Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/681461cd-38a5-4748-964f-6e5a05104871.roa
File: 681461cd-38a5-4748-964f-6e5a05104871.roa (raw, json)
Hash identifier: 5RyglQv/6mSHdAicdD9qPbZaOYAYb8ovbni0FWhbU5M=
Subject key identifier: 68:5A:0E:73:7B:AF:43:F1:F5:76:10:19:2C:2F:3C:B5:67:C3:D0:13
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6664517A052654A23C6EB4A0DAD784B88345450C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/681461cd-38a5-4748-964f-6e5a05104871.roa
Signing time: Thu 22 May 2025 01:06:55 +0000
ROA not before: Thu 22 May 2025 01:06:55 +0000
ROA not after: Thu 26 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fb9:5040::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 20:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:64:51:7a:05:26:54:a2:3c:6e:b4:a0:da:d7:84:b8:83:45:45:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 22 01:06:55 2025 GMT
Not After : Jun 26 23:59:59 2025 GMT
Subject: serialNumber=8f6088b05a1b7ceab90093463b05c543e7839f0c2eafd8842901d44db6d814f4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:88:3d:3e:6f:7d:7c:d5:86:c4:ac:91:9b:ed:
e2:46:26:e1:2a:a7:08:94:82:ea:27:01:f6:fb:c5:
b9:7c:99:15:92:fa:21:cc:9b:71:d5:1f:7d:12:86:
3b:90:e6:89:33:6a:76:17:79:17:68:89:dc:f8:1b:
18:cb:d8:5f:ca:5d:79:c9:b6:a1:47:ab:b6:e4:02:
8e:26:dc:59:9d:57:d0:03:38:97:23:13:04:be:b2:
b9:03:d5:e9:95:51:c5:52:b5:2b:de:67:f4:5a:c1:
c8:1f:30:66:bc:4b:2b:76:fe:13:59:47:82:12:9f:
c4:89:ee:9c:70:ca:02:0b:76:9f:32:37:34:2d:f4:
da:bb:33:ab:76:3e:68:51:94:a1:61:90:fe:ea:90:
51:2f:ab:14:f9:fb:a0:ae:50:b4:e3:d3:2d:ad:27:
85:86:13:d0:b6:50:be:1f:eb:48:53:f5:20:ca:b7:
7b:94:eb:2c:96:00:18:df:a3:74:25:37:ce:40:c3:
25:79:1f:4e:50:88:19:a4:73:79:7d:3b:f4:59:70:
cb:b9:0e:a8:98:d3:c3:1a:62:66:a4:a9:b3:3a:04:
03:96:85:db:85:f2:68:c4:64:6e:b1:17:eb:02:f4:
7e:6d:1a:42:d9:b6:e7:37:32:82:f4:fd:e1:8c:d2:
9d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5A:0E:73:7B:AF:43:F1:F5:76:10:19:2C:2F:3C:B5:67:C3:D0:13
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/681461cd-38a5-4748-964f-6e5a05104871.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fb9:5040::/48
Signature Algorithm: sha256WithRSAEncryption
40:65:f6:37:92:dd:09:bd:89:87:61:c1:7c:97:6c:9e:65:d7:
a1:5f:eb:32:cb:85:be:ad:8c:a9:be:55:49:a2:8e:1d:20:ae:
a2:fb:e0:52:59:95:54:be:d4:98:61:fb:34:95:74:a4:53:8e:
54:32:20:78:0b:8c:92:3f:d2:76:13:4c:2d:86:32:b6:e1:15:
aa:3b:3b:15:5c:39:85:4d:bb:da:f2:9a:aa:20:b9:0b:98:9c:
af:78:12:50:75:34:0e:44:d4:5d:7a:a1:86:87:35:03:96:d3:
6d:98:ac:f8:85:be:18:90:fa:c4:b2:4b:dd:03:ba:1f:7f:34:
c6:c8:53:bb:0e:ad:b8:64:8d:00:20:69:ed:fd:45:d6:08:ed:
0d:12:8c:9e:aa:a0:7b:8d:8d:2b:fe:fc:6b:c6:6b:0e:3d:04:
98:39:a8:6c:67:f1:e6:82:90:30:60:b8:29:0c:e6:d8:07:23:
e4:5b:e5:5a:7b:fc:68:8e:fe:a7:d6:25:b1:4d:28:20:a4:f7:
7b:d4:29:5f:4e:bd:cb:93:ef:75:d9:9b:f2:0c:82:7f:88:34:
fa:6e:23:a5:58:e5:c4:85:b0:d4:ec:bd:63:2b:27:0f:c4:46:
c7:0d:14:4d:0f:02:8b:46:a3:32:c1:4c:c9:3b:76:fb:4d:1c:
97:64:3d:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 20 10:54:39 2025 by rpki-client