Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e000130d-d6aa-4e62-abe6-5cdcccef2ccd.roa
File: e000130d-d6aa-4e62-abe6-5cdcccef2ccd.roa (raw, json)
Hash identifier: Urlv2kENcNAPyZFW/JluKANzy7+PmHhIq/SnaJwzkUg=
Subject key identifier: 30:DC:EC:6F:30:CC:06:D6:A0:FE:E8:1B:98:0E:D0:A1:BA:64:76:58
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3D0121129512DCCA1DB227A902A42D879FAD5F73
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e000130d-d6aa-4e62-abe6-5cdcccef2ccd.roa
Signing time: Tue 20 May 2025 00:11:00 +0000
ROA not before: Tue 20 May 2025 00:11:00 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 110.238.2.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 16:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:01:21:12:95:12:dc:ca:1d:b2:27:a9:02:a4:2d:87:9f:ad:5f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 20 00:11:00 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=ec1ca9d32fb68de787d140e4beee29b1ab586d524aa48f15a76932c1b5ed729f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:70:ff:2e:4a:a6:19:ad:c0:ed:f4:de:46:61:
02:fc:e2:24:65:23:e0:0f:72:77:61:fb:67:b2:9e:
4e:60:5d:90:9d:e8:6a:77:0e:ba:b7:94:16:54:bb:
c7:d5:7f:f4:2b:43:37:12:6d:42:5b:ec:f3:e2:1a:
3c:2d:f9:64:e8:49:44:1c:8b:f0:d3:0e:ab:1e:fd:
9f:c8:c3:87:82:a2:12:ad:3f:a5:25:82:ea:7e:43:
9c:63:2d:9b:b6:75:60:6b:0b:67:d7:ee:66:11:6d:
cb:c9:66:13:e7:1f:e9:fe:a2:93:0c:f2:bc:c0:4b:
67:e7:24:2e:9e:be:4a:23:cc:69:cc:cb:ba:e0:43:
b8:ad:c9:f0:f8:ec:fe:e6:ab:69:6e:e6:3f:cb:bc:
f4:89:5b:f0:a1:57:af:36:1e:80:d3:85:24:1a:59:
3f:93:46:67:d3:6d:b2:02:0f:5f:c9:c5:bb:d4:db:
bc:ae:73:b4:5a:5c:6f:be:3b:b1:cf:ef:b5:bc:1d:
a6:88:39:34:6d:6c:01:81:1d:85:97:c5:e8:86:ff:
ac:4c:2f:b7:18:33:14:73:4b:e9:d5:f7:13:90:d4:
84:7a:eb:ad:26:5a:b0:b0:96:37:56:6a:70:d2:50:
cc:bf:3d:49:39:0a:c2:38:cf:43:5c:b1:3d:1f:01:
63:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DC:EC:6F:30:CC:06:D6:A0:FE:E8:1B:98:0E:D0:A1:BA:64:76:58
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e000130d-d6aa-4e62-abe6-5cdcccef2ccd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.238.2.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:d0:55:ec:6b:ab:55:5c:28:7e:57:4e:d1:3a:3b:da:96:60:
77:f5:25:f2:87:f6:a9:7f:ba:d9:aa:ae:b0:ae:90:e0:17:be:
50:79:45:4c:79:d7:7f:48:21:67:5a:86:58:e5:3a:a9:7c:13:
05:d9:17:d8:29:ec:1d:da:b6:f7:22:68:c9:ff:a8:ee:5c:6b:
dd:7f:ec:ba:f1:aa:25:1a:07:70:e2:48:1c:5f:91:36:e0:da:
c2:7e:ba:be:be:b7:0a:c9:e7:28:f3:8c:d1:30:56:c3:dc:f6:
19:eb:c4:ba:a3:80:9c:88:37:ce:08:aa:be:9c:e1:4c:3e:3b:
00:68:65:74:23:35:81:e8:55:ad:29:1c:24:97:19:0a:5b:35:
eb:60:0e:93:63:99:4a:6d:3d:84:1a:37:e6:f2:82:2e:a1:a6:
15:c7:f4:64:21:90:97:89:dd:74:d3:5e:5a:d5:f2:86:6c:c4:
26:11:a5:72:67:41:d8:7c:43:9b:ff:bc:00:94:4f:fc:b6:54:
b6:30:c7:1f:bb:9f:e2:1b:3f:63:42:30:68:d1:6f:e1:0f:fb:
e1:41:d4:11:79:c4:10:1b:66:da:45:01:bb:6e:1d:24:88:3b:
82:c8:e4:6a:c1:c8:31:d9:df:31:66:19:14:a0:40:83:97:3c:
87:f3:5f:0b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPQEhEpUS3ModsiepAqQth5+tX3MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIwMDAxMTAwWhcNMjUwNjI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BlYzFjYTlkMzJmYjY4ZGU3ODdkMTQwZTRiZWVlMjliMWFi
NTg2ZDUyNGFhNDhmMTVhNzY5MzJjMWI1ZWQ3MjlmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDQcP8uSqYZrcDt9N5GYQL84iRlI+APcndh+2eynk5gXZCd
6Gp3Drq3lBZUu8fVf/QrQzcSbUJb7PPiGjwt+WToSUQci/DTDqse/Z/Iw4eCohKt
P6Ulgup+Q5xjLZu2dWBrC2fX7mYRbcvJZhPnH+n+opMM8rzAS2fnJC6evkojzGnM
y7rgQ7ityfD47P7mq2lu5j/LvPSJW/ChV682HoDThSQaWT+TRmfTbbICD1/JxbvU
27yuc7RaXG++O7HP77W8HaaIOTRtbAGBHYWXxeiG/6xML7cYMxRzS+nV9xOQ1IR6
660mWrCwljdWanDSUMy/PUk5CsI4z0NcsT0fAWNZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUMNzsbzDMBtag/ugbmA7QobpkdlgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2UwMDAxMzBkLWQ2YWEtNGU2Mi1hYmU2LTVjZGNjY2VmMmNjZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFu7gIwDQYJKoZIhvcNAQELBQADggEBAAzQVexrq1VcKH5XTtE6O9qWYHf1
JfKH9ql/utmqrrCukOAXvlB5RUx5139IIWdahljlOql8EwXZF9gp7B3atvciaMn/
qO5ca91/7LrxqiUaB3DiSBxfkTbg2sJ+ur6+twrJ5yjzjNEwVsPc9hnrxLqjgJyI
N84Iqr6c4Uw+OwBoZXQjNYHoVa0pHCSXGQpbNetgDpNjmUptPYQaN+bygi6hphXH
9GQhkJeJ3XTTXlrV8oZsxCYRpXJnQdh8Q5v/vACUT/y2VLYwxx+7n+IbP2NCMGjR
b+EP++FB1BF5xBAbZtpFAbtuHSSIO4LI5GrByDHZ3zFmGRSgQIOXPIfzXws=
-----END CERTIFICATE-----
Generated at Mon Jun 16 17:11:30 2025 by rpki-client