Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a77a6d1-7b43-489c-8fb0-fbf9331dca6f.roa
File: 9a77a6d1-7b43-489c-8fb0-fbf9331dca6f.roa (raw, json)
Hash identifier: dy4WVbHbZsGHGquzbUORWPLubIZXRpFxd62DLp/OoqE=
Subject key identifier: B8:D2:BF:82:E5:38:97:EA:7F:B2:B6:CC:DA:A6:8E:32:FA:84:7C:9F
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0E09CB6756A3CE7D5FB88A280BE79E8473EB163E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a77a6d1-7b43-489c-8fb0-fbf9331dca6f.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.72.0.0/13 maxlen: 13
Validation: Failed, certificate revoked on Mon 13 Jan 2025 23:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:09:cb:67:56:a3:ce:7d:5f:b8:8a:28:0b:e7:9e:84:73:eb:16:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7f:02:f2:71:96:99:36:46:93:82:63:d9:5c:
91:9a:e5:23:ef:76:92:2b:1b:7a:d8:93:7c:fd:89:
da:0b:44:32:44:9d:5b:44:8f:f2:d4:ca:da:84:7f:
1f:32:f3:a5:46:33:78:0c:e2:11:6f:34:1c:b8:21:
76:75:15:09:05:e7:7f:29:98:a2:15:a2:61:0d:39:
45:d3:4d:3f:32:92:16:e5:91:73:6a:1c:15:a3:55:
ef:ed:a8:33:7e:dc:1f:2a:81:f3:3a:d4:25:77:5a:
37:f8:33:5e:11:9f:eb:cf:8f:88:29:cf:04:79:84:
79:5c:eb:dd:a1:75:5c:64:de:23:73:8e:9d:c1:a8:
4d:32:9b:9a:45:f0:c3:00:ac:2c:d7:16:66:45:02:
bd:a6:02:bf:60:f2:01:aa:63:d7:18:91:2a:c9:5b:
fc:99:5d:47:3a:f0:db:54:68:6d:40:ed:bb:07:65:
2f:68:53:28:77:d6:87:74:98:0b:2c:12:5f:46:f9:
ce:ea:a4:b7:f6:2f:0c:54:4f:5a:9d:60:72:67:23:
5f:65:de:d1:a7:d5:12:48:e0:e4:57:c5:33:96:4a:
dc:e4:99:89:ca:ad:6c:f6:67:4e:83:77:9b:0b:e6:
fd:d3:79:3b:e6:d3:e5:7f:07:45:87:90:88:09:81:
47:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D2:BF:82:E5:38:97:EA:7F:B2:B6:CC:DA:A6:8E:32:FA:84:7C:9F
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a77a6d1-7b43-489c-8fb0-fbf9331dca6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.72.0.0/13
Signature Algorithm: sha256WithRSAEncryption
ad:ee:06:a9:7a:10:67:c1:c6:b7:f2:96:53:9f:15:9c:ab:56:
d4:c0:b5:a7:7a:0b:a6:22:79:bf:2b:e1:0d:79:e8:78:4f:24:
dc:2f:65:fd:47:fd:13:95:8d:85:83:36:71:2b:ef:a8:01:e1:
ff:7a:7d:1c:e5:f2:12:98:a3:cc:8b:58:32:c1:e2:d8:55:7d:
b4:d6:25:eb:7e:e2:16:75:ec:ad:c2:c9:bd:f8:07:0d:52:24:
df:1b:74:85:de:97:f8:e2:0b:a0:04:13:94:ed:46:dc:1c:ee:
7d:44:6e:86:f6:77:0f:b3:6a:b2:5a:b3:72:6c:e7:2f:28:fe:
5a:04:f8:72:82:aa:af:d7:74:c3:32:f4:ec:d3:1d:8d:d0:7d:
0a:7e:f6:bd:7e:2b:7d:83:f8:a3:8a:59:9c:e9:bf:d1:be:7f:
25:b9:0f:90:08:f4:2b:36:c3:07:09:dc:1a:2a:19:61:eb:d2:
84:8c:a8:c8:22:6f:17:cd:1f:65:c1:f7:39:2a:34:c0:b3:da:
89:9c:8c:17:5e:04:32:bb:5b:e9:c5:e5:9a:b6:b5:b5:ab:35:
7f:5e:63:8d:25:77:c1:8a:be:7a:e9:7a:8e:c8:a8:4b:2f:76:
5b:1b:ea:d1:d4:45:7c:29:45:df:5b:f2:02:e1:f5:05:76:3c:
0f:1d:03:0d
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUDgnLZ1ajzn1fuIooC+eehHPrFj4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A5NTExNzI2OWFjNTA5MDk3OTA4YjdlZDI1NzZlOTE4ZTlk
NWU4YWZiNjBmMzM5ZmRlZGI2MWRhMmZjNzU1ZTVhMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQChfwLycZaZNkaTgmPZXJGa5SPvdpIrG3rYk3z9idoLRDJE
nVtEj/LUytqEfx8y86VGM3gM4hFvNBy4IXZ1FQkF538pmKIVomENOUXTTT8ykhbl
kXNqHBWjVe/tqDN+3B8qgfM61CV3Wjf4M14Rn+vPj4gpzwR5hHlc692hdVxk3iNz
jp3BqE0ym5pF8MMArCzXFmZFAr2mAr9g8gGqY9cYkSrJW/yZXUc68NtUaG1A7bsH
ZS9oUyh31od0mAssEl9G+c7qpLf2LwxUT1qdYHJnI19l3tGn1RJI4ORXxTOWStzk
mYnKrWz2Z06Dd5sL5v3TeTvm0+V/B0WHkIgJgUd1AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUuNK/guU4l+p/srbM2qaOMvqEfJ8wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzlhNzdhNmQxLTdiNDMtNDg5Yy04ZmIwLWZiZjkzMzFkY2E2Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwM2SDANBgkqhkiG9w0BAQsFAAOCAQEAre4GqXoQZ8HGt/KWU58VnKtW1MC1
p3oLpiJ5vyvhDXnoeE8k3C9l/Uf9E5WNhYM2cSvvqAHh/3p9HOXyEpijzItYMsHi
2FV9tNYl637iFnXsrcLJvfgHDVIk3xt0hd6X+OILoAQTlO1G3BzufURuhvZ3D7Nq
slqzcmznLyj+WgT4coKqr9d0wzL07NMdjdB9Cn72vX4rfYP4o4pZnOm/0b5/JbkP
kAj0KzbDBwncGioZYevShIyoyCJvF80fZcH3OSo0wLPaiZyMF14EMrtb6cXlmra1
tas1f15jjSV3wYq+eul6jsioSy92Wxvq0dRFfClF31vyAuH1BXY8Dx0DDQ==
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:46:43 2025 by rpki-client