Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b285cc59-dc9a-40fc-9368-00dbcd3ea1ac.roa
File: b285cc59-dc9a-40fc-9368-00dbcd3ea1ac.roa (raw, json)
Hash identifier: xaBBooIN1jKvN1GaXyTq2yUPWOgp42C8d/umeft7vgU=
Subject key identifier: 62:60:2A:EB:72:04:6C:21:56:D2:A5:0B:86:3E:47:DC:E4:6D:B4:0F
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 365796D25CE354BC59DFB4BC903F2E7C11EC3B5D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b285cc59-dc9a-40fc-9368-00dbcd3ea1ac.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 167.166.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 20:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:57:96:d2:5c:e3:54:bc:59:df:b4:bc:90:3f:2e:7c:11:ec:3b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:df:47:c9:d7:87:e6:82:77:55:5f:3a:06:97:
fa:9d:f8:a5:90:41:0e:28:4d:83:be:75:7f:ba:70:
0f:60:9d:29:00:5a:fb:41:bf:b5:dc:d1:cf:47:a3:
0a:08:56:96:86:00:82:6f:cd:ad:95:2a:5f:c6:26:
1a:47:b2:bd:d1:a4:bd:5e:38:53:6f:87:36:82:91:
dd:01:7e:ca:d2:79:5b:1c:f6:5b:57:fb:2f:17:62:
06:03:b0:7e:fe:ed:f9:c8:d6:c0:69:50:90:90:e5:
c7:94:81:3e:41:36:30:ba:e8:00:7a:73:bd:76:f6:
f2:6c:b7:45:d7:96:36:f1:42:95:03:ad:5d:3d:1a:
bc:42:e0:92:23:f2:45:c0:dc:20:cf:5e:a0:63:75:
22:e9:71:a1:43:ba:f1:41:51:e4:81:e9:3c:a3:b1:
e6:0a:f3:1c:e8:f7:69:c2:af:57:3d:25:04:06:99:
30:4d:e7:b5:fc:f4:52:c5:67:d9:d6:88:07:ff:2b:
f6:4e:9d:1c:ff:26:47:01:d3:1b:31:3c:4f:df:8d:
b5:66:db:cb:2d:25:fd:85:94:91:f1:6b:dd:95:9b:
98:4b:a6:8c:ad:f4:6d:30:72:12:68:15:26:4d:9d:
30:f3:cd:1e:c4:90:71:91:9f:56:4c:e3:f9:32:93:
d6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:60:2A:EB:72:04:6C:21:56:D2:A5:0B:86:3E:47:DC:E4:6D:B4:0F
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b285cc59-dc9a-40fc-9368-00dbcd3ea1ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.166.0.0/16
Signature Algorithm: sha256WithRSAEncryption
49:ac:a1:fb:70:46:d4:86:33:4c:5e:52:bd:4b:19:e2:72:20:
48:86:22:3d:3c:37:ce:12:fe:bc:de:af:62:c8:aa:00:4f:2a:
7e:cc:ba:21:cf:1f:1a:a9:40:f1:c8:96:8b:02:f5:cf:5f:98:
31:e4:eb:39:d9:a7:9a:49:19:d7:7a:69:8e:c3:3d:9b:3e:51:
90:ab:7b:09:39:fb:ac:28:ca:19:6d:2a:f2:b9:3a:cf:bb:8e:
1e:73:20:ab:04:56:21:d6:e4:85:02:9f:87:df:3d:d2:5b:1a:
dc:1c:57:6e:8a:d1:67:a4:dd:89:84:32:f9:46:7d:df:ce:55:
18:58:4d:42:4d:d4:13:d5:2c:6e:1c:da:2a:26:22:cd:10:52:
81:04:d2:4b:81:47:a0:5f:da:3f:f2:23:4e:45:1b:b5:fa:04:
50:fe:e9:85:ce:fc:e3:43:a7:97:e0:69:d2:9b:ca:99:ab:e7:
51:9e:6c:8a:d3:16:30:46:40:6f:ba:24:aa:92:02:d0:db:01:
de:3f:d4:c8:89:06:04:c3:50:e6:98:c0:aa:a3:6b:5a:4e:35:
22:6c:1b:6e:5e:65:f9:43:24:c6:38:a5:e5:0f:99:5e:73:5d:
ae:54:59:bb:bf:7c:80:8c:0b:3b:79:ab:a2:cf:67:2f:51:05:
26:95:5f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:54 2025 by rpki-client