Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/19e83b73-eb42-44ab-b0b0-e85bd0a86546.roa
File: 19e83b73-eb42-44ab-b0b0-e85bd0a86546.roa (raw, json)
Hash identifier: GaVeZaoACsrHMiu1bXx8NPy2tfLerMuE504bbUsc+9o=
Subject key identifier: 06:53:D1:9E:87:AF:F5:2B:0D:24:8C:70:DD:B4:58:DD:85:84:50:4B
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 0F49BE654B5E9F94D2ED639DE50606F6C8A5DCB5
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/19e83b73-eb42-44ab-b0b0-e85bd0a86546.roa
Signing time: Fri 19 Apr 2024 00:00:00 +0000
ROA not before: Fri 19 Apr 2024 00:00:00 +0000
ROA not after: Fri 24 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:f038::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 19 Apr 2024 15:41:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:49:be:65:4b:5e:9f:94:d2:ed:63:9d:e5:06:06:f6:c8:a5:dc:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Apr 19 00:00:00 2024 GMT
Not After : May 24 23:59:59 2024 GMT
Subject: serialNumber=5040f7dfdccfa1ba28d7f5f92dd6c3e7c162b706d1e8980aa5914dc712742c49, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:47:99:cc:e6:da:05:ef:96:a1:f2:84:6b:d5:
b7:af:c8:d5:20:01:fa:3a:74:8d:eb:47:77:8f:a3:
8b:a6:7a:23:53:3b:45:d2:65:7f:0b:83:4c:31:17:
41:ee:29:12:0b:e8:a7:a9:10:8b:0b:f6:b5:31:ae:
de:bc:55:f4:c8:13:39:fb:25:3b:53:b1:ae:05:69:
47:d8:3f:94:97:88:b9:cc:fc:11:4d:7b:ca:5f:f6:
a0:3f:04:44:7e:bf:1c:93:ff:0a:ef:85:02:4a:31:
a2:95:5b:93:58:b9:2b:33:1f:29:b5:05:b7:9a:03:
32:fa:7a:d2:b7:57:53:c7:27:64:e7:a5:9f:41:7a:
3e:42:e8:d4:9a:85:e8:b3:fb:78:cb:55:e9:93:e3:
33:4b:e9:a3:f9:e2:48:e2:6f:90:8f:9d:01:7c:79:
82:c1:af:0c:29:7d:a5:89:84:30:da:7c:c5:13:c3:
af:9e:85:96:53:e8:f9:bb:2b:1f:9b:09:4f:f0:e5:
e1:a3:14:3f:1e:be:65:ca:3e:6f:2d:0e:20:90:37:
40:cc:20:05:8f:2d:db:f1:f5:e8:0b:f9:f4:ee:48:
1e:8c:b7:00:a0:ea:f9:22:84:fa:fe:5e:1e:8c:b3:
9e:ad:1b:1c:68:83:fd:b5:38:50:a4:e2:e0:13:70:
5b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:53:D1:9E:87:AF:F5:2B:0D:24:8C:70:DD:B4:58:DD:85:84:50:4B
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/19e83b73-eb42-44ab-b0b0-e85bd0a86546.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:f038::/48
Signature Algorithm: sha256WithRSAEncryption
12:0c:84:23:1a:dd:bc:a1:1f:b0:5b:80:76:20:a0:0b:0e:66:
de:47:18:51:77:50:60:89:50:26:b5:b8:16:92:4a:8c:8f:d0:
06:e9:6b:33:5a:3f:cb:f4:97:32:62:80:d7:6e:85:25:2e:86:
57:3e:76:7d:05:df:4b:ea:43:df:eb:07:1d:b2:c7:0a:e2:92:
2b:a1:3a:2f:01:f0:81:eb:1b:42:ca:0c:9a:14:0f:87:f7:c2:
75:ec:8e:a0:f3:e9:69:51:d7:36:82:33:69:dc:d4:72:19:56:
77:bc:ce:a9:7d:30:dd:3b:93:b9:77:67:0d:3f:7c:0a:f7:78:
50:a6:60:21:c8:82:5f:76:26:d7:51:b2:d8:2b:2c:33:ae:17:
42:97:b2:6b:8a:02:86:b8:04:3b:de:4f:e8:5a:45:c8:2a:6f:
10:a9:b1:b0:7b:ae:57:77:cf:51:42:55:a4:f1:24:7f:00:46:
ed:a2:b5:e1:a5:1a:32:b9:5d:dc:c0:86:1e:99:ba:eb:af:1f:
ec:e5:10:ef:38:8d:ee:51:15:9e:95:af:7b:4d:99:05:87:e0:
10:ee:87:f0:2c:18:00:df:01:a6:40:f4:96:76:ac:31:44:35:
ed:ea:67:12:08:51:8d:cb:8a:6e:fc:e7:07:de:a0:8e:73:4a:
81:c0:ab:03
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUD0m+ZUten5TS7WOd5QYG9sil3LUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjQwNDE5MDAwMDAwWhcNMjQwNTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MDQwZjdkZmRjY2ZhMWJhMjhkN2Y1ZjkyZGQ2YzNlN2Mx
NjJiNzA2ZDFlODk4MGFhNTkxNGRjNzEyNzQyYzQ5MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCdR5nM5toF75ah8oRr1bevyNUgAfo6dI3rR3ePo4umeiNT
O0XSZX8Lg0wxF0HuKRIL6KepEIsL9rUxrt68VfTIEzn7JTtTsa4FaUfYP5SXiLnM
/BFNe8pf9qA/BER+vxyT/wrvhQJKMaKVW5NYuSszHym1BbeaAzL6etK3V1PHJ2Tn
pZ9Bej5C6NSaheiz+3jLVemT4zNL6aP54kjib5CPnQF8eYLBrwwpfaWJhDDafMUT
w6+ehZZT6Pm7Kx+bCU/w5eGjFD8evmXKPm8tDiCQN0DMIAWPLdvx9egL+fTuSB6M
twCg6vkihPr+Xh6Ms56tGxxog/21OFCk4uATcFsJAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUBlPRnoev9SsNJIxw3bRY3YWEUEswHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzE5ZTgzYjczLWViNDItNDRhYi1iMGIwLWU4NWJkMGE4NjU0Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzA8DgwDQYJKoZIhvcNAQELBQADggEBABIMhCMa3byhH7BbgHYgoAsO
Zt5HGFF3UGCJUCa1uBaSSoyP0AbpazNaP8v0lzJigNduhSUuhlc+dn0F30vqQ9/r
Bx2yxwrikiuhOi8B8IHrG0LKDJoUD4f3wnXsjqDz6WlR1zaCM2nc1HIZVne8zql9
MN07k7l3Zw0/fAr3eFCmYCHIgl92JtdRstgrLDOuF0KXsmuKAoa4BDveT+haRcgq
bxCpsbB7rld3z1FCVaTxJH8ARu2iteGlGjK5XdzAhh6ZuuuvH+zlEO84je5RFZ6V
r3tNmQWH4BDuh/AsGADfAaZA9JZ2rDFENe3qZxIIUY3Lim785wfeoI5zSoHAqwM=
-----END CERTIFICATE-----
Generated at Fri Apr 19 18:28:11 2024 by rpki-client on console-ams.rpki-client.org