Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2481eb1d-6c75-407a-b560-0c1a5a258a4b.roa
File: 2481eb1d-6c75-407a-b560-0c1a5a258a4b.roa (raw, json)
Hash identifier: luBBk1S5R6+aPFfqXoDuEZCFQn+vuEVXdSAvVhWKst8=
Subject key identifier: 73:62:E3:74:66:83:B6:A3:4E:75:A8:4E:FC:67:22:D4:A3:5D:9E:77
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 1F0E9BD43582F8E6782B7EA3EA0D21E8D851DDF7
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2481eb1d-6c75-407a-b560-0c1a5a258a4b.roa
Signing time: Tue 29 Apr 2025 20:37:08 +0000
ROA not before: Tue 29 Apr 2025 20:37:08 +0000
ROA not after: Tue 03 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.20.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 May 2025 01:07:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:0e:9b:d4:35:82:f8:e6:78:2b:7e:a3:ea:0d:21:e8:d8:51:dd:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Apr 29 20:37:08 2025 GMT
Not After : Jun 3 23:59:59 2025 GMT
Subject: serialNumber=52114a4cc073e4061292dc476284d4f5992e861d2cb8c93a4e8f03a13542f03c, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:61:c7:ea:11:43:94:1b:c8:8e:5d:84:0e:
f8:7b:97:5d:a4:df:57:9e:50:b2:35:b7:31:64:0e:
c7:f3:92:f9:54:de:34:e4:02:74:28:7a:9a:84:2e:
c5:3e:24:93:a3:a8:40:c1:75:3e:ca:eb:05:b6:a0:
25:16:02:c1:af:f9:2d:32:71:4c:b9:e8:7b:4b:79:
b0:7e:79:39:83:53:a5:98:4d:9c:56:81:44:98:3a:
52:45:b4:ca:99:12:a5:81:5f:37:7b:84:f7:8f:9d:
d6:a4:ae:90:fc:26:ab:da:55:e4:3f:0e:34:58:fc:
44:85:34:1b:23:e7:1f:99:ca:c2:41:76:3d:5a:12:
c1:92:de:70:a7:74:f5:b3:64:c6:43:50:70:44:fa:
3a:44:2b:bd:2e:f9:df:d4:1e:c7:69:f7:cd:ac:5d:
d8:0c:e7:28:16:fd:44:26:b2:69:fa:8c:b8:67:79:
6d:7c:d4:87:d4:c1:e5:17:d0:52:65:3d:33:a6:14:
eb:50:52:e7:2a:97:63:e1:e5:75:0a:af:c1:09:db:
3a:ad:31:47:3b:15:51:4e:4e:9f:f9:9f:95:57:c2:
b9:30:07:ee:81:fd:52:55:e2:83:b9:1c:86:a8:81:
3f:3d:e6:47:ad:5e:34:93:c6:8c:a5:8b:08:31:cb:
0a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:62:E3:74:66:83:B6:A3:4E:75:A8:4E:FC:67:22:D4:A3:5D:9E:77
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2481eb1d-6c75-407a-b560-0c1a5a258a4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.20.0/22
Signature Algorithm: sha256WithRSAEncryption
98:5c:55:0b:ea:c6:b4:f2:b4:57:e2:11:e6:92:53:25:fb:1e:
f4:fb:27:45:42:03:8d:c3:38:5a:3a:1a:4f:7e:27:2b:30:a8:
ab:65:a5:bb:5a:be:de:5b:79:01:5f:c6:d1:f3:2b:b4:f0:84:
7f:46:ee:fe:a6:ff:ea:94:40:55:f0:25:c9:70:fc:8e:89:8d:
24:84:75:0c:2e:55:f0:6a:2a:ab:ce:7c:b9:5f:4d:87:f2:78:
3e:ab:09:ff:60:05:16:3d:40:43:c6:f6:e5:e3:37:b5:d6:ab:
4a:ba:b9:8f:81:5d:7b:20:8e:7d:8a:fb:8e:be:50:3d:6c:fb:
c0:db:c9:cc:5f:25:d0:3d:59:55:89:2e:2a:82:84:0e:87:cb:
06:b5:07:8c:61:45:b6:a1:37:de:5d:60:fb:51:69:15:17:9d:
f0:6f:32:e2:7c:6a:17:65:4e:8f:52:02:9d:a2:db:c7:05:37:
6d:4c:4c:c2:af:75:b0:f9:38:d9:59:a1:08:49:b1:4d:44:16:
94:04:63:4e:49:40:91:dc:19:08:5c:8c:25:6c:e5:98:c9:99:
83:12:4c:99:7b:69:f7:d2:6b:08:db:b3:31:2b:45:0d:80:1b:
42:5c:6d:41:68:ad:77:83:70:ce:5a:bb:c1:af:df:d2:3a:c8:
83:71:d4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:11:50 2025 by rpki-client