Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d80fd8f1-dc34-4760-b3f2-6fa9b9337efb.roa
File: d80fd8f1-dc34-4760-b3f2-6fa9b9337efb.roa (raw, json)
Hash identifier: iDx73noNRgeGaQGoGxooPGaJmxbrnioA5HzMrapDBSI=
Subject key identifier: 0E:EE:1F:D5:74:83:4A:4B:4C:09:6C:F5:DC:D7:3E:85:15:17:4A:40
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2EED0FA92EDE65BFD681B8496191CFDDF8FD79D9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d80fd8f1-dc34-4760-b3f2-6fa9b9337efb.roa
Signing time: Mon 19 May 2025 17:32:08 +0000
ROA not before: Mon 19 May 2025 17:32:08 +0000
ROA not after: Mon 23 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fb9:5000::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 May 2025 01:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:ed:0f:a9:2e:de:65:bf:d6:81:b8:49:61:91:cf:dd:f8:fd:79:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 19 17:32:08 2025 GMT
Not After : Jun 23 23:59:59 2025 GMT
Subject: serialNumber=ea09e5794f4ee5c63a09cf22ce6d220fb115f34ab9dd205224b19921410bd9b1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d4:85:64:78:01:9f:be:bd:49:07:1c:fe:04:
ce:c1:0b:73:20:ca:6a:02:bd:ec:da:75:f8:14:e6:
b4:45:7c:2f:a1:68:5f:78:4b:65:b6:fe:72:16:b7:
c2:b7:20:2d:ea:e7:b7:ca:55:30:99:8a:f6:44:b7:
7b:cf:a4:95:37:d4:f3:6a:47:8f:53:f2:c4:d4:e8:
92:eb:37:33:62:a6:7a:57:a6:5e:d1:c3:af:5a:d4:
f9:71:4f:71:c1:69:91:32:e8:a9:18:04:5c:e7:c7:
b4:76:3c:37:6e:68:e8:d5:ce:80:e5:a7:73:f5:5e:
d0:df:b2:33:ce:b6:9d:47:3a:ea:d3:b7:e7:66:7b:
55:26:12:fe:b5:b7:69:4e:23:7d:f7:d0:cc:fc:eb:
9a:a1:14:8d:11:11:52:57:26:35:12:d2:83:8f:99:
6a:57:b2:f7:b0:ff:19:1a:b5:f0:66:9c:f7:65:a5:
bb:1e:14:65:bf:85:ec:25:83:5d:b4:8e:41:ce:2d:
09:1c:68:59:ed:43:d8:b4:a5:46:ab:d0:ca:4f:ce:
ff:0b:53:b8:99:ce:bb:75:1c:f7:d5:3b:2e:bc:46:
a2:d9:82:80:f5:43:26:c2:90:da:06:92:25:46:fe:
e6:bd:0e:a3:ef:a4:f3:e1:61:7b:d1:41:99:d4:ff:
f9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EE:1F:D5:74:83:4A:4B:4C:09:6C:F5:DC:D7:3E:85:15:17:4A:40
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d80fd8f1-dc34-4760-b3f2-6fa9b9337efb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fb9:5000::/40
Signature Algorithm: sha256WithRSAEncryption
10:0d:7f:af:02:c1:1c:b9:82:f6:00:2e:cd:a1:5c:a6:a9:4c:
ee:da:d5:21:ee:9a:54:dd:97:66:5c:63:67:26:c9:95:f5:f0:
f5:1e:d1:93:9e:66:4c:46:24:99:30:c7:0f:91:2b:c4:17:6c:
d8:0f:db:49:aa:0f:44:de:6e:71:c3:f3:28:98:db:17:64:8b:
19:0e:8e:3e:42:e3:5b:93:12:54:40:44:bd:78:0d:98:00:e3:
69:53:64:f4:2f:b6:ee:88:22:a6:72:35:2a:6d:77:42:ac:57:
11:d9:c8:d9:1c:6b:ae:78:fe:2a:f0:6b:af:c2:2f:c3:ed:89:
58:0a:b2:82:e1:d7:df:ac:68:4f:3c:e2:12:f2:3d:ea:2f:af:
e9:c4:53:0f:92:ce:a7:68:2f:02:6a:49:25:c2:c4:d0:b0:fb:
82:1a:c9:84:a9:8b:c0:27:04:5e:fb:8b:d9:81:64:5c:66:9e:
51:2a:67:2e:26:7a:16:f6:c9:e3:35:d4:11:c2:63:42:ef:b4:
ad:75:b5:7e:27:6c:a0:4d:ea:c9:aa:f0:ac:ec:91:c1:0c:b7:
2f:dd:98:1a:e1:21:bc:00:72:f2:cd:9b:2b:9e:73:b3:4c:b4:
9c:cc:4f:1c:5b:9a:e2:8b:a8:62:df:8a:7e:76:6d:bf:66:ad:
f9:2c:e4:84
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 1 05:02:10 2025 by rpki-client