Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d18811eb-8fba-48a8-8086-91b2e9633448.roa
File: d18811eb-8fba-48a8-8086-91b2e9633448.roa (raw, json)
Hash identifier: SwG9N4ydBqAcpViYTsbNTKAtcvR0rPOQGPL3OJOS0I4=
Subject key identifier: E2:49:23:74:7C:5A:21:F5:40:6B:50:C3:07:A6:8A:79:71:B8:17:E9
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 59768D7881D378CB6B69EB3CF8EC9A789730ED51
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d18811eb-8fba-48a8-8086-91b2e9633448.roa
Signing time: Wed 28 May 2025 13:37:11 +0000
ROA not before: Wed 28 May 2025 13:37:11 +0000
ROA not after: Wed 02 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:ae00::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 02 Jun 2025 18:38:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:76:8d:78:81:d3:78:cb:6b:69:eb:3c:f8:ec:9a:78:97:30:ed:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 28 13:37:11 2025 GMT
Not After : Jul 2 23:59:59 2025 GMT
Subject: serialNumber=02da902bf52ba93465558a39fa5dbcbb3e19e47fd84c165715ae5030e6413f58, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:67:46:68:ee:9c:86:59:f7:1c:ec:45:dd:f7:
de:c1:a2:f5:1e:81:a7:2f:59:50:22:d3:6a:7a:9c:
ad:2a:ff:39:8d:ab:fa:31:3d:b1:53:0c:f4:09:a3:
e4:30:c6:cd:3d:6d:95:4b:9a:46:63:e8:89:80:bd:
b8:b4:46:ec:7e:07:aa:38:91:57:31:ad:1d:13:28:
e9:b7:ce:7d:b9:73:b9:02:00:a7:85:30:64:94:2f:
e4:35:d2:4c:68:7b:e4:a6:cc:37:41:39:72:ad:0c:
3d:8f:8d:88:94:df:31:47:57:4b:d7:37:a1:2a:ca:
64:20:ce:18:9e:69:f4:b9:9e:a1:0a:2a:18:14:48:
54:99:be:51:ea:21:5c:df:86:ad:95:8d:1c:c9:1b:
a9:1c:b7:78:be:4e:40:c0:85:19:7c:59:48:21:ea:
70:59:33:4e:b3:7a:47:14:af:47:c1:a0:b3:6c:3f:
e3:12:20:d0:8e:98:57:df:64:8b:a2:f7:1c:6f:64:
21:4e:cc:81:64:e0:de:a4:9d:b6:7b:25:ce:b8:b0:
6e:88:49:54:9b:ba:f8:b9:42:10:a6:8e:ad:40:b0:
c7:18:d5:a3:49:5d:fe:b1:e6:f8:37:5d:fd:a8:c6:
f6:d5:95:63:07:32:59:c8:e7:35:ef:61:b7:59:89:
75:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:49:23:74:7C:5A:21:F5:40:6B:50:C3:07:A6:8A:79:71:B8:17:E9
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d18811eb-8fba-48a8-8086-91b2e9633448.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:ae00::/40
Signature Algorithm: sha256WithRSAEncryption
0b:ab:a5:c8:01:b5:66:1e:9f:e8:67:ff:7f:2b:84:2b:5a:72:
29:99:e3:e1:20:51:ae:c7:bb:c3:ee:9e:55:bc:b2:e7:6d:ab:
1e:35:1c:19:e4:03:23:53:cc:98:2c:78:de:0d:21:fc:5f:7b:
d7:2b:26:02:e3:b8:06:36:e2:e2:6a:21:99:e1:e8:39:9a:cf:
0e:f7:62:ac:17:a2:53:c8:b7:b5:fb:0f:e3:6d:e7:6b:6b:0e:
1d:1a:bc:c0:9d:be:ce:e8:c3:b6:f8:14:9a:6b:2d:25:ba:d0:
60:4b:a3:81:7e:75:72:00:f3:0d:e3:e1:3c:84:6d:a6:6e:a5:
6e:0d:fa:3e:03:af:81:af:ab:b4:05:91:e1:a0:c6:6f:b6:20:
85:45:55:0b:ab:82:60:0f:2e:16:d1:e2:7f:36:3e:29:d5:a7:
1d:8f:17:b4:0c:ae:84:04:83:7c:33:1a:6f:02:2a:3d:71:17:
24:be:50:56:43:f1:47:34:6e:01:14:1f:57:dd:25:d0:3e:b0:
19:0f:cc:4e:f7:1c:e3:d7:a3:d3:5b:cb:cf:0e:e8:85:c8:d5:
87:87:22:79:7f:ba:81:ee:c2:17:af:0f:57:85:20:13:15:11:
4b:bc:04:ff:77:3c:10:d3:b2:17:eb:7e:7a:e6:12:19:6d:28:
3d:0c:7b:df
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:21:34 2025 by rpki-client