Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a3957188-6695-45d3-9474-680a18e83440.roa
File: a3957188-6695-45d3-9474-680a18e83440.roa (raw, json)
Hash identifier: PsANf0JuSUCt/vn8/XPww3Ud3wC6Kw2nxJNSJP+OPnQ=
Subject key identifier: E5:76:AB:B5:C0:11:E6:7E:C7:E1:71:15:EF:C9:9E:FB:C4:43:33:A3
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 02759F2E3ED8B155F3522AA56AE194D74B7FAC1B
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a3957188-6695-45d3-9474-680a18e83440.roa
Signing time: Sat 26 Apr 2025 17:10:59 +0000
ROA not before: Sat 26 Apr 2025 17:10:59 +0000
ROA not after: Sat 31 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:d00::/40 maxlen: 48
Validation: Failed, certificate revoked on Sat 26 Apr 2025 18:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:75:9f:2e:3e:d8:b1:55:f3:52:2a:a5:6a:e1:94:d7:4b:7f:ac:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Apr 26 17:10:59 2025 GMT
Not After : May 31 23:59:59 2025 GMT
Subject: serialNumber=329b3bbe29ba9a31efa375f9cfffaba837c338b35df660c8a27c52e9b2ea9b8e, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:70:1b:bb:a4:00:17:29:fe:fd:bc:46:fa:28:
bd:24:2a:fd:a1:e3:96:b4:d3:4d:72:ce:2a:d6:01:
db:86:82:17:5c:9b:7a:cd:37:6f:4e:3f:e1:eb:df:
13:72:ad:9f:b1:f8:44:7d:a0:a8:a0:fe:af:b8:10:
95:bb:e4:ca:bf:c6:fe:5c:5d:82:4a:65:20:c9:64:
4e:a6:23:11:a7:eb:93:19:fd:49:c6:d0:39:54:97:
04:2d:aa:31:cf:7c:1f:5f:2e:18:30:f2:bf:f2:92:
2b:64:a3:0d:82:9d:8d:6b:c9:ca:aa:85:13:25:02:
97:99:ab:03:06:9b:96:b0:99:c6:cf:44:93:09:e8:
31:5a:33:cf:70:88:72:74:a5:07:09:aa:b8:06:62:
78:b8:b1:df:74:2a:8b:78:f9:00:d4:52:3a:d1:a7:
6d:da:12:5e:20:81:11:7d:50:d2:55:ad:68:28:fd:
98:ca:11:99:d5:9e:bd:bb:03:08:31:e0:1a:32:e1:
ee:23:6e:0d:3a:37:60:be:42:a5:40:44:78:70:41:
f6:23:36:92:d1:2a:02:23:94:3a:7f:d6:57:24:05:
25:9d:02:d1:dd:59:3a:fd:b9:4f:3e:ff:10:62:ab:
ff:9c:ad:10:21:5a:2c:16:eb:4f:ee:95:3d:01:07:
7a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:76:AB:B5:C0:11:E6:7E:C7:E1:71:15:EF:C9:9E:FB:C4:43:33:A3
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a3957188-6695-45d3-9474-680a18e83440.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:d00::/40
Signature Algorithm: sha256WithRSAEncryption
61:72:b7:78:12:98:3b:a7:15:00:1f:3e:77:e3:7c:89:7b:ad:
d8:2e:7f:9b:10:da:f4:ce:f2:3d:90:b1:91:17:aa:59:90:66:
1e:67:64:9a:e4:e4:25:6b:6c:9c:6f:69:bc:5d:2c:13:43:33:
44:32:dd:56:3a:d9:d0:33:92:94:a8:63:90:ca:9b:94:19:9b:
cf:61:f1:7f:29:1f:a4:89:72:d2:6e:7c:b9:76:43:f4:58:49:
89:f4:5a:38:41:65:d3:12:11:1f:6d:05:2d:5a:d7:42:d9:c4:
2e:a5:a0:1f:6d:49:8f:b0:00:87:60:88:f5:fe:08:97:0e:fd:
8c:fe:be:75:a4:51:aa:a1:3e:4a:03:30:b2:61:04:49:0c:cb:
ac:1c:a1:cd:b6:09:6b:41:0b:e3:cd:42:7d:ac:4d:f6:eb:47:
a2:08:fc:63:5f:99:89:54:2b:03:c2:24:4e:3e:81:e8:a8:b7:
73:4f:1b:5c:fe:25:2b:e5:95:96:83:da:28:57:c6:d3:1b:20:
d0:dd:6d:72:28:9d:65:30:b6:63:31:8f:0b:f7:ce:5a:ef:88:
f5:1c:e8:97:91:ed:df:d6:d8:04:8d:b3:a9:47:93:93:d1:b5:
a1:21:4a:f3:ad:63:00:bd:ed:37:d2:e6:8d:9b:98:d2:e9:85:
4e:0b:ba:89
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:08:03 2025 by rpki-client