Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2dc74d5-1d66-4789-9e00-6d439865221c.roa
File: e2dc74d5-1d66-4789-9e00-6d439865221c.roa (raw, json)
Hash identifier: Bvlhzb/Lc9okUciulWHs2Ay1uyfGWEkE9GQjeXd+Eqk=
Subject key identifier: 80:9B:9B:A3:32:2B:15:A4:A8:F1:71:68:45:A7:F1:C7:B2:C4:EE:C7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3044017C6AAAB9F6596C0D302AF0B6EDE3676513
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2dc74d5-1d66-4789-9e00-6d439865221c.roa
Signing time: Mon 19 May 2025 15:50:15 +0000
ROA not before: Mon 19 May 2025 15:50:15 +0000
ROA not after: Mon 23 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.54.0.0/15 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 May 2025 15:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:44:01:7c:6a:aa:b9:f6:59:6c:0d:30:2a:f0:b6:ed:e3:67:65:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 19 15:50:15 2025 GMT
Not After : Jun 23 23:59:59 2025 GMT
Subject: serialNumber=a78683c0e64aa98966dd6515a398d5a3016769baf120a92e9012784a11c756f4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ca:85:3c:67:0e:5c:f8:47:d0:a1:39:90:cb:
06:02:e7:a5:52:2e:d4:8c:3b:33:86:f5:70:d8:50:
54:f8:6a:77:2a:d5:e9:25:bc:22:95:85:a1:bf:68:
d9:69:5f:21:a7:e1:e3:61:6e:d8:b2:45:09:22:7c:
9b:97:0f:50:29:cc:b4:be:ad:e0:c3:72:4c:6b:f9:
a6:30:31:0f:37:b3:68:40:54:12:c3:e9:f7:8d:d7:
5a:19:08:5a:cb:7d:4f:1e:16:98:74:14:33:a9:97:
d5:0b:64:42:ba:e8:b1:b5:80:96:03:b6:ff:86:88:
94:6e:d4:fe:f5:66:8d:c2:ac:38:46:c6:5b:67:38:
fb:1a:3d:90:f5:9c:36:05:fc:56:15:2a:5d:1b:40:
fd:3a:41:90:5d:56:a3:2c:d9:43:b8:b9:a2:52:b7:
d0:1b:f8:0d:1b:5d:45:5a:cd:e6:b6:0d:48:45:ce:
be:52:35:40:69:43:bc:4b:29:31:ae:2c:32:a1:6b:
f6:09:41:8c:fb:d3:e3:df:41:c4:99:de:ae:1a:fb:
ca:e9:a1:cc:32:f9:da:49:93:0a:45:08:3c:73:f3:
aa:a1:77:b3:9f:b3:20:4d:2c:90:9a:6e:3e:7f:0e:
4d:29:94:85:4a:b9:9c:cb:6e:9c:4b:61:27:a5:80:
5d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9B:9B:A3:32:2B:15:A4:A8:F1:71:68:45:A7:F1:C7:B2:C4:EE:C7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2dc74d5-1d66-4789-9e00-6d439865221c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.54.0.0/15
Signature Algorithm: sha256WithRSAEncryption
79:ae:11:38:d4:02:f6:81:05:d6:97:b3:11:df:fe:67:ac:57:
8e:46:cb:4b:97:ee:41:a8:03:e7:d9:7b:8f:71:40:f1:27:9c:
3f:df:c1:b8:6d:dd:1e:c1:4c:57:e4:37:17:27:61:b4:e1:c4:
3f:7f:82:90:91:54:3b:3c:30:f0:08:ba:af:4b:f0:eb:6f:b5:
45:a5:1a:de:92:b7:9c:ef:57:f3:d1:c1:be:bc:ac:a0:46:37:
cc:eb:75:b5:83:d5:b8:7f:87:40:79:e0:81:54:5f:43:e3:97:
d9:9f:2a:0a:46:ab:26:f6:6d:4e:de:66:fa:91:7c:cc:8d:56:
f1:a7:0f:76:f4:29:ff:c5:60:d9:44:09:6e:e5:c1:d5:4b:44:
73:67:cb:25:74:01:c0:7c:ae:09:08:92:83:c0:45:e7:d8:c1:
e4:84:de:4a:0d:84:7a:31:7f:6c:e7:52:4d:6e:bc:ab:bb:79:
a3:9d:07:b5:54:64:0e:1f:74:eb:ea:06:d2:03:03:59:ae:e1:
38:44:49:d5:88:d5:4d:55:c9:55:f8:41:f0:89:0b:35:c8:4a:
82:02:0b:bd:95:63:3a:e3:7c:a8:ee:47:03:b0:f0:35:69:46:
05:9d:e0:f6:77:88:d9:74:e2:af:23:15:ce:50:0a:cf:b3:1b:
c4:14:a0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 05:13:02 2025 by rpki-client