Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0178be8c-be18-4cb5-a753-85579fd04bbf.roa
File: 0178be8c-be18-4cb5-a753-85579fd04bbf.roa (raw, json)
Hash identifier: UfA9Eyae3AkPiQC7A1PBkpE8GkUXxLRDDWOEjb7l1sE=
Subject key identifier: EB:0E:86:49:4C:55:98:85:CE:25:D5:5D:E8:BE:91:7C:5A:31:E1:2A
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 6B285DAE4C40B97FA52AB9138F0E12B0717163EA
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0178be8c-be18-4cb5-a753-85579fd04bbf.roa
Signing time: Tue 28 Jul 2026 17:11:02 +0000
ROA not before: Tue 28 Jul 2026 17:11:02 +0000
ROA not after: Mon 26 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:d00::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 28 Jul 2026 18:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:28:5d:ae:4c:40:b9:7f:a5:2a:b9:13:8f:0e:12:b0:71:71:63:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jul 28 17:11:02 2026 GMT
Not After : Oct 26 23:59:59 2026 GMT
Subject: serialNumber=7f9dad9bff71efa5cd9cee950ddb1d07a863bf2fae82a77524487e14acf3052a, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0d:6a:cf:40:c4:fc:76:7d:4e:69:22:ee:17:
0b:ff:4d:1e:e5:f4:a3:7b:f6:80:f1:32:b9:70:2c:
10:ab:38:c4:05:ba:32:0e:d1:14:e8:e2:56:39:bb:
18:3f:66:83:c5:dc:9c:73:ae:f7:57:74:36:20:5b:
d7:69:34:ab:85:96:09:8d:fc:45:91:fa:75:b1:43:
6a:a5:15:dc:59:e6:c0:dd:96:30:fa:a3:22:cb:57:
38:11:10:7b:2c:22:30:82:96:01:98:7b:de:23:57:
87:4a:31:03:b4:70:0f:72:e6:84:a0:dd:ca:e0:53:
61:06:49:a3:7b:2f:df:af:69:e3:ee:85:47:63:16:
ea:50:e7:1d:e1:e4:51:f1:b8:2a:d1:02:3b:aa:55:
53:46:83:e2:a6:23:a2:7e:39:20:c5:76:bd:d9:19:
95:cf:bf:bf:c9:9e:c9:9e:11:04:96:9b:35:51:cd:
bd:1a:4d:52:36:51:56:e0:1f:16:2c:e8:52:a4:63:
a9:58:44:e7:ab:7a:6b:5f:b5:ac:85:a7:9d:10:0d:
20:23:0e:6f:1b:26:69:3c:94:63:8b:3d:f0:e7:02:
ff:e0:1d:a0:66:56:a7:35:b8:e3:8a:fd:17:ef:78:
41:82:5b:18:54:11:34:d4:e3:d7:98:ef:28:8f:05:
23:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0E:86:49:4C:55:98:85:CE:25:D5:5D:E8:BE:91:7C:5A:31:E1:2A
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0178be8c-be18-4cb5-a753-85579fd04bbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:d00::/40
Signature Algorithm: sha256WithRSAEncryption
02:af:2b:27:8f:af:9e:6c:01:1a:d0:55:d0:e6:7e:fc:4e:89:
0b:33:19:8d:ef:2e:37:96:b0:f1:1b:38:54:c9:4e:00:90:9b:
f8:b3:54:a7:5e:43:81:5a:ce:f0:d9:8b:f1:59:35:e8:31:bb:
e8:d9:8c:d7:a5:7f:29:98:cf:69:74:03:eb:c8:3e:3e:cb:ef:
16:d2:c0:73:d4:c5:c6:27:02:18:37:4b:4b:be:e2:50:31:e1:
7e:37:38:3c:f3:21:00:db:7e:b7:82:0a:e7:4f:8a:9d:85:07:
bf:ec:ca:eb:4a:c7:e4:36:d8:37:4c:22:f8:3d:da:af:4d:c1:
9c:db:d5:1a:56:a8:b7:af:1d:8f:ba:90:c1:4d:c0:98:fb:f0:
91:66:51:16:14:ac:04:14:2a:6b:2a:a1:b1:c1:a1:8f:ea:23:
59:5b:d5:f4:69:79:82:e3:94:d4:0c:69:8d:08:98:da:5d:6c:
fc:08:16:35:28:8f:04:d2:15:a3:c7:0d:39:d8:2e:62:98:2c:
4e:5b:09:23:ca:3b:a1:d2:67:de:e7:83:11:79:16:a8:62:a9:
1b:86:a7:42:29:f2:5c:4a:8c:1d:ee:6a:c1:d3:eb:95:a3:9b:
b8:3b:22:33:6d:00:b5:3c:8f:5d:9f:ed:cd:7a:d5:6a:3d:2d:
d6:5b:b1:a9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:49:14 2026 by rpki-client