Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d6919a79-257b-4d69-ba94-143259161ed1.roa
File: d6919a79-257b-4d69-ba94-143259161ed1.roa (raw, json)
Hash identifier: 5C7Wo3DoYZuu6NYyRwc858SnZg+TxfDPhDpfG8bQ3QI=
Subject key identifier: BC:E1:EA:E3:A9:82:C5:FF:6E:59:D2:8F:50:60:53:86:4C:FA:82:21
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2B15D383DE37F20838D1443751217BDD62B721CF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d6919a79-257b-4d69-ba94-143259161ed1.roa
Signing time: Fri 31 Jan 2025 00:00:00 +0000
ROA not before: Fri 31 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.248.0.0/17 maxlen: 17
Validation: Failed, certificate revoked on Fri 31 Jan 2025 22:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:15:d3:83:de:37:f2:08:38:d1:44:37:51:21:7b:dd:62:b7:21:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 31 00:00:00 2025 GMT
Not After : Mar 7 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:40:92:a0:2e:99:4b:5b:d1:95:44:76:10:
27:b4:54:ae:a1:c8:97:e5:f4:a4:0a:c4:a9:35:bd:
f5:80:6c:db:58:25:71:aa:32:5a:14:31:d6:e9:a6:
f5:03:51:43:b3:94:7d:f3:a7:5b:06:d4:74:bd:7f:
7a:86:5a:c0:3e:d1:6e:aa:98:b8:57:47:34:73:61:
6c:63:eb:ea:36:48:6f:03:ce:84:a7:bb:bf:16:55:
6b:3d:12:60:23:b3:80:f9:aa:a2:d3:97:d2:61:b5:
e0:0b:61:dc:82:d6:70:f6:d8:00:01:a1:7f:f3:37:
7d:2e:ac:e6:c7:0b:36:74:d8:67:5f:50:d8:ee:d3:
01:d7:3e:69:20:a5:16:64:e0:1a:ac:d9:15:74:cc:
68:32:62:ed:62:b8:61:fb:6e:6c:96:80:7c:b5:e5:
a8:7b:57:d8:ff:98:54:3e:25:07:4c:3d:e8:c3:5d:
eb:c2:b9:95:2c:6d:c5:d1:8a:93:40:6b:24:13:e9:
15:3d:be:ca:bd:8d:8d:f6:97:15:d4:a3:84:85:ea:
a5:14:16:d9:47:23:f0:98:44:a3:4a:ab:ad:bc:de:
7d:ad:27:1b:47:a0:38:d2:56:0d:2c:88:37:6c:87:
36:4f:1c:f2:d0:dc:c9:a9:98:d9:7e:a3:0e:f0:cd:
3b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E1:EA:E3:A9:82:C5:FF:6E:59:D2:8F:50:60:53:86:4C:FA:82:21
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d6919a79-257b-4d69-ba94-143259161ed1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.248.0.0/17
Signature Algorithm: sha256WithRSAEncryption
ac:aa:bb:08:9f:04:93:85:a6:9e:90:73:29:5c:c9:59:90:0a:
de:18:a5:47:71:a2:04:bc:7a:da:9b:5c:e2:35:8f:19:bb:d8:
f7:df:79:4a:0f:fd:56:de:72:4d:e9:b2:9d:cd:cf:57:bf:9a:
ed:28:f0:c1:37:39:92:83:62:24:4e:01:f4:a4:6b:2b:0a:a1:
45:0d:52:7c:25:7c:2d:05:e3:cc:23:99:76:b4:80:88:6d:0a:
60:bd:12:40:d8:b5:00:9e:5b:81:b3:46:4b:01:84:ad:85:b1:
70:06:5a:df:3f:97:59:aa:56:33:6d:42:4e:05:7b:f9:11:97:
d1:19:39:b3:0f:6c:c3:e9:f6:65:6f:0c:32:04:53:e2:b6:c0:
21:5a:c8:b9:00:71:33:c1:d7:29:d8:ee:8b:c4:7f:ad:69:73:
47:3d:bc:c0:1b:99:06:b4:7d:e9:a1:55:7e:b2:49:90:51:06:
e2:c1:57:8c:25:8f:a5:48:72:98:8d:be:08:29:0a:b4:9a:fc:
9f:b3:22:26:82:80:ab:72:fa:88:51:1c:20:6a:a8:0a:55:03:
ad:1d:b8:98:9b:4a:da:0f:88:7d:e8:24:82:2c:4f:a0:09:b4:
69:60:b3:bc:f3:c6:f6:e4:9d:de:28:35:24:78:09:e7:1a:a4:
3c:30:54:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:50:11 2025 by rpki-client