Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/41f6bb6b-198c-4c84-8784-c98ec85e8ae6.roa
File: 41f6bb6b-198c-4c84-8784-c98ec85e8ae6.roa (raw, json)
Hash identifier: IbN8jfDQJ2jPdHu4jGljOQqh+osY1D9OYUHQeEykCcg=
Subject key identifier: 5D:9D:74:A3:1C:81:64:5E:8E:2D:CC:E7:36:91:BD:99:BB:A9:D8:26
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 169D6391487E9BA93BF7F81BA15191195BFDA07B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/41f6bb6b-198c-4c84-8784-c98ec85e8ae6.roa
Signing time: Mon 27 Jan 2025 00:00:00 +0000
ROA not before: Mon 27 Jan 2025 00:00:00 +0000
ROA not after: Mon 03 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.160.0.0/14 maxlen: 14
Validation: Failed, certificate revoked on Mon 27 Jan 2025 20:21:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:9d:63:91:48:7e:9b:a9:3b:f7:f8:1b:a1:51:91:19:5b:fd:a0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 27 00:00:00 2025 GMT
Not After : Mar 3 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0c:d3:33:ed:96:93:95:2f:3c:0c:a3:7d:37:
96:bf:58:9c:0f:14:7b:4c:27:b1:45:e4:2d:d2:ff:
cf:08:7c:aa:59:fc:b1:bd:56:c8:53:3e:4c:f7:ef:
a8:02:e2:69:25:38:e1:f9:23:16:ed:a0:b8:61:9e:
0a:ba:2c:56:68:b9:82:b5:85:5f:a6:13:4b:8f:cf:
59:59:af:6b:d2:63:16:bd:56:85:c1:f4:b6:7b:74:
02:ea:71:2e:0e:c7:c8:2c:6e:d0:23:9a:d9:a6:cf:
9d:a8:cb:4b:d5:f0:81:26:dc:e9:48:c1:53:54:96:
cb:fe:a2:a9:48:13:db:11:35:52:c2:68:2f:ee:51:
73:12:2a:d6:b4:e9:dd:f5:1d:b8:c0:d0:51:6e:ef:
7a:5a:92:d5:8f:2e:72:c3:4c:5b:60:2b:c0:ec:e0:
79:33:74:cd:71:88:89:eb:c6:14:0e:7b:4a:fe:07:
b1:15:85:58:5a:f8:ff:e0:c3:c0:1d:6c:1e:f3:e7:
ae:c3:29:24:91:6e:69:9d:1f:87:aa:b9:4e:86:66:
2c:e3:08:10:3e:65:b0:73:2f:30:6c:25:c8:fc:51:
47:0b:1c:d7:ed:4e:29:fe:8c:b8:68:54:5a:fa:97:
e6:2a:33:2c:ef:24:7c:38:29:e3:b9:d3:9e:b5:86:
43:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9D:74:A3:1C:81:64:5E:8E:2D:CC:E7:36:91:BD:99:BB:A9:D8:26
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/41f6bb6b-198c-4c84-8784-c98ec85e8ae6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.160.0.0/14
Signature Algorithm: sha256WithRSAEncryption
2c:65:ba:e5:6f:c8:c3:ec:32:e5:13:c9:8b:7d:28:45:35:8c:
53:de:f7:53:49:b1:ac:d0:c5:59:b4:41:07:f4:c8:00:e5:77:
5e:93:e0:78:a8:0a:fa:75:3e:3e:1a:13:26:04:0a:d2:be:79:
75:9d:37:ca:df:9d:96:25:94:ee:d0:1f:8a:15:80:ee:d4:8a:
58:e6:1c:94:41:2c:ce:fc:d4:c0:1e:5a:95:f6:d2:a9:51:5a:
f1:90:17:2e:20:ac:01:3c:83:ec:8c:93:00:8d:ed:9c:b1:a6:
62:7e:90:c0:ad:73:3a:7b:78:b1:98:ff:61:fa:30:6b:84:ab:
ba:c9:94:0f:91:57:bc:28:c8:e9:39:a0:07:c1:c8:c0:c9:55:
b1:8b:d8:b1:04:46:db:88:d2:1f:4c:86:d4:84:56:0b:ab:f9:
f3:85:49:63:1c:f6:d7:08:d2:35:42:6e:7d:fd:8b:45:55:ef:
0a:db:9a:72:e1:91:13:fb:b7:0a:85:44:60:2f:78:a9:77:78:
85:6f:ad:0e:e5:2d:8e:28:81:db:22:b7:ac:22:cb:b9:17:95:
19:1c:a8:65:85:46:85:96:6d:ec:58:5e:26:46:fa:5c:74:a9:
b8:85:5c:1c:f4:fa:c5:65:85:eb:79:00:90:5f:90:43:62:10:
25:86:7e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 11:00:11 2025 by rpki-client