Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b99b6bff-0f0d-4cfe-b052-73b7537e87b3.roa
File: b99b6bff-0f0d-4cfe-b052-73b7537e87b3.roa (raw, json)
Hash identifier: SkHrVb+kpwc3U6QolvtW4Z3VE42MES78I7xJnFC9tRk=
Subject key identifier: B8:8D:94:10:B5:8E:58:9B:EF:17:71:6A:5A:4B:5B:8F:A3:5C:57:06
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 4807705BB185B8CCC50E9009315F7FE520B4E373
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b99b6bff-0f0d-4cfe-b052-73b7537e87b3.roa
Signing time: Fri 23 May 2025 00:30:31 +0000
ROA not before: Fri 23 May 2025 00:30:31 +0000
ROA not after: Fri 27 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.97.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 22:38:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:07:70:5b:b1:85:b8:cc:c5:0e:90:09:31:5f:7f:e5:20:b4:e3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: May 23 00:30:31 2025 GMT
Not After : Jun 27 23:59:59 2025 GMT
Subject: serialNumber=c7597882439b00eb3580fa70ddf8a48fb1989f4ae324357b063971eaa2445a69, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:01:60:29:c8:be:79:94:e5:01:cd:c6:a0:71:
db:93:e1:29:22:e8:93:96:f8:83:bb:29:8c:a9:d2:
af:8d:57:5c:85:2a:9f:d4:af:d1:82:d5:96:4b:92:
e0:a7:5e:8b:a6:c0:1c:a3:37:fb:c4:bf:ac:39:79:
db:d2:81:f3:0e:55:84:b2:fb:de:33:f2:c3:cf:1a:
52:b9:f7:8c:a9:00:58:ed:cc:86:ce:72:57:fe:26:
9f:c1:11:d0:04:36:2a:7b:6d:55:e5:df:8d:b7:d0:
53:4c:e9:a9:ad:e1:97:c3:38:21:bb:17:ab:ed:2f:
92:d8:7a:6a:82:5b:9a:95:f1:df:29:2a:0e:45:21:
83:c8:a9:a4:8f:ca:ba:6f:b3:c8:02:d4:5b:80:0b:
7e:7c:7d:f0:87:ce:d2:3b:85:a4:1b:6b:37:19:41:
39:1e:30:31:43:ce:5c:81:13:5e:90:81:ad:88:e5:
5c:e8:35:76:e2:77:28:3d:8b:f7:9e:06:7a:29:e7:
a6:7a:3f:18:f5:59:da:93:a8:31:c4:bd:92:69:0f:
55:d8:89:57:12:ac:07:9d:8a:24:47:36:d1:d2:b8:
60:7c:0f:0c:f1:6a:46:2a:be:89:53:69:c3:e6:76:
d0:6a:37:82:4a:50:ef:de:19:00:d0:1f:dc:66:68:
02:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8D:94:10:B5:8E:58:9B:EF:17:71:6A:5A:4B:5B:8F:A3:5C:57:06
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b99b6bff-0f0d-4cfe-b052-73b7537e87b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.97.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2d:63:ae:0d:f2:79:b1:10:58:ce:fb:1a:fa:81:8f:55:fd:00:
f6:19:42:c4:57:2e:07:b9:7f:fa:de:bd:a3:72:94:f5:6a:38:
d8:3a:91:44:20:91:06:53:d2:f6:0e:5d:fc:cd:33:29:86:f9:
7a:23:91:68:ce:06:cc:c7:67:5c:71:2e:64:d1:d0:9d:aa:ec:
66:48:58:6c:5b:2b:a1:45:28:e5:17:a6:02:60:8c:71:2f:28:
6a:b1:48:b8:4a:d4:c6:0f:51:37:cf:54:48:ee:c2:e9:f7:1e:
d8:e6:89:c6:2f:a3:a8:c9:e3:f6:74:b6:52:3d:6f:1d:ea:8a:
36:12:35:68:64:bc:c5:ed:0a:ba:6d:09:16:58:a9:bb:a7:bf:
8c:ef:00:9f:a9:05:32:48:0e:25:b2:bf:52:41:0d:5c:a4:8b:
05:95:8b:2f:83:bc:55:de:9b:36:8b:8c:12:87:92:3c:34:14:
db:0c:21:f6:fd:f2:c3:c6:c8:09:c2:23:e2:e0:e0:06:09:0c:
25:fd:52:07:61:5c:51:5e:2a:98:be:ee:df:75:26:b0:6b:89:
50:4d:be:43:65:4f:b7:aa:42:3e:97:e0:67:7b:9e:d5:56:df:
c5:cc:1b:31:aa:50:4b:fa:99:13:b7:e5:85:39:59:82:fe:f0:
e0:74:cd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:11:07 2025 by rpki-client