Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d636d691-569a-483e-82ce-596dbb7299a7.roa
File: d636d691-569a-483e-82ce-596dbb7299a7.roa (raw, json)
Hash identifier: 9I5L+f6XA+cQ1WySswBQAwgmbhphs3bNSQ4Vq+t9kD8=
Subject key identifier: DA:A6:28:96:92:F2:1C:05:73:4E:17:45:9C:5F:62:D5:03:77:99:BC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6A32F7CC1376888C42396AD40EC57CA8A5C1276D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d636d691-569a-483e-82ce-596dbb7299a7.roa
Signing time: Tue 04 Feb 2025 00:00:00 +0000
ROA not before: Tue 04 Feb 2025 00:00:00 +0000
ROA not after: Tue 11 Mar 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1ff4:8000::/39 maxlen: 39
Validation: Failed, certificate revoked on Tue 04 Feb 2025 15:12:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:32:f7:cc:13:76:88:8c:42:39:6a:d4:0e:c5:7c:a8:a5:c1:27:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 4 00:00:00 2025 GMT
Not After : Mar 11 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d7:7f:56:91:e9:d6:9a:cc:09:b6:c7:a1:6d:
9f:8c:94:41:8f:bc:83:d8:35:1d:42:d0:98:61:df:
1a:7b:36:53:59:19:02:07:1a:1d:b0:3e:2b:fc:77:
91:bc:5e:91:bb:b8:12:5f:12:36:aa:e0:cc:ed:b4:
10:ed:ce:81:0f:1f:82:a6:dc:91:1e:10:96:6a:51:
a1:a4:10:05:1d:8b:a1:b6:96:ae:a6:27:22:a9:47:
f3:b8:9c:d1:38:92:99:9a:3e:81:49:fc:ab:88:87:
89:ca:fc:37:6c:f6:62:50:1d:45:6e:0a:cf:31:9e:
32:ff:a0:fa:19:1e:37:44:4a:5b:1d:5d:8d:69:16:
f2:68:aa:9d:ed:e4:71:ed:15:48:74:29:0e:e6:ca:
cb:50:6b:b2:04:c0:13:26:d9:65:77:c4:e5:20:09:
83:28:1a:08:5b:74:b6:17:ce:77:56:3c:1b:d2:54:
23:21:b1:47:d4:a0:a6:98:9d:e9:df:5b:f4:37:25:
47:b4:31:4e:c8:8c:81:84:3d:5e:fb:dd:cf:84:a2:
fc:5d:f9:15:41:42:ad:fb:c4:6c:8a:8f:9d:0c:e7:
35:d6:07:61:c8:bb:14:52:2e:3a:15:1b:eb:bc:6f:
82:83:32:d7:32:d8:06:3f:d1:57:e5:51:8e:99:96:
6e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A6:28:96:92:F2:1C:05:73:4E:17:45:9C:5F:62:D5:03:77:99:BC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d636d691-569a-483e-82ce-596dbb7299a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff4:8000::/39
Signature Algorithm: sha256WithRSAEncryption
c0:56:e9:ed:18:3f:13:24:42:92:7a:24:f7:29:d7:73:b9:e6:
25:90:a1:1f:19:05:73:97:bd:b8:cd:74:e6:49:93:9e:53:ce:
85:0c:5d:ad:b6:1f:2b:8f:f8:b6:d4:69:ed:a1:6f:f1:9d:a4:
f5:e3:21:41:20:a0:d4:74:36:22:1c:fa:30:47:9c:26:bd:f5:
75:b8:33:eb:5e:25:3c:70:e8:d9:d7:a5:fd:8f:16:12:02:c4:
82:45:e3:f7:e1:56:60:4c:77:44:e0:56:51:d1:11:df:f3:3f:
fe:82:1b:3e:6d:25:a8:60:a5:8a:35:ae:38:a3:92:d0:c6:90:
6e:04:bf:73:db:49:45:a3:a7:89:8d:ba:af:69:3d:01:c3:e7:
c2:13:2f:45:97:70:81:10:2f:1f:54:71:62:4c:e4:13:a6:db:
16:ab:20:b2:c0:cd:06:c4:a2:71:42:c2:eb:d7:c1:b7:06:e5:
cb:20:9b:f1:cd:ee:c7:53:ff:53:71:8f:ca:f3:b8:f0:49:b5:
41:46:9e:cc:e7:ba:92:1e:62:db:30:45:72:e6:14:ff:0c:86:
2b:3f:30:ed:6e:c0:2b:f9:5b:ee:16:c4:f9:d0:c7:25:85:95:
dc:ec:2a:36:8f:08:97:74:2f:cd:0c:cd:85:00:9a:d1:98:85:
e2:4b:80:25
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:16 2025 by rpki-client