Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2388d7c-2194-409b-a7d7-05c3b9b7b2cf.roa
File: e2388d7c-2194-409b-a7d7-05c3b9b7b2cf.roa (raw, json)
Hash identifier: hCsHI6x+8npti17YyhEkH/c6lv4ZpK6hZaGRFR3jWtk=
Subject key identifier: 61:17:E9:1B:16:AA:17:8F:CF:DB:A0:CA:06:22:E7:D4:5A:3B:A5:ED
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 48B5CB968D15DACD7475DE12C737070D071CEEF3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2388d7c-2194-409b-a7d7-05c3b9b7b2cf.roa
Signing time: Tue 04 Feb 2025 00:00:00 +0000
ROA not before: Tue 04 Feb 2025 00:00:00 +0000
ROA not after: Tue 11 Mar 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1ff7:5000::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 04 Feb 2025 18:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:b5:cb:96:8d:15:da:cd:74:75:de:12:c7:37:07:0d:07:1c:ee:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 4 00:00:00 2025 GMT
Not After : Mar 11 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:08:ce:cb:3c:31:e6:99:12:c2:3f:97:64:b5:
6b:6e:6a:63:3e:c8:12:b3:90:24:8c:20:34:0c:c0:
95:31:b8:e9:bd:64:44:67:6e:29:a0:91:5d:7d:71:
35:fb:77:c6:db:00:b8:7b:f1:49:7f:e0:e5:fb:77:
03:c6:f3:56:db:e6:da:bb:af:66:39:74:4d:56:62:
9a:0c:e9:9f:be:50:aa:9c:bf:64:88:de:df:7d:1c:
d0:03:af:1a:74:c2:b9:a3:a2:7c:65:a6:f5:fb:c1:
6f:41:77:4e:ae:19:2c:9f:4d:25:59:23:19:fd:ac:
ae:a0:ac:1f:bb:be:60:ef:a3:e8:43:21:bb:05:2b:
b9:31:e1:08:a1:ca:c6:f2:6c:4b:07:39:9a:3f:6b:
75:6d:73:50:e7:f7:c5:f5:a8:92:09:18:d9:8e:b7:
cd:d0:b6:ab:92:ee:a1:2f:e7:84:98:10:ed:ae:30:
b2:96:9e:41:ce:fe:ff:2b:88:06:59:ba:f8:5e:c9:
b8:ff:f6:f2:62:d2:02:dc:bf:4f:6b:c4:21:a2:26:
36:f8:47:f6:41:46:13:63:bb:63:ed:03:37:d3:a6:
e0:22:75:1d:75:79:61:0c:0d:e7:7f:f2:b7:74:45:
33:4b:20:fd:82:20:67:2a:a0:14:6e:81:40:6e:f9:
1a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:17:E9:1B:16:AA:17:8F:CF:DB:A0:CA:06:22:E7:D4:5A:3B:A5:ED
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2388d7c-2194-409b-a7d7-05c3b9b7b2cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff7:5000::/40
Signature Algorithm: sha256WithRSAEncryption
39:29:39:6b:c8:a0:17:23:f9:23:07:0e:b4:bc:71:8d:63:7b:
80:cd:b9:ff:87:da:fa:f1:a0:12:e4:9f:6d:83:b1:5e:b4:0b:
5b:7e:48:14:aa:20:4d:39:04:e7:3c:c6:7c:87:e8:27:f7:e4:
b9:b4:c2:82:6b:ec:95:81:0e:4b:5b:53:82:d0:41:21:99:35:
b8:3e:fe:75:a4:0d:89:b5:c5:e3:61:60:ce:e6:28:e6:52:c5:
fb:a7:9e:67:e0:73:b0:0e:1b:e1:53:e1:cd:6e:2e:be:45:1a:
76:a7:35:36:0f:23:19:0d:a3:de:87:4d:f1:84:98:cc:f5:c7:
33:45:d8:b2:73:e5:0d:e5:fd:d1:44:5b:ec:09:49:72:45:e4:
09:5e:65:1e:06:80:8c:20:55:67:98:56:df:55:a8:16:5a:37:
86:da:fc:50:9f:63:39:34:cd:83:20:ad:dd:30:3c:cd:f0:53:
2a:28:d2:2a:85:1d:95:4c:ca:4e:dc:f9:d2:7d:22:76:65:02:
97:92:d8:8a:e4:42:81:7b:7f:0a:4f:0c:64:72:0f:9f:b1:8e:
53:62:b5:0e:cc:52:3c:cf:a2:e3:42:29:53:c3:6d:08:d3:5c:
b5:4e:7a:34:7a:36:25:a9:8f:e0:0a:49:97:a5:fa:e4:79:15:
4e:27:08:3b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 5 15:46:44 2025 by rpki-client