Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7873fdb-b89a-4bdc-bc40-0995b97e1dd9.roa
File: c7873fdb-b89a-4bdc-bc40-0995b97e1dd9.roa (raw, json)
Hash identifier: eHpF+/p60HMwn+H0BgDNyTH0LMT8ax57XW4GSzxsfhY=
Subject key identifier: 63:CE:50:C1:6C:71:54:B5:34:19:47:9C:E0:DF:DA:D6:61:30:B7:25
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 40F6B669838C1EE5E8CA2A7EA8CAB488EFA1BB91
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7873fdb-b89a-4bdc-bc40-0995b97e1dd9.roa
Signing time: Tue 04 Feb 2025 00:00:00 +0000
ROA not before: Tue 04 Feb 2025 00:00:00 +0000
ROA not after: Tue 11 Mar 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f1f:4000::/36 maxlen: 36
Validation: Failed, certificate revoked on Tue 04 Feb 2025 21:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:f6:b6:69:83:8c:1e:e5:e8:ca:2a:7e:a8:ca:b4:88:ef:a1:bb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 4 00:00:00 2025 GMT
Not After : Mar 11 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:18:b2:d3:0c:17:43:61:40:79:c1:ff:8e:93:
30:1f:bf:7f:ee:58:4c:98:71:2a:ad:14:f5:b9:e6:
30:34:e0:73:ee:08:d1:29:00:4f:24:1d:c4:1a:b2:
38:19:a3:e0:68:af:5a:64:7c:6a:36:65:7e:e6:3d:
5d:1a:9b:1c:a8:d1:eb:c4:cf:6a:c9:62:ce:88:8d:
84:d6:75:13:f5:b5:53:90:c4:fe:3d:90:7a:83:66:
78:d7:b1:d9:e1:40:17:2e:d5:f6:30:54:23:11:09:
31:04:6d:a7:09:f3:85:1a:6d:04:ef:48:c0:87:ba:
41:f7:e7:b3:95:30:8f:d7:45:21:e9:42:cd:46:09:
89:06:ab:c3:b4:0c:36:27:a6:f9:6e:45:14:fd:0d:
ca:6c:a4:b8:ac:75:0a:c8:e6:68:fa:1f:03:0c:82:
d6:36:e8:08:91:94:d7:c2:4c:8e:fe:59:5f:a9:9d:
df:22:4e:5b:d9:0c:03:5d:45:f4:aa:71:45:d8:41:
a6:b0:08:31:43:66:9f:75:f8:aa:70:0b:30:9e:46:
4c:2b:a6:75:ea:fe:98:38:53:82:d5:3b:85:63:24:
60:70:a5:d3:ca:cd:58:41:69:73:0b:5a:26:c1:8f:
dd:20:40:64:e9:27:19:4c:3e:b0:75:de:2d:33:58:
3c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CE:50:C1:6C:71:54:B5:34:19:47:9C:E0:DF:DA:D6:61:30:B7:25
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7873fdb-b89a-4bdc-bc40-0995b97e1dd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f1f:4000::/36
Signature Algorithm: sha256WithRSAEncryption
2d:94:8d:af:18:68:73:ac:ff:76:c6:12:6d:50:42:4c:ed:8d:
99:ee:32:99:0c:6c:4b:2f:08:92:b8:ec:bb:cd:06:83:e4:9e:
85:0d:d5:c5:dd:ed:ad:05:a4:c0:7c:24:34:14:f4:78:2d:a3:
69:22:01:83:9d:96:28:91:ed:87:f6:c8:9c:28:f8:72:68:1b:
ab:7a:88:7b:81:f2:4a:b0:7b:48:46:1b:96:ca:0f:05:43:a9:
f9:0a:8a:3f:e9:79:59:b0:f4:bd:05:d9:97:0b:2f:20:1a:a4:
ad:81:27:cc:7e:81:ae:d6:61:9b:81:b6:73:b0:e0:7f:73:d4:
a9:2e:fc:65:40:a9:cd:6d:b2:5a:b6:e5:73:0b:c4:99:16:ea:
0a:2d:37:4d:e5:cb:45:bd:32:44:86:4e:f2:d9:f5:3b:aa:09:
4b:38:05:f6:3c:58:cc:55:d0:36:98:a3:4a:40:6b:89:79:73:
15:ff:bf:6d:a5:47:4d:dc:7f:0a:48:e7:fa:b8:b1:40:b2:98:
e3:01:1b:ec:da:ca:a2:c4:fc:d5:03:4d:98:3a:59:13:2e:f4:
2d:9f:76:9b:a7:99:62:69:7a:85:df:0a:d6:76:f4:09:e7:55:
28:bd:72:4b:14:76:16:f0:88:b5:23:91:a9:98:9f:6d:a1:ee:
9c:9f:b6:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:47 2025 by rpki-client