4:c5:f8:7e:56:44:4d:4d:cf:32:91:a7:9a:b3:dc:5f:ed:
7f:a8:8f:81:2c:95:db:ea:68:9e:dd:76:03:23:56:c2:68:02:
7c:d9:9e:55:75:da:c0:e6:ab:8f:ad:57:53:d6:68:0e:51:ee:
16:b6:b6:37:fe:86:96:eb:e7:22:c5:92:8a:54:1f:de:5d:79:
88:10:f7:1c:51:55:8c:d7:b3:18:62:5b:ca:01:dd:a0:82:90:
fb:84:ef:75:a4:d6:34:2e:03:17:2e:5d:c8:cb:45:8e:72:e4:
95:ba:ad:71:3e:af:72:a8:dc:75:62:e7:00:7a:c4:59:8b:58:
0d:a3:04:6b:eb:37:ad:d6:89:50:4d:e3:37:44:93:3d:85:45:
06:d4:50:2d:d7:53:d2:d4:c6:81:dc:5c:ed:58:06:c9:f6:52:
3e:ff:1d:06:b5:55:20:c2:13:63:a2:c7:cd:b6:bb:d2:24:19:
5c:4c:58:ff:1c:94:a9:41:62:84:c7:74:d3:da:f0:5c:f0:8d:
1a:4a:7e:ef:ab:9f:96:e2:e2:e4:c4:22:5b:55:cc:3a:37:76:
0a:76:47:74:9c:fe:93:67:9b:83:71:d8:88:ec:46:55:17:6f:
35:d9:9e:a3:66:70:f0:d7:39:df:bd:89:96:78:13:a4:55:44:
27:62:e3:3f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 31 01:12:19 2025 by rpki-client