Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5aca8fcb-5064-4bbd-941c-bec886343cce.roa
File: 5aca8fcb-5064-4bbd-941c-bec886343cce.roa (raw, json)
Hash identifier: Rs7aF8cq9CWBlGfReosDr2eD7XRE7nGtvkgqqogQG2g=
Subject key identifier: 81:64:69:3C:03:A5:FF:F1:20:0B:83:65:28:7E:F8:5C:C6:35:28:45
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 15D290DB89D654963B82C400A2A3546C46B23AD6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5aca8fcb-5064-4bbd-941c-bec886343cce.roa
Signing time: Thu 17 Apr 2025 16:22:24 +0000
ROA not before: Thu 17 Apr 2025 16:22:24 +0000
ROA not after: Thu 22 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fee:a400::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 17 Apr 2025 20:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:d2:90:db:89:d6:54:96:3b:82:c4:00:a2:a3:54:6c:46:b2:3a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 17 16:22:24 2025 GMT
Not After : May 22 23:59:59 2025 GMT
Subject: serialNumber=a82e5ddf23e392a9ad214c07c34f8676d979a714ed541fde0fe8b9ff58aa2346, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:c3:2c:01:89:c6:6f:f4:e6:61:17:0a:bd:
14:b8:25:a8:78:d7:a0:01:fe:a1:d4:5f:a0:bc:30:
5f:7e:f0:5a:05:08:10:65:32:8e:17:60:a0:9e:03:
1b:82:75:ec:8e:57:a2:29:0f:a4:de:a3:71:bc:85:
ad:b7:2f:c7:92:89:d8:9f:0c:36:02:b8:4e:43:f3:
46:37:cc:34:c5:d0:20:47:ce:2f:84:43:32:e2:b7:
24:7c:78:d1:35:5c:35:30:fb:04:6b:11:e6:10:1d:
0a:ed:0d:2f:f7:4b:bb:fe:fc:4a:81:7f:1a:ba:f2:
1a:c8:58:41:be:42:18:c0:ea:04:a1:fe:75:54:6a:
07:83:0e:c8:91:7f:51:a8:9b:0c:f7:fb:b0:08:3a:
97:90:d1:0f:93:68:94:00:21:80:76:26:b9:3d:5d:
4e:4f:fc:63:8f:6a:8b:fc:29:c3:2d:57:3e:1c:e0:
c2:cf:21:be:60:47:93:83:54:44:fb:94:16:d6:6c:
4c:3b:16:5d:19:73:7b:56:2a:32:86:f9:57:6a:bf:
fc:37:9b:9d:1f:bb:37:e4:8d:76:44:9c:f4:41:ae:
a8:47:46:d7:fb:35:31:d3:6c:62:91:0f:38:71:1b:
2e:e3:c2:66:0b:2f:fb:69:9d:4a:58:e0:40:0b:e7:
f4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:64:69:3C:03:A5:FF:F1:20:0B:83:65:28:7E:F8:5C:C6:35:28:45
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5aca8fcb-5064-4bbd-941c-bec886343cce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fee:a400::/40
Signature Algorithm: sha256WithRSAEncryption
24:a2:a6:7e:b4:89:56:54:1f:a7:bb:52:27:50:97:49:cb:78:
1a:18:0c:1b:20:3e:ee:0e:09:72:f2:98:01:48:06:1f:9e:8e:
f0:52:b4:6a:f6:d8:6c:2b:ae:2d:7b:27:ad:e2:93:59:c9:c8:
f1:f6:0a:fb:7a:1e:ad:4a:62:5b:fa:7d:14:a4:66:44:3f:f7:
9d:6a:17:d7:0b:66:b7:64:c0:e7:68:56:f4:a5:60:09:9b:50:
75:2a:9a:ce:d0:56:0e:9b:26:ec:7d:93:35:fa:7b:bc:f9:47:
ef:39:c2:57:78:04:81:04:96:b9:56:95:b8:c6:0a:1f:85:09:
48:e0:e4:85:b4:a3:dd:7c:49:8f:87:81:a4:c9:f1:c0:e9:65:
b0:2d:dd:56:6d:2a:72:74:67:4a:b6:4e:51:a1:9b:11:bd:6c:
26:4c:cd:06:98:2f:ac:1d:ae:b2:27:8f:9d:f0:87:f1:eb:61:
9b:b4:43:e9:ec:57:14:d6:6e:50:40:c9:b1:8a:8c:49:ee:ab:
d8:00:bb:c4:5f:65:62:dc:79:32:18:7d:a6:26:a6:f6:a6:a9:
71:4f:90:ba:94:75:b9:4d:70:d8:89:27:b0:f4:74:ed:47:47:
96:4c:f4:82:02:3f:4a:96:09:71:2d:02:96:3f:f2:22:75:d7:
6d:26:c0:df
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:46:59 2025 by rpki-client