Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11ebd8de-8a88-4cc5-8c5c-bbcf3b7f2e87.roa
File: 11ebd8de-8a88-4cc5-8c5c-bbcf3b7f2e87.roa (raw, json)
Hash identifier: ngyvFTqDhiVjdZxHm01JEKBBsmdF1+QtD+pbIskdvOM=
Subject key identifier: 82:50:36:37:A9:8E:C5:0E:2B:5E:28:35:BD:99:21:61:AF:D1:39:27
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 70FC939CF7D0E095A02C2F8B11A7BCD39899936A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11ebd8de-8a88-4cc5-8c5c-bbcf3b7f2e87.roa
Signing time: Wed 26 Mar 2025 00:20:31 +0000
ROA not before: Wed 26 Mar 2025 00:20:31 +0000
ROA not after: Wed 30 Apr 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1ff4:8060::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 16 Apr 2025 19:08:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:fc:93:9c:f7:d0:e0:95:a0:2c:2f:8b:11:a7:bc:d3:98:99:93:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 26 00:20:31 2025 GMT
Not After : Apr 30 23:59:59 2025 GMT
Subject: serialNumber=3a10b19420558b595d4071c093d7018b6b95d06495c6f06d9fee919ddc70d048, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:a4:56:54:1b:2e:cf:54:1b:76:dc:0c:53:
05:8b:88:d7:a1:ce:05:0e:80:b5:21:b1:f4:f0:1c:
f9:66:45:b2:a8:94:64:6a:51:e4:23:0b:3f:63:8c:
c6:8e:d2:49:a2:48:04:81:05:f1:cc:6b:56:8a:ed:
31:04:77:ef:a0:6e:b0:82:3b:71:aa:45:2e:1d:16:
e1:31:2a:3e:e0:01:50:39:d9:c2:7d:2f:7f:3b:b8:
83:8e:80:26:f3:67:0d:e5:d6:79:a8:e2:ea:64:29:
c5:29:87:07:3a:70:ef:88:da:60:28:42:67:c0:2b:
d8:f8:b0:72:2b:98:e8:d8:55:ad:68:33:ff:3d:9b:
1b:46:63:bc:a6:3d:44:c1:f0:ce:21:f8:0b:73:a6:
2c:56:1c:dc:93:1f:08:f7:de:88:5a:66:74:50:1a:
16:a8:28:86:26:dc:1e:e4:2e:7b:37:45:28:42:ce:
cb:0a:f4:7e:49:69:3f:d5:b9:99:1f:68:6d:ed:0b:
8f:1e:94:36:06:5b:ed:21:b8:6d:99:7f:80:b1:b2:
0f:65:50:58:e4:42:30:e4:f3:3b:8d:05:7d:c5:dc:
c1:ae:92:58:9e:c8:74:66:59:03:a3:66:40:c7:c4:
74:09:6e:d4:0d:b8:3c:5c:3e:24:25:eb:84:f9:ab:
c2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:50:36:37:A9:8E:C5:0E:2B:5E:28:35:BD:99:21:61:AF:D1:39:27
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11ebd8de-8a88-4cc5-8c5c-bbcf3b7f2e87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff4:8060::/48
Signature Algorithm: sha256WithRSAEncryption
17:9d:a4:99:89:97:ed:5d:13:11:94:9d:c4:5c:71:90:e7:df:
b9:61:65:52:6c:dc:92:d3:b7:07:7f:38:59:9d:a7:b8:3d:12:
30:b3:1a:65:66:69:b9:59:15:6f:0d:7b:c2:85:5a:7b:0f:74:
49:ad:82:b9:3b:4b:c9:fe:5a:7b:ca:d1:1d:bc:4b:ce:c8:a3:
7c:b5:09:f7:4d:23:6e:03:46:a1:73:c7:c0:ed:ff:37:94:89:
0f:6a:71:a1:5f:da:c1:60:f8:11:a2:a2:78:e5:fb:cb:65:ef:
59:ad:24:3b:75:b8:7a:98:22:83:bf:b6:38:8a:2b:dc:10:6d:
9f:b9:ee:00:5c:bc:bf:37:12:95:cd:42:5c:3a:9d:1a:17:7d:
8e:ba:af:a6:cb:b7:b2:10:cd:ba:a7:db:27:f8:cf:93:c1:60:
1a:08:bd:0e:b8:8e:5b:f3:35:fc:06:8a:00:be:b0:81:32:32:
cf:e1:70:ea:3b:7a:95:6d:c1:49:bb:6b:f6:4a:94:50:d7:9d:
ea:8b:8a:b3:52:bb:46:72:03:24:96:f4:aa:4a:03:be:5a:d5:
29:d2:a6:bc:9d:37:8e:0e:57:94:0f:af:23:95:da:50:dd:75:
1d:4f:1a:a5:3e:1e:da:72:10:ce:d9:27:4e:64:3f:76:aa:90:
5f:7e:23:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:27 2025 by rpki-client