Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/48ed1250-2cfb-4c1c-ac00-dfbdde881b2a.roa
File: 48ed1250-2cfb-4c1c-ac00-dfbdde881b2a.roa (raw, json)
Hash identifier: 1KQI0YlH2s8oUq/yVjlogHJKSUqDr05lXW70Znoh2eM=
Subject key identifier: 16:1F:40:74:73:6F:15:AF:6E:2E:73:F9:C5:AC:09:DB:51:E8:1B:3E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4F96E50CE54EDFA78906A0CDB93D8E18D696ABBC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/48ed1250-2cfb-4c1c-ac00-dfbdde881b2a.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 52.124.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Jan 2025 23:53:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:96:e5:0c:e5:4e:df:a7:89:06:a0:cd:b9:3d:8e:18:d6:96:ab:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:98:05:f6:58:9f:66:cb:7a:f9:3e:ff:0f:32:
80:1a:33:fa:87:bd:99:41:62:b7:ed:ba:e3:0f:fe:
9f:9d:6f:ba:4f:72:ca:6d:66:88:1a:5a:a6:c0:cf:
c6:6f:80:3c:04:e8:09:a0:7d:58:b9:fc:85:20:14:
5b:2f:62:47:cd:a6:3e:ae:cb:47:d5:68:1c:c7:48:
44:56:93:b9:fb:1d:b8:fa:18:90:1b:ef:e5:c9:a1:
87:19:51:34:fb:bb:fe:3b:be:63:56:32:05:f8:d9:
4c:71:b1:7d:f7:84:3f:d1:32:01:65:e7:96:79:fe:
ca:93:3d:4c:e3:70:ce:e9:37:91:9f:49:d8:10:35:
07:0e:59:4a:ee:b5:bc:dd:2c:94:88:b1:12:f3:c8:
76:2e:e8:a0:8c:56:86:59:82:d3:03:8a:95:34:22:
ce:13:69:a9:cc:d1:8f:4c:11:b1:b6:db:bb:ea:ca:
d4:15:35:f9:ac:65:61:67:ed:31:55:52:a5:f4:75:
22:b0:76:00:3e:c4:2c:ae:b8:9a:b2:9b:a0:16:f4:
17:d8:cc:a2:b7:36:3c:e8:cf:a4:76:0c:3e:b0:c7:
92:75:a6:ea:30:6d:58:dc:e7:2f:d9:ff:93:24:25:
fb:44:b7:81:99:b4:38:c4:9e:27:59:8d:82:a6:4b:
15:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1F:40:74:73:6F:15:AF:6E:2E:73:F9:C5:AC:09:DB:51:E8:1B:3E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/48ed1250-2cfb-4c1c-ac00-dfbdde881b2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.124.128.0/17
Signature Algorithm: sha256WithRSAEncryption
60:5b:51:b0:07:a6:2b:29:34:b5:8c:6f:18:4a:1e:84:e9:ad:
56:f9:a2:4b:9e:69:ab:79:15:bb:14:1c:cf:5b:65:81:c0:fe:
91:57:1e:f5:89:69:35:63:bf:a3:94:d4:96:cc:31:1e:20:03:
89:f8:9f:f8:7e:b9:e9:3d:2a:56:0f:c7:a9:e5:d8:ba:85:59:
21:7d:a3:d3:b5:71:ba:da:5b:d6:b2:7e:38:50:7a:3c:64:40:
24:a7:1a:65:b4:6e:e3:80:b0:fb:33:78:56:4f:a0:03:1c:b1:
31:01:fd:5c:b7:ca:d7:9d:f5:78:16:4b:a4:04:2d:b5:32:c9:
86:80:92:78:f5:83:bd:62:b8:4a:d3:f3:82:86:ef:3f:62:99:
e4:a5:ff:58:e0:eb:38:f6:36:9c:d3:1c:07:45:eb:40:8e:c4:
22:a6:48:d2:0d:50:b7:37:69:e2:42:5a:c4:38:76:38:ec:0b:
ab:87:df:31:76:c4:84:65:39:a7:aa:10:81:54:7b:80:f6:0c:
eb:0b:8b:61:b6:b1:f3:3a:cb:c5:7d:3c:ca:8d:55:99:d8:17:
67:dc:09:70:df:1c:0d:8c:61:44:90:ca:cf:eb:ca:2f:ba:89:
99:9b:a5:67:62:4d:22:36:9b:cf:f1:6e:43:c8:7a:cd:0e:7d:
67:af:04:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:57 2025 by rpki-client