Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a3c3a7bd-c001-4ee0-ac11-38c2c189549b.roa
File: a3c3a7bd-c001-4ee0-ac11-38c2c189549b.roa (raw, json)
Hash identifier: 7j5gIl9sSJuttA+BY2tM+hERiTm0GyfFSpNJZP0upTI=
Subject key identifier: 56:F2:0A:B1:51:99:DA:22:DC:24:8C:02:B1:45:40:BC:06:15:9A:B4
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 78421A13DCB2590AF8B5BF7FA3E576544737C1CB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a3c3a7bd-c001-4ee0-ac11-38c2c189549b.roa
Signing time: Fri 31 Jan 2025 00:00:00 +0000
ROA not before: Fri 31 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Mar 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.234.0.0/15 maxlen: 15
Validation: Failed, certificate revoked on Fri 31 Jan 2025 20:21:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:42:1a:13:dc:b2:59:0a:f8:b5:bf:7f:a3:e5:76:54:47:37:c1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 31 00:00:00 2025 GMT
Not After : Mar 7 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1a:34:1b:54:7b:ce:72:b5:1d:fc:70:ce:53:
0f:86:20:fc:21:69:20:c4:90:d3:de:7b:1f:f9:27:
c7:47:94:f8:45:72:ca:11:86:a5:ec:d6:16:9c:0d:
2d:22:a6:6d:3e:76:b2:59:2b:96:65:52:3a:7e:21:
e4:3d:60:a3:80:ad:23:f6:a2:4e:28:1e:eb:a5:05:
3e:62:be:47:18:2e:8e:08:e4:5e:78:f9:94:7e:f9:
3f:ba:49:6a:9e:95:94:45:f8:7a:2c:31:8c:3f:32:
04:46:e5:87:98:e9:85:10:3d:77:3e:35:fb:54:63:
8a:ad:4d:c4:2a:09:83:64:30:b2:0b:c7:3f:25:c6:
92:f4:14:09:25:72:ab:8b:ef:b9:0e:c5:f3:fa:e4:
74:e9:04:d4:c1:1e:30:39:90:2d:6c:2b:7c:36:6b:
3d:6b:cf:93:74:7f:f7:d7:13:a8:17:11:d4:30:f2:
67:26:d9:fc:c1:70:66:bc:6c:42:03:47:37:f0:1e:
81:49:9d:e8:80:44:a5:ec:62:6a:6e:27:ad:be:95:
c5:be:04:50:d6:40:f5:5a:7d:bc:37:d0:dc:50:8b:
2e:12:74:11:78:46:bf:75:1f:73:cd:41:d5:31:10:
b6:d1:2a:1d:e3:4f:5e:a3:5b:7b:0c:d1:2e:3a:0a:
f6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F2:0A:B1:51:99:DA:22:DC:24:8C:02:B1:45:40:BC:06:15:9A:B4
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a3c3a7bd-c001-4ee0-ac11-38c2c189549b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.234.0.0/15
Signature Algorithm: sha256WithRSAEncryption
8c:30:41:1f:cb:05:bb:b7:6a:04:f7:09:f0:43:55:72:df:89:
d4:97:24:6d:92:68:4f:3d:37:77:85:25:0c:6d:d9:ab:a6:ab:
2b:d8:d0:2a:50:23:3e:e0:45:ec:93:01:55:de:e5:a8:08:e2:
6a:9f:55:a4:55:f3:06:d1:29:fa:69:a8:79:a9:8a:f8:16:76:
40:b7:6e:90:fe:81:46:39:6d:b0:7b:67:cf:a1:cd:3e:bf:48:
e2:f9:82:0f:68:e6:50:f8:27:4c:64:d7:1d:12:b0:a2:54:2f:
34:25:38:cd:31:56:4b:2c:3a:03:16:8e:65:a0:03:c0:99:ed:
00:51:41:50:c5:fc:ec:e9:22:b6:68:fd:47:41:9b:17:2b:ed:
16:fe:ae:41:2c:fd:dd:49:73:de:41:e3:44:86:0b:e5:29:fb:
51:ff:80:ad:ef:cc:c3:7a:d0:05:b6:8e:17:f5:28:54:d6:6a:
fb:f5:8d:b3:72:4e:9c:55:b8:a0:ec:b2:9d:e9:16:54:5e:0d:
00:28:2a:d4:1f:d7:26:a7:12:a2:4d:f0:05:8e:80:30:b8:55:
ee:84:38:68:1e:e5:61:ce:07:88:2c:38:f6:bc:8d:fc:fd:76:
da:9f:07:64:24:2d:c7:19:6f:60:83:f6:51:90:48:4c:f1:c2:
77:5c:40:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:44 2025 by rpki-client