Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/546c03b8-dca6-4c3e-aedf-0ee86da38673.roa
File: 546c03b8-dca6-4c3e-aedf-0ee86da38673.roa (raw, json)
Hash identifier: QCxnPqTdvFczxn3149CLu62rNyWAdNsz4z+j9Olfkiw=
Subject key identifier: 1D:FC:5F:42:2D:0E:A6:09:1B:73:9D:5C:64:E8:65:63:BC:6E:26:CE
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 352EE5BD0F5735AF6B265F0905688AD898D0ACEA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/546c03b8-dca6-4c3e-aedf-0ee86da38673.roa
Signing time: Fri 31 Jan 2025 00:00:00 +0000
ROA not before: Fri 31 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Mar 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.242.0.0/15 maxlen: 15
Validation: Failed, certificate revoked on Fri 31 Jan 2025 23:11:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:2e:e5:bd:0f:57:35:af:6b:26:5f:09:05:68:8a:d8:98:d0:ac:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 31 00:00:00 2025 GMT
Not After : Mar 7 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:ab:75:df:cd:ac:04:d6:8d:7d:98:b5:80:
91:49:7c:e4:d8:f6:7e:5f:54:78:53:ae:7d:63:21:
d1:2f:2a:18:29:45:5a:04:a0:a6:2a:18:fd:f0:98:
1d:78:a7:61:24:48:5c:a8:2f:94:bf:28:e8:3b:be:
c9:18:16:b6:9f:eb:66:36:0d:62:9d:7f:0e:98:7b:
cd:53:64:8d:58:9b:51:2c:af:7b:37:d7:07:50:45:
0f:74:b8:8e:69:fb:31:f2:e1:b4:c1:be:91:a1:3e:
e5:b8:e7:80:9f:b1:46:7b:60:6a:ab:4f:76:46:67:
98:b5:6a:ee:6b:7c:21:3f:f7:58:c2:6c:22:81:67:
14:97:df:97:d8:ce:04:90:9f:ed:22:b5:fc:d0:ec:
4e:6a:dc:74:7e:51:ed:5c:ae:e2:64:fd:8f:a3:41:
a9:83:13:ee:6d:47:9d:d2:7f:ad:73:14:e0:38:61:
c4:c7:c8:6d:79:db:86:10:7c:df:0c:84:ed:5d:6c:
e1:2b:81:ef:01:c5:41:0d:c7:d6:4f:34:ce:3c:59:
67:4c:53:d2:e1:e9:c6:b1:8c:d2:6d:a2:75:9a:7f:
a5:da:ec:8b:df:84:41:56:bb:11:aa:8d:7e:0a:d6:
a6:50:e8:7b:a2:6b:82:85:31:ef:e5:b1:0d:76:63:
11:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FC:5F:42:2D:0E:A6:09:1B:73:9D:5C:64:E8:65:63:BC:6E:26:CE
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/546c03b8-dca6-4c3e-aedf-0ee86da38673.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.242.0.0/15
Signature Algorithm: sha256WithRSAEncryption
47:26:d7:d8:cf:1c:2a:a1:0e:11:d3:1e:70:9c:ad:f6:73:13:
de:8c:79:ab:48:f2:d6:96:ca:69:1d:fe:1e:ae:7a:bf:4b:12:
ce:d3:bb:9c:9f:48:ab:3e:bb:e6:d4:42:88:9c:7b:8e:63:28:
88:d0:b1:25:03:cd:2d:14:bb:ad:82:d9:8b:bf:71:44:f1:07:
57:f5:f9:d6:b8:43:18:0e:af:63:3b:23:f4:de:01:6b:96:cd:
b3:77:af:46:2e:dc:92:2d:57:54:cb:a1:f5:86:9b:a4:e6:3b:
f5:c0:e2:d7:62:39:cb:ce:fe:b3:7f:8e:e7:27:b6:97:de:bc:
6d:18:84:b0:33:21:19:22:f5:db:55:33:0c:20:73:38:7a:e2:
ac:1b:9f:75:58:db:96:38:72:0e:2d:5e:6b:f5:16:a7:6c:4f:
69:f7:cb:46:f5:a1:50:00:ce:37:95:a7:05:19:5f:32:a0:99:
9c:b6:b1:fb:cb:2a:df:63:72:cf:4d:6d:44:4e:cd:f1:44:45:
d4:03:98:ff:37:d4:09:3c:f4:e8:f2:5e:1d:b6:b8:af:67:4e:
c2:52:0f:37:cd:6b:53:76:bf:4c:d3:a8:e5:f4:15:1b:fa:ac:
2c:2a:47:71:49:b9:4a:e1:42:de:7f:f3:68:61:e5:d7:d1:f8:
2b:c9:9a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:32 2025 by rpki-client