Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ea98f8c2-5291-476b-80c0-20624846b910.roa
File: ea98f8c2-5291-476b-80c0-20624846b910.roa (raw, json)
Hash identifier: rhLNnmuoeBxlKG+6WffRKFYB0l434GvPggqfQ/jkdD8=
Subject key identifier: B6:34:67:8F:57:9F:5B:CF:DE:5C:93:84:A0:A2:4F:05:16:24:99:D9
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 7351FFF64A62210D559F02EC81C79A7864221562
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ea98f8c2-5291-476b-80c0-20624846b910.roa
Signing time: Wed 04 Jun 2025 19:37:12 +0000
ROA not before: Wed 04 Jun 2025 19:37:12 +0000
ROA not after: Wed 09 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.0.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 04 Jun 2025 21:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:51:ff:f6:4a:62:21:0d:55:9f:02:ec:81:c7:9a:78:64:22:15:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Jun 4 19:37:12 2025 GMT
Not After : Jul 9 23:59:59 2025 GMT
Subject: serialNumber=b844a238303a69d6c016b9b00bba0fab6e5a62a27fc3551937eb13b9ad22b18e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:69:5d:b7:b0:bf:1d:36:1a:ec:e0:f1:b9:34:
0d:6a:26:f8:17:02:df:91:41:7e:4b:ff:ca:41:e8:
80:41:7f:e2:2e:e0:cc:43:db:86:77:97:dc:e7:b4:
d4:07:21:4d:8d:6c:53:f5:1c:35:64:8e:db:ff:be:
7a:69:14:ea:80:a2:cb:49:a4:1d:37:89:90:e8:e9:
08:38:4f:d1:d8:82:f5:11:69:2d:79:ff:16:72:f4:
e9:6c:8b:87:68:0d:7f:76:b7:6c:39:d8:51:2f:ed:
17:e1:b5:77:18:9f:12:f5:42:71:93:a6:79:62:0d:
21:f7:bc:d2:62:e8:2e:13:f2:b1:58:14:f4:04:7d:
4e:fe:2a:a4:06:10:60:5f:56:96:73:a9:9c:6a:03:
ef:7f:cd:cc:f5:4c:42:99:41:7c:f0:7f:7d:0a:09:
03:e9:95:9b:cd:df:8f:01:28:0c:bc:ee:b5:47:3d:
db:e6:cb:f7:c2:0b:66:1a:e4:ba:34:3b:00:42:b0:
4b:a6:04:f3:ff:b3:a8:f0:e4:63:f0:4a:40:ff:48:
2f:26:bf:b9:d3:b9:3c:5b:52:5d:c5:a1:fe:6d:30:
cb:02:e2:c1:76:09:1a:f6:d3:0b:9d:7e:6b:c5:34:
12:ec:40:10:16:59:93:d9:1c:1a:5a:84:ef:7d:db:
18:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:34:67:8F:57:9F:5B:CF:DE:5C:93:84:A0:A2:4F:05:16:24:99:D9
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ea98f8c2-5291-476b-80c0-20624846b910.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.0.0/20
Signature Algorithm: sha256WithRSAEncryption
27:d7:e4:e4:1a:78:e7:7b:1d:ce:4e:22:6b:29:56:67:b7:e6:
39:61:a8:7b:1a:d6:5f:64:4c:43:7d:d8:44:75:18:a3:e8:f6:
5d:7f:20:e7:2f:00:5c:5b:84:31:05:7a:70:eb:4e:2f:6f:42:
73:94:10:0c:30:a6:3d:be:89:d6:d9:24:f0:62:38:65:74:bd:
0d:59:c8:2c:11:36:d1:5a:0d:8f:63:17:fa:d0:b9:55:6c:48:
49:80:95:12:6f:3b:4e:8a:a5:2f:b3:60:6d:49:0f:cb:d4:87:
98:17:48:b7:b2:1b:af:db:b7:1c:54:72:34:27:9a:93:7e:d5:
8b:e4:90:fe:f9:5c:e3:f6:3a:0e:27:a8:6b:41:d6:d4:b4:f5:
96:93:40:76:06:d6:bf:ec:09:59:fd:70:55:03:bd:87:12:3d:
40:e6:3e:54:3c:be:72:fe:20:a3:92:ba:5d:85:65:87:fb:24:
e3:d8:ed:0d:0f:7a:5b:5d:9a:c7:5b:29:e9:c8:04:01:36:a2:
a9:63:9f:70:1e:09:24:0e:50:d6:75:b7:f3:4e:b2:41:b1:0d:
43:94:eb:0a:b5:73:e1:57:1c:2e:ba:b8:a1:76:70:46:b3:c0:
c8:8e:fa:d3:15:bf:e5:8e:94:f9:58:67:00:78:67:30:94:55:
8a:de:d9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 22:21:47 2025 by rpki-client