Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/97890aa9-0ff5-4794-8b2f-fd7d8fad819e.roa
File: 97890aa9-0ff5-4794-8b2f-fd7d8fad819e.roa (raw, json)
Hash identifier: 7BAj9Gg6kr/hgYbvB4bWgo+dnqN2aTBoHwLEVRHJNLk=
Subject key identifier: 77:0F:13:60:D0:77:95:B7:B6:24:BB:38:6B:38:1E:05:41:22:D5:2C
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 56FAE6C6302735558236EB1B88E16BE66B1F160F
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/97890aa9-0ff5-4794-8b2f-fd7d8fad819e.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 206.55.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 21:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:fa:e6:c6:30:27:35:55:82:36:eb:1b:88:e1:6b:e6:6b:1f:16:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=b7ffef42c975b556b5df02bbd7d82551cc4a13801d98718ef306b4a28c458ff6, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f0:76:dc:66:06:75:37:19:ef:79:52:47:96:
99:86:3e:e8:5d:3c:50:96:0b:ce:ef:06:7c:d5:18:
a5:c5:c7:98:b9:41:3c:e5:9d:6c:a3:84:32:a5:17:
c7:3e:85:27:8c:69:4e:05:c5:32:fc:ca:89:c2:e0:
df:6f:42:2e:27:ec:c2:2d:37:cc:60:f0:3f:24:1c:
ff:35:e6:ce:e9:3f:8c:21:80:45:3c:97:1b:53:ab:
8c:7b:a1:d6:18:32:0d:57:76:02:9c:59:ca:48:55:
4e:84:ed:09:67:54:60:95:2d:e1:03:ea:5c:64:06:
10:5e:4e:28:b1:30:0d:c2:9b:41:41:10:4d:ac:dd:
9f:8b:a3:cf:cd:e3:9e:10:10:b0:55:34:71:ff:9a:
9c:03:23:4f:af:0d:11:4c:4c:f2:ef:4b:e4:f9:b7:
3d:e0:6f:40:2b:fa:86:33:55:e3:55:17:ea:11:c5:
b7:80:ac:2f:1c:cc:84:7a:d2:1e:b7:3f:92:38:6c:
8f:e3:89:23:13:39:d6:e4:24:6a:af:49:db:8f:a7:
98:3c:a4:80:04:29:ba:99:51:31:95:74:47:f8:b2:
42:f5:9c:c0:7d:98:d9:54:3d:e2:d5:0e:4e:f4:52:
03:83:80:8d:cd:17:ea:65:70:e8:16:3f:72:f1:db:
5d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0F:13:60:D0:77:95:B7:B6:24:BB:38:6B:38:1E:05:41:22:D5:2C
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/97890aa9-0ff5-4794-8b2f-fd7d8fad819e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.55.143.0/24
Signature Algorithm: sha256WithRSAEncryption
02:ba:d3:21:cb:d2:6b:e8:a0:dc:bf:51:64:25:73:63:34:7a:
d9:ce:1f:13:ad:15:99:78:0e:58:2c:91:5d:40:a4:00:e9:3c:
99:c6:e9:38:48:43:e2:74:33:06:27:b5:52:0c:4e:97:c6:53:
e8:c7:3e:db:29:a9:9d:84:1b:fa:30:64:19:3e:f3:11:f8:3a:
4f:cc:09:86:a1:b6:6c:3c:85:b7:c4:0e:7c:41:ab:54:38:2e:
b6:f1:66:05:9a:f8:a4:4d:cc:73:ca:72:b0:0f:a7:fd:df:10:
03:3b:c6:59:d4:96:cc:84:b3:f1:93:73:2e:58:c7:e4:40:32:
04:f9:a2:ce:56:e1:4e:1c:1c:f8:e1:ec:50:cf:8a:21:ed:bd:
0e:24:f0:bf:93:eb:b1:08:b3:65:66:75:b3:68:a5:cc:4d:8d:
24:ea:9a:22:88:2c:d6:9c:34:4d:22:19:ad:bf:ea:e1:72:32:
d0:ec:33:94:80:58:5e:e4:fe:c3:80:0a:8c:56:4e:47:e0:70:
d2:6b:c2:b1:11:03:bc:5e:c1:b0:d4:9f:9a:0e:e0:6c:41:cd:
20:72:71:08:f4:63:d3:e6:c8:51:a1:8a:54:32:d1:7b:ec:a9:
f7:eb:5b:2e:18:17:6e:7a:7c:bb:f0:32:b7:d1:49:a7:82:7c:
15:31:54:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 9 23:35:50 2025 by rpki-client on console-fra.rpki-client.org