Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/69677ce9-c7ae-4732-b5e4-c6b50c22b963.roa
File: 69677ce9-c7ae-4732-b5e4-c6b50c22b963.roa (raw, json)
Hash identifier: DyL3VYnub80mVG9M7Jwd29R2sBOAPPRsOubu0+12RBg=
Subject key identifier: 36:E3:E8:6D:85:54:70:CD:C6:42:BC:55:8A:BC:FC:09:44:94:E4:3F
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 211D70CD4869A6EDAC7D35BA49C6FB4E37EB2B01
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/69677ce9-c7ae-4732-b5e4-c6b50c22b963.roa
Signing time: Tue 04 Feb 2025 00:00:00 +0000
ROA not before: Tue 04 Feb 2025 00:00:00 +0000
ROA not after: Tue 11 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.94.0.0/17 maxlen: 17
Validation: Failed, certificate revoked on Tue 04 Feb 2025 23:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:1d:70:cd:48:69:a6:ed:ac:7d:35:ba:49:c6:fb:4e:37:eb:2b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 4 00:00:00 2025 GMT
Not After : Mar 11 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f7:b7:67:70:a2:af:67:b8:5c:97:9c:b8:99:
b6:e5:fa:00:db:40:28:53:b2:27:6c:69:78:e7:e7:
1f:c3:87:03:af:7d:1c:ab:36:21:32:8f:0d:79:e5:
a3:48:f4:3d:a4:87:e3:6d:bd:62:c1:ba:20:49:14:
df:a1:95:49:c9:52:e7:aa:58:39:73:b9:49:63:bb:
68:bb:64:89:e0:51:08:c8:33:96:72:79:7f:68:03:
aa:48:dc:37:d1:5e:09:eb:2b:22:aa:3a:37:1f:36:
96:78:8c:26:30:be:48:52:86:17:43:26:ff:4d:24:
e8:57:1b:51:04:81:7f:43:78:d3:0c:de:2b:13:cd:
cf:db:2c:c1:bc:59:ec:2d:04:8e:db:d1:2d:0e:84:
a2:cf:bd:5a:96:05:6a:38:83:94:f4:4a:7e:dd:e6:
09:1d:c2:83:46:b0:88:0b:f3:33:46:96:e9:9e:a0:
69:94:45:c1:88:1c:2b:f1:ea:01:4f:98:f8:d5:94:
0e:77:71:8c:f7:8e:81:48:e2:1a:74:75:6a:a4:c0:
85:c0:b9:10:82:ff:a9:4e:55:09:34:e4:f0:24:34:
2c:db:3b:d8:36:0c:48:46:3b:1d:cb:aa:7d:bf:83:
e9:32:e2:46:ba:8b:ec:97:16:a7:82:85:ea:dd:0e:
ac:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E3:E8:6D:85:54:70:CD:C6:42:BC:55:8A:BC:FC:09:44:94:E4:3F
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/69677ce9-c7ae-4732-b5e4-c6b50c22b963.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.94.0.0/17
Signature Algorithm: sha256WithRSAEncryption
37:9a:c9:0d:2e:4f:b0:9f:3f:6f:f8:67:e6:9d:5f:ee:9b:a4:
50:c3:a6:10:e7:03:f2:21:7d:37:34:1a:99:3d:96:68:a1:52:
61:11:36:05:58:c0:82:1d:e0:8b:6d:90:99:db:5d:d3:7d:ca:
0c:0b:5a:e2:42:9c:36:c4:96:ed:7a:4f:89:ec:55:97:c1:c0:
4c:10:3c:75:e6:46:fa:23:0f:13:96:bf:e8:3b:89:3a:c3:72:
e0:3a:97:0d:85:21:58:5b:80:4f:e1:d3:82:bd:3e:9b:4f:30:
1f:6e:a0:b7:4f:4b:b2:a9:57:ab:a6:3c:5d:05:19:92:cd:67:
b8:e8:e0:2f:53:08:4e:15:74:18:cf:0b:03:45:f9:45:26:5f:
d9:59:ba:93:09:46:3c:15:9f:52:e4:5c:25:99:7f:45:b7:11:
23:9a:57:4f:8d:58:64:c4:67:c8:13:03:de:36:52:b1:72:4e:
4f:eb:fa:1b:f9:fc:9e:bc:8e:75:f0:ad:3c:bd:7a:cc:bf:bc:
ab:78:44:1a:5b:00:14:92:2e:11:27:d1:30:66:64:be:cd:a1:
ca:4a:b7:b1:1b:11:fe:6e:a0:9f:1c:70:55:85:58:51:3b:d5:
33:74:b0:73:d5:23:ae:95:1b:b0:62:30:3a:c8:5c:c9:de:2a:
fc:8b:4c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:40:25 2025 by rpki-client