Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d41b201e-ea5a-4196-87d3-ddfb160d53f3.roa
File: d41b201e-ea5a-4196-87d3-ddfb160d53f3.roa (raw, json)
Hash identifier: Lfdeghqc1/7+4on66sMM/j8c8XNOLwCA5X8109mv4KU=
Subject key identifier: 04:41:9C:AD:77:44:A6:88:7A:0A:B9:B6:0D:4E:96:79:08:5F:B7:D1
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 15B695DC8E0A03512DE070D029B63C9101BF31D7
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d41b201e-ea5a-4196-87d3-ddfb160d53f3.roa
Signing time: Tue 20 May 2025 18:00:18 +0000
ROA not before: Tue 20 May 2025 18:00:18 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.52.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 04 Jun 2025 22:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:b6:95:dc:8e:0a:03:51:2d:e0:70:d0:29:b6:3c:91:01:bf:31:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: May 20 18:00:18 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=f67ff31a738575d234cfdccdc5c4a40530ae4f2f875b7e671e87904f796de60f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bf:5e:67:19:bf:e4:41:29:12:3e:c8:e3:d9:
99:79:4c:cc:da:a8:29:f8:8f:00:92:f2:92:06:28:
a2:fd:a9:7d:84:f0:e6:92:80:55:b7:6f:62:f0:a5:
96:ff:7e:2a:15:a8:46:81:21:fe:31:7f:c8:ba:e2:
a6:66:fe:83:fb:ce:f9:d6:58:32:6f:91:cf:e7:5d:
49:08:e5:b9:8c:04:c9:77:e2:bb:f0:25:da:82:68:
68:1e:c6:e7:a5:04:6d:45:25:ed:e0:46:c4:22:74:
b9:98:1d:4b:10:7a:86:70:1e:4c:8f:a6:6d:f4:b9:
bd:c1:6a:7d:e4:c3:29:55:e5:c5:e3:d2:69:a2:90:
7a:26:79:e6:df:78:7f:6e:b3:20:2c:05:7f:6c:d8:
f9:d4:2e:07:a4:4d:e9:8e:02:c8:ab:59:1f:81:d7:
8b:25:e1:ff:3c:54:97:1b:5d:0b:68:40:7a:3d:3c:
9a:55:2e:1b:17:b2:f3:c6:69:4b:21:30:fb:57:2c:
a4:10:12:91:10:24:03:0d:dc:8d:1d:ae:3a:81:f2:
67:0c:7f:b3:f9:94:5d:27:40:80:36:94:2e:ef:d1:
fe:7f:2f:22:5a:cd:aa:4c:4d:08:51:2a:e8:eb:31:
fc:30:d8:73:26:31:72:b4:af:7c:86:a3:e7:31:f8:
94:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:41:9C:AD:77:44:A6:88:7A:0A:B9:B6:0D:4E:96:79:08:5F:B7:D1
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d41b201e-ea5a-4196-87d3-ddfb160d53f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.52.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:df:49:e7:29:f8:bf:81:8c:9a:de:0b:78:26:17:25:2c:56:
a8:58:51:3b:52:d0:a7:de:b1:78:ed:85:02:b8:f7:98:d4:18:
3b:12:e2:94:46:43:be:45:59:83:73:ad:cc:76:29:75:d2:6d:
28:72:a0:f8:33:67:0f:c2:c2:8e:26:3e:8a:c8:a8:9c:d0:dd:
a5:30:1e:67:09:2a:fd:65:a8:a8:6b:22:39:5d:b5:d4:1c:d2:
a1:2c:ca:06:cf:45:ad:e5:07:bb:4f:ec:50:f1:68:01:6e:91:
98:74:44:ff:a1:7d:09:af:7f:ac:74:79:64:68:84:50:98:64:
9c:a9:7d:f8:81:89:7a:02:7b:fc:8f:db:24:29:f9:92:b3:ec:
03:4b:65:1f:bc:ca:7f:eb:94:7c:b7:5d:1d:12:d8:26:65:bf:
2b:06:79:cb:d1:8d:0c:98:58:c5:12:ff:fa:a4:ca:48:b6:9e:
5d:2a:45:f7:a1:2c:7e:76:78:26:30:07:52:57:59:1f:ae:7c:
09:7e:85:b1:4b:7b:9e:66:ce:71:60:58:27:4a:eb:b0:70:7b:
ac:cb:7b:db:06:37:15:f6:c1:ca:f3:5e:fe:d3:e1:0b:44:bb:
21:0f:8a:11:9a:9e:86:8a:aa:ac:25:1c:18:04:5b:f0:7d:81:
59:95:5a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:32:31 2025 by rpki-client