Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a44c7b1b-9011-4f70-b826-2870a89c908e.roa
File: a44c7b1b-9011-4f70-b826-2870a89c908e.roa (raw, json)
Hash identifier: 0LQYFizvSZ9+61kO1JdXG9CKHVOZkdPK1xZbccGj7qY=
Subject key identifier: C7:4A:BF:A2:39:12:19:FE:1B:7E:C6:19:E9:8A:56:53:2D:C5:29:26
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 04631E8D3933D1FF798EFCC6D8444DA7E15518ED
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a44c7b1b-9011-4f70-b826-2870a89c908e.roa
Signing time: Mon 14 Apr 2025 13:38:20 +0000
ROA not before: Mon 14 Apr 2025 13:38:20 +0000
ROA not after: Mon 19 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fee::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 14 Apr 2025 21:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:63:1e:8d:39:33:d1:ff:79:8e:fc:c6:d8:44:4d:a7:e1:55:18:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 14 13:38:20 2025 GMT
Not After : May 19 23:59:59 2025 GMT
Subject: serialNumber=fcaca37ddf2b0ee6314bb66dfd52a6a05386797a06c1e480174fc19e3dfcd27b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5b:06:ad:41:a5:a3:69:60:9b:bd:da:4e:5d:
24:5c:62:54:47:96:bf:7f:f0:aa:ce:66:7e:5c:5d:
e5:82:01:2a:6e:02:60:8e:4a:dc:ca:60:66:f0:38:
4d:ec:f1:9d:d0:2e:b5:a9:8e:e2:aa:75:c4:39:9b:
17:db:2c:1b:0b:a1:71:15:7f:40:49:e9:70:56:ce:
03:8c:ef:f6:d3:6f:85:38:e8:51:5a:2d:2c:37:55:
09:75:db:4b:98:64:c1:c5:48:e0:67:40:a0:df:5b:
eb:70:44:01:4a:57:d2:00:0f:0c:33:1c:f8:22:4a:
a4:bf:7c:82:e2:f9:0d:ca:ef:2e:18:4e:ae:d5:dc:
a6:46:96:10:a5:ea:6c:c3:e9:f9:57:59:63:88:15:
0e:6d:88:91:0c:2c:12:ed:e2:f7:41:6a:27:41:24:
8f:66:e3:06:22:60:bf:d2:7e:14:a1:49:64:8d:50:
be:b9:ab:2a:7f:c5:4f:64:65:15:e0:55:b8:f2:7c:
56:b9:a6:1b:8a:48:3d:ad:9c:53:c5:ea:a9:1d:37:
85:05:5f:16:c3:d7:e1:48:b8:a0:73:76:05:76:29:
72:44:5a:8c:19:01:22:84:27:00:19:59:0f:1e:cf:
a3:59:71:18:e1:de:6f:43:23:64:01:de:c7:ba:96:
84:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4A:BF:A2:39:12:19:FE:1B:7E:C6:19:E9:8A:56:53:2D:C5:29:26
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a44c7b1b-9011-4f70-b826-2870a89c908e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fee::/32
Signature Algorithm: sha256WithRSAEncryption
c8:31:0b:77:0c:3e:8f:4a:13:eb:f5:4a:66:9a:af:ce:04:3f:
6c:83:77:99:21:a5:8f:67:3a:41:41:58:6d:bf:f3:85:2e:ba:
a7:54:b4:82:7b:b6:2f:80:c1:f6:20:08:ff:c4:01:d0:da:cc:
f6:4e:14:0e:98:69:e5:d1:85:b4:44:8c:b8:88:5c:af:1c:8b:
49:84:47:62:de:d9:a6:ef:c3:15:d2:3c:71:99:bb:bf:e8:7e:
25:c2:b3:6a:45:76:00:4e:ce:1c:c6:80:fd:88:31:b1:d5:b2:
dc:86:50:4f:1b:b5:c9:67:9f:87:ab:e0:d6:59:18:5f:0e:f6:
9f:76:88:06:e5:6a:55:ca:21:c3:c6:0e:2b:ad:3e:81:fc:80:
8c:21:7f:f9:58:57:57:82:85:bb:b7:00:fa:a8:68:a4:5e:56:
0c:f7:b0:0c:65:fb:ee:a4:0b:68:13:f8:41:27:c6:b8:d0:cf:
53:17:db:f7:ad:9a:cd:a0:38:03:a8:84:2b:3c:92:39:6a:fd:
b6:17:10:a5:09:69:72:e4:7a:9d:80:a5:29:82:1e:68:a0:ce:
16:16:ae:1a:42:24:aa:35:7a:d7:ec:40:df:b2:58:ef:39:91:
8a:b1:57:12:e1:ef:e6:f1:f7:4a:7f:b8:5e:7c:54:7c:00:88:
ce:24:de:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:07:51 2025 by rpki-client