Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f45b3999-d7eb-455f-9f33-69b0a5d3115c.roa
File: f45b3999-d7eb-455f-9f33-69b0a5d3115c.roa (raw, json)
Hash identifier: JhqI6NXcRPkvd4znWWlxCFwbuvg+nQjdaw33JNnz7QI=
Subject key identifier: 6E:05:90:1C:C1:9A:1C:52:C5:77:01:E1:9A:64:E3:65:20:0D:EC:77
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7489C8E31BF2C056AED65963FF54CF61C56171F6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f45b3999-d7eb-455f-9f33-69b0a5d3115c.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 15.198.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Jan 2025 17:38:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:89:c8:e3:1b:f2:c0:56:ae:d6:59:63:ff:54:cf:61:c5:61:71:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9f:02:ec:00:ab:e0:ad:de:cd:73:38:0f:15:
46:21:f6:17:e4:a1:dd:ac:26:44:56:44:3d:48:e8:
fb:d2:6a:71:11:f5:fd:9e:a2:de:e6:78:24:33:1d:
4c:15:48:7b:2a:30:58:75:00:1a:bd:5f:f4:9e:3a:
54:0b:09:b8:9a:c6:82:8c:2b:a4:f9:cc:76:07:75:
08:d1:ec:4a:bc:86:44:2a:12:6f:e5:2f:4a:b9:6c:
e5:a0:6c:23:18:5c:60:59:82:42:7e:22:ba:fb:33:
9f:0c:ad:35:bd:7a:3f:cb:5d:b5:85:5f:00:6c:2f:
62:0e:5b:80:9f:99:05:2b:7a:8b:eb:d7:f4:f7:a6:
f0:1f:41:ab:23:5d:1d:a8:cd:b2:32:5a:62:1c:c5:
2d:2c:e5:0d:dd:16:4f:ed:52:64:97:fe:b8:4c:3d:
05:ae:b1:ac:ed:35:3a:cc:e6:cf:8a:4e:59:95:ad:
ab:24:de:50:18:b6:eb:60:ff:92:4d:a2:5f:cc:51:
08:45:2f:23:20:2b:84:50:5b:b9:8f:6e:35:7f:89:
1b:09:f2:71:11:03:d5:60:00:71:c1:20:82:a5:d3:
dd:60:2b:31:00:4e:69:dc:0b:9a:cc:45:40:8e:61:
70:51:93:30:66:19:d3:31:df:ba:7f:4d:ac:5a:bb:
f2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:05:90:1C:C1:9A:1C:52:C5:77:01:E1:9A:64:E3:65:20:0D:EC:77
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f45b3999-d7eb-455f-9f33-69b0a5d3115c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.198.0.0/16
Signature Algorithm: sha256WithRSAEncryption
23:30:79:13:a1:88:b6:50:00:ad:fa:55:b4:91:b6:34:74:1d:
18:0b:e1:46:c0:30:85:df:bf:d3:02:ce:43:71:0c:18:1a:f5:
6f:0d:f2:d7:a0:f3:c9:10:4f:ff:00:b4:ae:31:d4:d6:ef:f1:
46:db:79:bf:13:53:f6:74:6a:28:47:c1:5d:4c:04:79:a8:78:
f5:31:87:1c:af:f0:ce:75:48:65:f7:e7:68:c3:ee:a8:57:84:
38:dd:da:83:93:a1:ea:75:b2:ba:64:80:45:01:28:d0:36:2f:
a0:46:1d:6e:09:51:16:ca:d0:d0:9b:de:60:45:d1:ad:76:dd:
c0:30:75:b3:19:05:59:7a:c4:16:2e:05:19:59:43:a1:f3:e0:
16:1f:67:1e:0d:fa:45:67:d8:47:ea:88:32:40:38:db:51:7c:
f6:7b:a4:7f:74:f9:e2:a9:ef:39:16:8a:5f:82:30:4e:9a:d1:
f3:77:66:63:12:3f:81:37:02:99:5c:74:91:12:29:4b:4a:76:
5c:1d:30:61:f6:64:d4:4b:02:7a:a2:3c:db:37:5f:e5:c3:3c:
48:88:ec:57:fb:37:5f:19:24:7b:0a:10:b0:46:e7:c2:7c:da:
84:b9:af:9b:89:53:9b:5e:44:1f:8e:d0:80:65:72:1a:e1:8f:
63:6f:78:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:23 2025 by rpki-client