Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8935c170-fe57-4cab-a427-cf449e778ef2.roa
File: 8935c170-fe57-4cab-a427-cf449e778ef2.roa (raw, json)
Hash identifier: xT4aqCHtnGcmOIw+PvbE3RmerTqQrf6gxgeSd32lC88=
Subject key identifier: 3F:A8:CC:80:DD:86:E1:3C:F0:1E:5F:0A:1C:90:2D:CE:B6:55:56:72
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 31296F35CEF5C7BD9503C1A15375C96E177DD207
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8935c170-fe57-4cab-a427-cf449e778ef2.roa
Signing time: Wed 04 Jun 2025 00:50:36 +0000
ROA not before: Wed 04 Jun 2025 00:50:36 +0000
ROA not after: Wed 09 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 22:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:29:6f:35:ce:f5:c7:bd:95:03:c1:a1:53:75:c9:6e:17:7d:d2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Jun 4 00:50:36 2025 GMT
Not After : Jul 9 23:59:59 2025 GMT
Subject: serialNumber=927782ad464368b1c7f19030422095e2cda04cd9ace65169b84c290b8b99b267, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b0:22:01:00:b8:68:8a:12:cd:1d:eb:4e:6e:
a2:30:2f:e3:89:b9:86:dd:76:ca:c8:ff:9f:3c:6a:
23:dc:a6:46:c7:e3:d5:da:54:6d:84:17:74:42:c4:
7d:08:4d:e3:56:45:cb:f2:1a:37:12:1b:d8:68:07:
a7:59:1a:30:8a:50:1a:4d:39:6e:84:4f:bf:88:96:
60:3b:26:12:7c:db:00:c6:ea:c2:1b:fa:3a:5c:df:
90:a8:07:27:68:1a:66:c0:04:49:0d:21:7c:d7:be:
3e:de:b9:e0:b7:91:79:1d:03:9a:4e:83:a2:41:43:
75:58:11:bc:dc:ff:94:6c:57:c1:cb:95:50:56:94:
0f:b9:40:a4:8a:4c:66:7b:53:14:d6:d0:c8:bd:a1:
04:73:24:6b:00:9c:b9:77:9b:dd:17:ef:c3:b2:34:
47:39:b5:51:22:c2:f0:b6:40:94:f9:77:bb:42:b9:
cd:c1:22:b5:05:d1:12:48:d9:e9:0f:e4:54:e5:96:
3c:3e:fa:ed:ab:a0:31:ac:c5:64:d6:19:98:42:0d:
71:97:ca:1a:67:7e:98:53:d9:b0:de:49:a4:9a:d9:
fb:1d:26:be:fd:59:09:50:8c:45:12:4e:36:cb:49:
cb:c4:0c:44:9e:ab:9e:df:a1:b9:2d:92:fa:17:61:
95:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A8:CC:80:DD:86:E1:3C:F0:1E:5F:0A:1C:90:2D:CE:B6:55:56:72
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8935c170-fe57-4cab-a427-cf449e778ef2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.241.0/24
Signature Algorithm: sha256WithRSAEncryption
58:26:52:b1:a2:8a:46:0a:11:7b:fb:8a:9c:d9:6c:ed:30:57:
03:df:b6:18:b0:6a:f4:bf:3e:84:0f:5a:a0:ab:25:9d:81:1f:
fb:6e:61:4f:24:0b:63:d7:ad:e8:2c:a5:4f:a1:db:a8:80:31:
75:d8:45:9b:53:bb:78:3a:63:ae:cc:17:ec:ec:6e:38:3f:0c:
1a:89:5a:ae:b5:dc:32:4a:32:f1:90:f4:dc:40:f6:5b:1c:21:
0c:c8:e0:fc:08:57:70:ca:eb:ba:1e:13:89:a4:c3:7e:c9:73:
53:a9:89:52:45:0a:06:db:40:0b:19:66:84:99:50:4a:1d:5e:
eb:b5:84:3d:78:9e:1a:d6:31:af:21:43:6f:c7:ba:a2:dc:00:
5b:e8:ec:8e:3f:3a:3a:ba:12:3c:91:67:f2:db:69:35:00:dc:
31:ca:e8:97:73:11:3d:9d:27:6b:03:96:b8:0b:de:ec:ee:82:
74:69:16:5b:dc:e1:ca:bc:9a:e8:87:a3:bb:5d:9b:bb:a0:ed:
04:00:53:b2:67:30:9e:48:c0:b4:d3:a0:d6:bb:9a:4e:69:08:
ae:96:41:58:9c:64:0b:ec:5e:07:72:36:fa:3a:43:b7:26:8a:
d9:6e:0b:87:84:2b:8d:44:b1:61:f6:80:04:f6:75:17:91:89:
70:71:22:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:56:17 2025 by rpki-client