Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c19f2c04-44bf-4ba4-bf5f-3e40bf0e8bd5.roa
File: c19f2c04-44bf-4ba4-bf5f-3e40bf0e8bd5.roa (raw, json)
Hash identifier: 5oLl3mzXbmXP7o4NO73YuxwJh6E0Y/a+5Ptn921W4dM=
Subject key identifier: 6D:AC:F2:3F:67:4D:11:A8:40:0F:17:1B:EA:06:17:C1:68:CE:5D:FD
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 3678F77F5E62E71F836A4E06BEA962B5105E5FA5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c19f2c04-44bf-4ba4-bf5f-3e40bf0e8bd5.roa
Signing time: Wed 28 May 2025 13:38:32 +0000
ROA not before: Wed 28 May 2025 13:38:32 +0000
ROA not after: Wed 02 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:520b::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 02 Jun 2025 18:37:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:78:f7:7f:5e:62:e7:1f:83:6a:4e:06:be:a9:62:b5:10:5e:5f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 28 13:38:32 2025 GMT
Not After : Jul 2 23:59:59 2025 GMT
Subject: serialNumber=23b2114887816e5e8b92fecafbec9ee0236c41ad2030a6e314b1cc297b895976, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3b:3f:fb:98:3f:d5:50:03:ed:a7:88:42:06:
3f:9e:79:e4:10:d8:42:c2:9d:60:cb:0f:64:41:b3:
9f:91:a9:d3:f5:6f:17:de:5c:84:f2:52:6e:72:3c:
e8:b9:94:54:92:a5:60:44:00:ac:88:43:54:96:b3:
5b:f4:e4:06:63:df:39:79:fe:e5:ba:b4:80:c9:51:
fa:83:81:90:be:dd:1e:5b:03:22:73:44:6c:4a:2a:
d3:db:e8:d5:f8:f0:fe:ee:5b:f9:06:20:e6:fe:8d:
25:22:14:d2:78:b6:a4:bc:d3:29:f9:05:12:7d:ef:
94:d0:2c:92:91:7b:9a:c2:dd:cb:15:5c:45:fb:88:
f1:c2:60:0b:3b:36:a1:45:a1:ec:8a:6b:8c:0d:f5:
d4:11:c5:5c:b4:a9:85:c9:55:a4:7d:f0:d6:2f:ed:
63:15:dc:a6:9d:ff:08:df:51:c5:1c:34:ef:ef:fd:
12:31:24:d2:6a:59:f9:da:58:e3:c6:f8:09:62:0f:
a8:dc:d9:bb:8d:a8:86:25:1c:3b:97:b3:cb:6b:1f:
6d:04:d3:d7:ce:bf:2e:38:63:1e:b4:3d:4b:eb:26:
45:52:fa:8f:11:ac:91:43:11:20:f6:02:fc:01:78:
3f:11:8b:96:9f:5f:98:44:9c:d6:54:15:fd:d3:32:
4b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AC:F2:3F:67:4D:11:A8:40:0F:17:1B:EA:06:17:C1:68:CE:5D:FD
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c19f2c04-44bf-4ba4-bf5f-3e40bf0e8bd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:520b::/48
Signature Algorithm: sha256WithRSAEncryption
5f:46:f5:28:77:5f:9e:cc:46:5f:5f:33:4f:ac:02:9a:e6:1b:
4b:e3:f1:a3:89:0c:25:c7:68:8c:dd:18:f4:50:33:71:c8:22:
31:67:d2:5f:53:bd:3b:85:ce:89:db:6a:fb:7d:fb:17:8d:9f:
3e:6c:df:29:7b:ac:3e:71:52:bf:d7:ab:f2:7f:2a:06:33:53:
4e:0d:2e:19:4e:98:89:25:3a:18:6b:8a:2c:4a:41:47:2f:f0:
75:42:72:9e:90:c5:42:8d:26:a4:03:43:84:06:6e:f1:32:9d:
b2:3c:1a:dd:9e:b6:98:32:38:e1:9d:23:41:1c:eb:06:84:c3:
de:a6:ec:bd:0a:97:77:da:65:d5:f8:e9:48:09:d3:69:2b:20:
df:45:7b:c3:2c:ca:08:83:27:25:56:fb:dd:53:79:23:41:d5:
23:8b:cd:22:b3:09:1b:34:7c:19:16:09:99:df:36:76:ec:78:
90:fb:39:ce:62:c4:ef:5b:04:1e:6f:c0:c8:1d:d8:1b:b7:d7:
d7:a4:8b:07:b8:19:4d:6f:88:34:9f:66:31:76:67:17:b3:9b:
75:b6:b0:13:af:18:d1:22:22:10:c3:21:c2:52:f0:7d:c3:08:
ff:c7:10:68:92:fe:c1:21:1c:6f:68:25:6c:86:71:2d:23:49:
61:25:a1:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:51:09 2025 by rpki-client