Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d98ac9d2-a479-4658-9794-cd9eaa52c39d.roa
File: d98ac9d2-a479-4658-9794-cd9eaa52c39d.roa (raw, json)
Hash identifier: zybSoIDnCpCgfrK0VgJZ2fD/5/KQ9T9cXWQcWmJFUsk=
Subject key identifier: 56:EE:12:1B:23:F0:0D:21:3C:67:E0:CD:3A:39:49:7C:7F:24:16:48
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 133204844812BD56DFE70ABEFBAEE546DCF46E1E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d98ac9d2-a479-4658-9794-cd9eaa52c39d.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 45.33.160.0/19 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 22:22:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:32:04:84:48:12:bd:56:df:e7:0a:be:fb:ae:e5:46:dc:f4:6e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:06:ae:4c:99:a9:fc:44:85:0b:13:7b:a2:71:
f3:e0:8d:2a:d1:4a:6d:ca:04:e7:ff:19:96:11:1b:
43:8c:a6:7f:1f:64:b4:71:89:bf:76:a3:fe:d0:46:
76:1c:c0:c5:a0:cc:50:76:fd:cb:7d:8d:22:5d:d8:
46:24:26:e0:95:f4:e2:f5:77:94:68:7f:8e:32:c6:
72:71:9e:c7:60:57:4d:ac:77:f8:b7:96:16:d0:39:
cf:37:30:a9:38:1a:b0:66:b6:1d:b2:2b:ea:f6:fe:
49:89:c0:7d:8c:92:72:6e:56:3b:67:18:46:ad:28:
64:c5:19:e0:d0:14:66:f6:21:ff:78:74:cf:3f:5f:
20:e3:f4:e1:8a:a2:69:5b:09:a1:48:3f:47:4f:5e:
f5:59:16:c1:3e:36:ac:4c:34:e4:94:dc:cc:33:9e:
3a:aa:44:c5:c1:8f:a8:f5:83:31:df:05:45:99:c2:
d6:22:48:c8:3f:a2:ce:d6:f7:19:27:9d:aa:d8:5b:
e1:c9:9a:7c:5c:cb:24:5f:6b:71:ca:49:fb:3b:aa:
ae:36:db:4b:10:6b:02:0c:33:c6:8b:34:79:ec:d8:
bf:32:48:54:e6:f3:88:62:d9:79:7c:29:b0:9a:e9:
25:7d:27:52:e4:fe:64:5d:59:cb:61:e6:41:2e:8e:
dc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EE:12:1B:23:F0:0D:21:3C:67:E0:CD:3A:39:49:7C:7F:24:16:48
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d98ac9d2-a479-4658-9794-cd9eaa52c39d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.33.160.0/19
Signature Algorithm: sha256WithRSAEncryption
6d:c8:da:f7:44:07:8e:85:63:71:e9:45:ea:ec:1c:e3:2a:17:
9e:6c:a9:8a:f7:ed:77:51:ae:06:a5:2a:dd:d9:a8:24:e1:b6:
64:fd:0f:ec:8d:a8:ff:19:91:f3:61:69:a1:c7:a7:fe:5f:30:
3c:88:4b:84:37:d4:74:2b:bc:24:a9:bc:d8:33:4b:8f:6b:5e:
ec:b3:e1:75:d2:39:01:eb:c8:ce:81:c1:6e:e9:c9:b4:26:65:
33:b0:3e:35:3d:e1:35:b3:f5:a6:41:97:a9:b2:7c:b5:7e:29:
dd:c8:b7:cc:64:f0:39:24:21:db:ed:fe:58:ce:57:93:fd:d9:
85:fa:0a:8b:73:c5:b2:6d:73:2e:ec:ab:ea:43:e2:92:15:76:
56:67:5b:7f:78:67:51:83:da:c9:b2:ca:0c:5d:91:3c:55:1e:
a9:7b:72:c1:6d:8d:ba:27:7b:1a:53:51:7e:e6:e5:b3:3e:ea:
ad:b0:7c:d4:fd:30:71:c3:d5:13:7e:03:74:b4:52:99:e3:79:
2d:65:1f:35:ce:61:79:1b:41:3c:ed:69:d3:91:b6:f8:d0:2b:
ef:74:29:b7:d5:8c:7b:5e:33:ab:0a:67:eb:cc:3a:0c:97:ee:
5e:5a:d3:1b:5f:db:5a:97:94:5b:bf:d7:31:30:d3:93:bd:e2:
c4:00:ed:a2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEzIEhEgSvVbf5wq++67lRtz0bh4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTE0MDAwMDAwWhcNMjUwMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AxMTNkZDA3NmI2Yjg0OWIxMGUzNzgyNDZmMjM5YTc5NWYw
MDAzOTA0NzBlMzcwYTUxZGNkYWI2OTEyYTAwZTA2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDBBq5Mman8RIULE3uicfPgjSrRSm3KBOf/GZYRG0OMpn8f
ZLRxib92o/7QRnYcwMWgzFB2/ct9jSJd2EYkJuCV9OL1d5Rof44yxnJxnsdgV02s
d/i3lhbQOc83MKk4GrBmth2yK+r2/kmJwH2MknJuVjtnGEatKGTFGeDQFGb2If94
dM8/XyDj9OGKomlbCaFIP0dPXvVZFsE+NqxMNOSU3MwznjqqRMXBj6j1gzHfBUWZ
wtYiSMg/os7W9xknnarYW+HJmnxcyyRfa3HKSfs7qq4220sQawIMM8aLNHns2L8y
SFTm84hi2Xl8KbCa6SV9J1Lk/mRdWcth5kEujtzdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUVu4SGyPwDSE8Z+DNOjlJfH8kFkgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Q5OGFjOWQyLWE0NzktNDY1OC05Nzk0LWNkOWVhYTUyYzM5ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUtIaAwDQYJKoZIhvcNAQELBQADggEBAG3I2vdEB46FY3HpRersHOMqF55s
qYr37XdRrgalKt3ZqCThtmT9D+yNqP8ZkfNhaaHHp/5fMDyIS4Q31HQrvCSpvNgz
S49rXuyz4XXSOQHryM6BwW7pybQmZTOwPjU94TWz9aZBl6myfLV+Kd3It8xk8Dkk
Idvt/ljOV5P92YX6CotzxbJtcy7sq+pD4pIVdlZnW394Z1GD2smyygxdkTxVHql7
csFtjbonexpTUX7m5bM+6q2wfNT9MHHD1RN+A3S0UpnjeS1lHzXOYXkbQTztadOR
tvjQK+90KbfVjHteM6sKZ+vMOgyX7l5a0xtf21qXlFu/1zEw05O94sQA7aI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:11 2025 by rpki-client