Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08b75879-ed2b-4721-949c-74cc2aec5f71.roa
File: 08b75879-ed2b-4721-949c-74cc2aec5f71.roa (raw, json)
Hash identifier: Qs47cf2pNuikxDZHjTSg+Q4EzmYfS/DwJHJlGG0/fDw=
Subject key identifier: 4C:BF:9D:51:DA:75:C8:7E:B4:68:1E:D7:82:B7:71:E1:61:07:08:BF
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 132C5DE6E8ED906112CDC6BBDFC2DC9ACAC5CEC7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08b75879-ed2b-4721-949c-74cc2aec5f71.roa
Signing time: Fri 31 Jan 2025 00:00:00 +0000
ROA not before: Fri 31 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.94.144.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 31 Jan 2025 18:10:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:2c:5d:e6:e8:ed:90:61:12:cd:c6:bb:df:c2:dc:9a:ca:c5:ce:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 31 00:00:00 2025 GMT
Not After : Mar 7 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:5e:95:7a:7a:30:2b:ef:53:48:5e:a3:e1:
5e:86:62:64:18:77:e0:6f:79:44:a5:0f:24:e4:ff:
59:81:28:a2:3d:72:99:15:fb:c3:a3:14:f9:4a:d5:
cc:2c:7b:19:fa:7d:7f:99:e0:a2:a4:45:66:df:68:
72:b6:c2:e6:d3:a6:93:8e:01:f1:0e:c2:85:75:1e:
0e:0a:c3:41:f0:0d:4f:db:4a:fe:6c:cd:17:d9:01:
87:e4:ed:16:a4:b5:b2:53:6a:9c:70:19:be:75:b5:
09:17:fb:48:98:e8:5a:6c:40:b4:7f:dc:b9:03:76:
ed:23:7d:e7:4b:45:b0:5a:c0:01:f9:5c:55:eb:1e:
23:17:62:bb:ca:4c:de:06:85:ee:91:a1:d4:8f:2e:
c5:eb:11:3c:34:31:e2:a3:24:78:d9:e3:b9:b8:a2:
7a:36:86:8c:ef:cd:50:d8:28:00:99:a0:bf:cc:0e:
80:01:83:b6:15:12:39:7a:78:5a:e7:5a:4d:8e:43:
24:57:9a:39:6b:76:c3:4e:60:8c:51:c4:b5:1b:16:
f6:7d:1c:92:ef:f1:c8:84:a3:9d:ae:11:e0:ac:11:
7c:16:dc:1d:25:fc:df:d9:ea:55:46:26:6f:30:73:
e7:82:e1:a4:d9:72:a6:06:a7:d9:7e:4a:19:a7:fe:
5c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BF:9D:51:DA:75:C8:7E:B4:68:1E:D7:82:B7:71:E1:61:07:08:BF
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08b75879-ed2b-4721-949c-74cc2aec5f71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.94.144.0/23
Signature Algorithm: sha256WithRSAEncryption
05:04:8a:fa:73:88:67:6b:c4:46:a9:21:0d:0b:78:52:b7:18:
9a:90:c9:e7:33:0e:91:48:b9:bc:63:bd:6b:60:a7:6b:2c:ed:
9e:3a:ca:e9:39:e6:a0:4b:1a:c7:7f:48:b4:af:e7:ce:c2:57:
82:8c:d2:c1:9a:1c:9c:65:4e:c2:d3:67:91:c8:0b:a9:96:9b:
28:09:cf:24:ce:06:21:97:94:a7:6d:5d:2f:7a:b6:51:d5:53:
e0:35:2f:db:0d:ee:38:b5:29:9f:f0:ad:0f:21:27:4a:17:e6:
d9:a2:9c:f3:07:ad:48:0b:97:f5:2e:eb:c9:04:40:6e:be:75:
cf:fb:d8:91:f9:a3:f2:e0:6e:60:2e:4a:78:91:14:42:a9:68:
83:e1:41:9e:84:92:52:21:e5:62:73:88:73:50:b1:91:27:8e:
c8:64:e1:65:9c:aa:6e:17:c9:ed:e7:c8:69:6e:0a:f2:85:b8:
b8:8a:b0:ce:00:0b:67:95:4c:1f:41:7a:c6:12:a6:cf:13:23:
45:75:cd:d3:b1:0f:8b:c0:16:aa:ea:d1:2a:fd:f2:20:11:e4:
e5:0d:fe:e1:fc:a4:79:23:51:1f:e7:5d:ad:36:9c:4f:40:c6:
db:0b:1a:c1:a5:2d:b2:cb:b9:87:14:9a:5e:96:af:b3:c9:d8:
d6:26:84:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:45:06 2025 by rpki-client