Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f349f7d0-7a3a-4065-92d9-b29e26585230.roa
File: f349f7d0-7a3a-4065-92d9-b29e26585230.roa (raw, json)
Hash identifier: xcEEgeC1KfVd/0p7UsNX/5t9Nu004ldasGV/qjgP0Ek=
Subject key identifier: 43:70:A1:ED:24:09:4D:2F:D2:63:15:BD:47:65:B9:6F:64:3B:14:B0
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 5E2E27C41BBEABB057B7D0845BDD4CC6099B6423
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f349f7d0-7a3a-4065-92d9-b29e26585230.roa
Signing time: Tue 20 May 2025 17:50:12 +0000
ROA not before: Tue 20 May 2025 17:50:12 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 22:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:2e:27:c4:1b:be:ab:b0:57:b7:d0:84:5b:dd:4c:c6:09:9b:64:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: May 20 17:50:12 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=28b8ee6d07a435fad8c80b47435e352dd075e5c36a0adfc131d6f296444df974, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:8c:f1:1f:85:d1:20:e5:0f:85:57:ba:ef:
3d:4f:18:96:89:da:1e:ef:63:71:2f:cd:36:b2:76:
4b:89:39:6d:c7:cb:ca:c2:93:3f:42:5a:67:a6:65:
86:1f:92:55:44:d1:9b:f4:22:25:65:07:03:ea:fe:
c7:2a:22:1c:4e:08:e4:f5:98:ec:71:26:00:df:01:
80:02:04:ed:5d:09:dc:5a:87:fd:a8:e2:36:10:3b:
35:c4:65:79:f2:9d:44:70:b9:1c:ae:54:d7:26:39:
51:3d:1e:7e:4d:dc:4d:f2:f0:e7:d7:f6:75:c7:83:
a9:77:65:a4:2f:72:04:b1:e0:12:4c:66:f0:3d:ce:
98:aa:da:e7:f8:bc:4f:38:cd:6a:15:68:da:2a:be:
79:ad:22:a5:20:b5:d9:c7:0b:fe:87:d1:eb:f2:fd:
41:ba:ab:83:49:fa:cf:a8:d0:92:b4:ea:94:bb:bd:
8e:7b:c9:90:6c:11:ff:e9:25:af:35:be:f0:7c:95:
78:d2:09:b8:2e:ac:eb:28:26:91:e0:86:57:02:7c:
fb:ae:fe:5c:07:26:c9:de:ca:23:ed:3e:61:f9:30:
06:fb:8b:58:d0:da:0d:e8:ae:58:d0:dc:08:11:c0:
c5:dd:c3:c2:de:d8:28:b7:d8:64:ad:3a:fe:ea:8a:
cb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:70:A1:ED:24:09:4D:2F:D2:63:15:BD:47:65:B9:6F:64:3B:14:B0
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f349f7d0-7a3a-4065-92d9-b29e26585230.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.252.0/24
Signature Algorithm: sha256WithRSAEncryption
60:a4:0e:df:de:3b:86:f6:55:79:5e:e1:a9:b4:57:56:5c:9f:
8e:4b:4c:ae:21:69:84:d1:c8:20:c9:4e:10:61:c5:2b:3a:50:
3e:ea:86:1d:c5:19:cb:39:ad:85:13:29:b0:ec:70:b2:a5:8f:
d7:4d:6e:6c:56:ec:29:b8:c2:79:1f:9b:ab:29:76:86:7a:33:
c9:64:6a:80:98:58:df:9d:93:c5:03:0f:62:30:e9:0a:7d:bb:
96:1e:c5:b1:6b:90:4b:cd:9e:d6:62:6d:91:fd:91:df:6e:3c:
92:6c:87:46:cb:2e:1c:57:fe:83:ee:f5:44:03:82:ad:6f:fe:
c7:2f:d2:2f:d5:57:5b:e6:25:9b:13:76:a2:0b:87:4f:ce:29:
8a:56:8b:56:10:ab:f1:53:35:43:c1:c4:44:26:f7:be:5b:dd:
b6:91:ac:11:db:ed:0d:cb:74:ac:ab:84:4a:5d:bf:27:9f:68:
9e:d8:5a:a5:45:13:db:2c:57:51:83:3e:36:b0:c4:9d:37:3c:
ce:a6:56:ac:98:04:65:40:51:a1:83:66:87:fa:8f:7c:7e:2d:
6a:21:18:b5:f9:26:5c:31:72:4d:89:38:d0:4b:47:ad:22:35:
b7:f6:2c:7a:9f:63:0f:d1:24:aa:0b:71:c5:9d:4f:49:33:cd:
9b:a9:9d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:18:26 2025 by rpki-client