Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ea6c57d7-3a13-4c3f-813d-b87af851cc0f.roa
File: ea6c57d7-3a13-4c3f-813d-b87af851cc0f.roa (raw, json)
Hash identifier: 2ggGJ0vuBjFbv/v2E9AZWI2QCGLvNo+TjaAFBPR8HlE=
Subject key identifier: 6F:FC:B0:AB:FB:AC:38:91:47:CD:A4:A8:5D:5F:2E:07:F5:EB:5B:C5
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 57F53E84A3AFF741AD4866CD1B6E90280D450B2C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ea6c57d7-3a13-4c3f-813d-b87af851cc0f.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 141.182.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 00:38:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:f5:3e:84:a3:af:f7:41:ad:48:66:cd:1b:6e:90:28:0d:45:0b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:9b:9c:73:37:73:3d:a2:34:9a:d6:97:e3:
6c:06:e1:ef:fa:05:74:7e:04:7e:06:57:a9:a1:4b:
f5:81:60:86:04:46:67:a8:2e:b5:93:67:ef:59:85:
01:53:82:69:e8:f8:c4:e4:ec:51:70:93:de:d6:50:
8a:a6:b4:05:43:70:7a:bc:78:a7:65:80:65:49:fc:
f1:61:00:12:75:21:d1:c0:c4:67:14:24:be:77:ba:
ce:8b:4b:c9:a3:59:04:51:aa:1b:27:9a:e2:14:ad:
d7:21:5c:b4:55:79:00:7b:01:03:47:b1:4b:31:83:
59:52:51:61:af:30:f0:bf:cc:84:7e:ad:a1:62:57:
c9:d1:d1:6b:ea:e2:a3:64:dc:f2:46:bb:47:57:5b:
54:d8:3d:03:9e:cd:4a:62:ce:f4:53:21:d7:53:5f:
57:17:86:77:17:c2:79:31:4c:96:85:7d:3d:ec:d1:
07:4a:ba:38:ae:ac:02:19:c2:c5:31:db:61:96:db:
86:df:9f:01:3d:a7:98:c0:19:c4:69:02:79:1b:2b:
12:56:4e:f4:8c:40:0e:f8:d6:d7:f4:be:02:4a:d8:
2d:76:86:c4:5b:99:0c:53:bb:5c:a8:a4:88:dd:7c:
ba:61:1c:86:19:fe:c3:d0:cd:7c:d4:c3:d0:26:b7:
b4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FC:B0:AB:FB:AC:38:91:47:CD:A4:A8:5D:5F:2E:07:F5:EB:5B:C5
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ea6c57d7-3a13-4c3f-813d-b87af851cc0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.182.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3c:59:69:50:54:07:14:be:ca:be:1c:65:e8:91:48:ff:30:cd:
0c:6f:db:2d:7a:c3:55:85:d1:c1:a6:58:ca:6c:3b:8c:f5:9d:
52:8f:0d:82:27:0d:8a:85:2b:b0:07:90:9a:da:32:89:35:e4:
29:2c:cc:f3:44:05:52:fd:73:f4:34:94:4c:6e:87:02:3f:d6:
44:83:77:e0:f7:bb:74:1d:d5:fb:81:e5:58:0a:04:b3:4f:d6:
e3:aa:c9:cd:56:27:f6:4c:8a:5c:f1:64:95:01:45:50:35:32:
10:7b:8f:ff:74:3d:a9:fa:15:91:19:40:fb:c2:96:2f:b8:a9:
76:11:13:3f:d7:ee:52:6d:8f:ed:34:b1:91:39:86:d1:95:ef:
90:67:57:cf:74:65:27:3f:53:0c:e4:5f:40:2e:81:17:08:56:
1e:73:b3:4e:8d:c2:73:6f:a7:8c:c6:95:22:51:65:6b:c5:11:
27:4b:82:5e:06:9e:ac:2e:b9:e9:1a:a6:97:ab:70:e1:c9:67:
78:a9:10:5a:cc:5f:47:56:74:67:a0:e2:1a:b3:03:fe:c9:8a:
d3:42:b0:48:1f:a1:f2:11:7c:c6:9f:f5:89:ca:40:f8:9e:43:
52:48:24:99:18:b6:c2:21:bf:ab:86:21:52:e8:51:81:12:ba:
db:d2:fd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:52 2025 by rpki-client