Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b08faab0-434e-4619-ae87-c0f5b56ba894.roa
File: b08faab0-434e-4619-ae87-c0f5b56ba894.roa (raw, json)
Hash identifier: 7p6tDKJAaIrug4RRvKellei4YyHn9k/T9635kyd4a2w=
Subject key identifier: 7D:85:EF:FC:EC:40:BB:E5:83:EF:C6:7A:21:8E:3A:40:AC:AE:4C:F2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2510A61F9B40A8C2483148C85B1B26B4DE92D08D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b08faab0-434e-4619-ae87-c0f5b56ba894.roa
Signing time: Thu 17 Apr 2025 16:22:24 +0000
ROA not before: Thu 17 Apr 2025 16:22:24 +0000
ROA not after: Thu 22 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fee:c000::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 17 Apr 2025 20:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:10:a6:1f:9b:40:a8:c2:48:31:48:c8:5b:1b:26:b4:de:92:d0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 17 16:22:24 2025 GMT
Not After : May 22 23:59:59 2025 GMT
Subject: serialNumber=699ea08b93bd78cb65adaf045b0bdec41e2a23f7aed3868cba0e7fd27568f375, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:78:42:ee:1f:cf:3e:85:29:76:74:4c:50:1a:
b1:6b:41:2e:5b:ce:72:31:95:e0:95:18:cb:e0:c5:
3a:9b:89:60:3c:a2:6c:0e:f1:f6:74:d2:2b:41:a6:
93:74:f3:77:50:62:b7:03:a1:72:34:bf:ea:2c:86:
db:72:b1:6e:d0:74:0b:a0:83:3b:d0:4a:66:aa:f3:
f6:2b:98:ae:b8:c8:89:87:3c:db:4f:62:22:c9:49:
31:67:97:63:3e:df:7c:a1:8c:5a:00:4c:9a:74:26:
68:45:f1:60:1d:99:c6:21:d9:9f:ef:8d:e9:4d:ff:
38:23:5c:9a:70:4c:04:4c:24:45:2e:84:cf:19:06:
34:36:bb:e9:d3:4a:1c:8b:3c:34:f6:3b:d9:d1:7f:
c8:e0:2b:eb:ad:dd:aa:fb:e6:b0:d9:8d:cf:43:ed:
a8:10:e8:44:49:24:2d:c0:6f:b8:31:a0:9d:5c:a9:
88:6b:f9:01:b8:e2:fe:74:74:f3:9c:02:6d:f9:75:
bd:48:50:94:16:8e:aa:07:63:87:7a:16:f6:cc:80:
7c:b4:5a:25:bb:78:15:81:79:8a:5d:ea:10:b0:d0:
f6:ca:ff:57:f3:52:03:53:6f:af:50:39:b6:58:a8:
91:6d:d1:c5:bb:e8:f5:b5:0c:47:64:bd:55:b3:2d:
5c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:85:EF:FC:EC:40:BB:E5:83:EF:C6:7A:21:8E:3A:40:AC:AE:4C:F2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b08faab0-434e-4619-ae87-c0f5b56ba894.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fee:c000::/40
Signature Algorithm: sha256WithRSAEncryption
9f:b6:a0:0d:4b:01:52:09:f1:ea:38:af:b1:fe:e9:08:27:e2:
db:f9:45:b4:33:14:0c:e0:6b:76:dc:7a:54:4d:4d:6e:92:85:
58:67:4f:99:6e:df:a2:3d:f1:5c:00:ec:aa:96:a1:87:05:f1:
28:83:fb:12:42:cd:46:41:e3:3e:83:e8:65:af:8c:55:84:4f:
18:69:0c:7b:c2:54:1e:f0:0a:a8:3b:2a:05:f8:77:55:61:67:
5d:0c:82:47:56:45:a3:ef:2d:57:8d:7b:41:4d:a0:8e:1f:aa:
d3:bc:65:f1:9f:4a:cf:d7:bb:6b:50:3e:7d:e8:08:ff:4f:d2:
cc:f5:3e:85:4c:f0:c9:6a:2f:7e:1a:67:a4:85:0d:8a:45:d9:
06:8e:66:0c:29:54:17:8c:fa:ee:e9:e9:80:12:9f:b3:d5:24:
6f:8c:b1:42:3a:e5:a1:5e:36:46:36:78:62:ca:82:36:2f:a3:
86:3c:fb:c2:5f:fa:be:4b:9b:b3:38:16:e7:7f:ae:b1:68:6a:
8e:aa:ee:96:7b:38:6e:91:a9:31:af:b0:4f:af:54:7b:7b:7c:
52:f6:ea:e9:7c:c1:f9:f9:0b:7a:82:51:59:b1:db:1c:11:d5:
a6:56:4c:cc:fa:32:05:9a:5a:36:50:5e:f4:24:f9:72:43:38:
90:1b:13:20
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:27:12 2025 by rpki-client