Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/aad81291-42c6-4cbe-b7a8-f508845adfaa.roa
File: aad81291-42c6-4cbe-b7a8-f508845adfaa.roa (raw, json)
Hash identifier: Azhi3iXJB3YWRaFVIygog8BVIwjQ+N2CaWYaWWqcjzk=
Subject key identifier: 7F:B4:0B:74:0A:A2:45:6D:54:7C:A9:5C:8D:F0:EA:B5:15:6D:1F:30
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 522C5B8FD5E6F2D093870554C2FD34E6152A7E76
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/aad81291-42c6-4cbe-b7a8-f508845adfaa.roa
Signing time: Mon 05 May 2025 02:11:05 +0000
ROA not before: Mon 05 May 2025 02:11:05 +0000
ROA not after: Mon 09 Jun 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:d00::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 05 May 2025 03:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:2c:5b:8f:d5:e6:f2:d0:93:87:05:54:c2:fd:34:e6:15:2a:7e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: May 5 02:11:05 2025 GMT
Not After : Jun 9 23:59:59 2025 GMT
Subject: serialNumber=40cb3219ffbfc022940ce8fcceea78b67f086b9bdcbd13f302626ddede0d3727, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cd:fe:aa:10:9d:4d:18:11:63:89:37:95:18:
d7:b0:4a:85:29:96:9b:e7:2a:62:b9:f1:52:59:ad:
5c:f4:10:6d:69:2e:fe:91:21:d1:80:63:23:fe:b8:
7d:59:43:4c:71:9a:85:53:4c:b8:9f:ad:b3:65:13:
f0:52:d7:77:22:52:2d:c1:89:f7:df:40:c4:8a:48:
f4:48:5b:cb:6a:ba:e7:f7:26:28:98:75:4b:cd:9b:
bb:6b:58:40:fa:7e:d8:2b:82:96:f2:47:b8:5b:b1:
93:ca:02:78:70:ef:1a:12:50:9e:87:9e:7e:e0:f8:
a0:0b:df:89:19:5e:87:9a:4d:81:95:4d:6b:7b:9b:
db:fc:18:32:c4:c8:95:14:16:0d:a5:a3:90:15:0c:
f1:37:81:cb:11:cd:6c:f1:81:eb:a5:d8:09:03:55:
a5:7b:67:95:ef:8d:f0:3e:a0:da:68:bb:ad:26:dd:
bd:dd:d3:7a:b3:a2:eb:97:36:53:e1:b5:c2:3d:ca:
bf:df:29:9a:2e:99:6b:30:59:80:67:3f:d5:9a:46:
0e:c9:16:ea:89:e8:e2:94:b5:84:51:61:64:7b:b8:
99:dd:20:2e:f3:e1:bf:33:fe:be:ad:ba:03:23:64:
7b:20:5e:74:e6:bf:1d:b8:69:4d:27:4b:67:46:ab:
ea:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B4:0B:74:0A:A2:45:6D:54:7C:A9:5C:8D:F0:EA:B5:15:6D:1F:30
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/aad81291-42c6-4cbe-b7a8-f508845adfaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:d00::/40
Signature Algorithm: sha256WithRSAEncryption
0e:b8:3a:bb:55:7a:6a:0c:12:57:dc:60:c8:9d:39:ca:8e:04:
44:9b:e2:03:69:45:d6:7e:cb:73:2a:fe:a8:f7:c0:b4:11:0b:
af:87:05:0f:97:9a:5a:22:08:16:dc:07:e3:d8:2e:62:92:c2:
0a:12:73:4c:6b:28:24:8e:c2:d4:a7:51:3f:43:96:85:88:a3:
2f:cc:6e:50:67:0f:c7:a8:2a:c0:55:c6:48:2b:9a:58:f7:40:
d8:75:43:be:82:56:51:a6:ae:59:fd:0a:3d:c0:ad:43:98:ec:
44:b7:7d:eb:a9:5b:c0:d9:be:86:89:c8:74:1d:33:d7:ee:09:
ac:ba:6c:9a:5e:9e:7a:01:b9:a5:51:67:6d:a4:41:2a:34:15:
aa:73:a6:45:6f:77:35:bd:35:fc:45:0c:c1:41:43:ef:0e:14:
31:1d:44:a2:82:73:2b:ae:2b:9f:e1:53:0e:7b:a8:ca:b9:00:
ea:2d:d5:de:98:3e:93:25:92:a2:84:01:ec:22:79:86:2e:04:
22:02:7a:76:ea:d2:c4:79:02:ec:96:dc:32:c2:b8:24:17:25:
83:3f:26:8d:d6:72:d0:6c:84:ce:1c:95:db:cd:a4:30:d3:6e:
fb:e5:b0:79:b6:3d:b8:fd:f7:4a:fd:b5:0e:3b:fe:e8:a4:07:
99:dc:c9:12
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon May 5 14:36:41 2025 by rpki-client