Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4f5d5c28-a76d-45f6-b17f-997197f358d3.roa
File: 4f5d5c28-a76d-45f6-b17f-997197f358d3.roa (raw, json)
Hash identifier: S0y4LlILYkqS2CVz9XV+tfCAFlQVc082Pin4zRU6oks=
Subject key identifier: 25:1B:92:5B:55:53:24:05:23:A4:01:FA:0B:F9:BA:D3:C4:D2:40:45
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 75E3F417840301F86257D320F0B955110335591D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4f5d5c28-a76d-45f6-b17f-997197f358d3.roa
Signing time: Wed 28 May 2025 13:52:00 +0000
ROA not before: Wed 28 May 2025 13:52:00 +0000
ROA not after: Wed 02 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:5200::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 02 Jun 2025 18:38:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:e3:f4:17:84:03:01:f8:62:57:d3:20:f0:b9:55:11:03:35:59:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 28 13:52:00 2025 GMT
Not After : Jul 2 23:59:59 2025 GMT
Subject: serialNumber=86afa25d2f8e5dc1c5705bdd0d8b54b28da9e22910b49cfa539c763db10aff8a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6a:fa:cf:80:17:93:d3:0b:2b:65:9f:d7:e9:
27:5b:df:e2:27:ce:4f:10:73:e5:91:cc:8f:48:00:
96:16:7e:d4:ae:df:8c:bc:3d:60:74:f8:67:17:92:
b4:bf:8c:d6:fe:72:24:f6:77:11:69:a7:43:a5:c0:
3f:03:6a:ca:99:77:8e:bb:4d:50:6f:e4:17:a7:e3:
2f:cf:54:53:04:76:e0:b4:99:51:26:bf:c4:ba:d1:
52:dd:da:74:fe:1f:2e:2e:64:01:6b:24:cd:99:ea:
2c:4c:ae:50:83:cc:20:0c:59:07:30:75:f9:0b:01:
81:01:b0:ad:4d:f8:c9:40:0c:97:c5:57:80:50:db:
dd:db:fa:ae:85:2b:e8:1e:08:16:cf:9a:ed:35:30:
19:9f:40:9f:f0:34:5a:70:7f:71:bd:21:49:ed:94:
cd:d1:7c:99:06:47:3e:85:d4:12:70:28:fa:b7:e9:
21:7d:e1:55:fc:47:01:5c:b5:6a:bc:84:22:3f:b6:
04:d1:c1:27:12:12:ff:db:85:8b:60:e7:29:b1:e4:
2b:d0:fc:d6:fb:89:f9:98:7d:a7:d4:66:99:00:a6:
f0:1e:77:97:eb:f6:44:4d:83:da:1c:39:4d:37:86:
78:ea:1a:60:4a:d0:18:17:3b:94:d3:42:82:70:5a:
b6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1B:92:5B:55:53:24:05:23:A4:01:FA:0B:F9:BA:D3:C4:D2:40:45
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4f5d5c28-a76d-45f6-b17f-997197f358d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:5200::/40
Signature Algorithm: sha256WithRSAEncryption
4f:83:19:04:56:d8:5b:a1:ac:4a:8b:d2:cf:bd:e2:d8:f2:15:
cf:7f:37:a1:ab:82:e1:64:51:50:7c:e0:30:a1:c4:f2:ae:74:
cb:ec:0b:d8:72:52:63:a7:60:33:ce:e5:8e:5e:15:9d:54:e4:
0a:76:79:e0:3d:9d:2b:5a:f1:3f:de:cc:db:33:d2:43:9c:81:
f7:0e:2e:33:0e:68:0b:1e:eb:a0:14:44:91:49:46:dd:c5:b7:
f6:5e:13:d2:dd:26:a8:94:ac:e7:45:0f:7b:3f:b1:c7:ad:03:
51:61:2b:a0:56:26:5f:fb:18:42:a9:3a:47:79:3e:ae:f3:8d:
ca:0a:cf:87:f9:8a:1d:68:af:ef:5a:31:b2:89:d4:ff:79:e8:
af:26:62:dd:79:11:1d:06:65:a2:9c:f1:68:bc:78:38:e1:18:
86:3f:3c:01:c1:43:dc:1e:92:37:e2:46:cf:3c:de:73:cd:08:
3f:9b:0c:60:85:95:b3:14:a3:2f:f6:4d:3d:38:35:e9:38:20:
87:0e:b9:97:c7:52:d2:ef:34:75:47:2a:6c:b7:1b:06:fb:17:
d9:6d:d2:f3:2f:b5:0e:b1:83:7f:c5:25:f9:f2:43:fe:f5:05:
56:98:f3:f2:f1:2e:cf:c4:7d:7e:b2:1e:59:87:40:58:63:80:
bb:be:dc:c6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 6 03:38:36 2025 by rpki-client