Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2851aa8e-afc0-4fb3-af32-b2a1bbaf1304.roa
File: 2851aa8e-afc0-4fb3-af32-b2a1bbaf1304.roa (raw, json)
Hash identifier: jQ//UOiWk5ZoJ7HIwsHNfwPICd5yNN3Rt3uIkHLoC2k=
Subject key identifier: 6E:73:56:86:8C:D4:81:DD:71:8C:E6:A5:B3:A0:00:F6:52:7C:50:C1
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 195AEE347535BA264ED448453C21A831BD6AE9EE
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2851aa8e-afc0-4fb3-af32-b2a1bbaf1304.roa
Signing time: Mon 28 Apr 2025 15:30:22 +0000
ROA not before: Mon 28 Apr 2025 15:30:22 +0000
ROA not after: Mon 02 Jun 2025 23:59:59 +0000
asID: 801
IP address blocks: 35.96.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 May 2025 01:07:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:5a:ee:34:75:35:ba:26:4e:d4:48:45:3c:21:a8:31:bd:6a:e9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Apr 28 15:30:22 2025 GMT
Not After : Jun 2 23:59:59 2025 GMT
Subject: serialNumber=8e95ad4b08fa519b8e3617d9a3c224e608df62b295b196a1575842c51cff9a20, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:af:94:8b:3b:87:38:b1:49:81:04:57:2f:c0:
06:78:4e:83:94:89:35:09:a9:b4:66:45:c9:38:fb:
08:62:d8:3b:64:ce:b6:92:67:f1:dc:0a:27:77:c5:
3d:48:3a:72:84:47:75:24:4e:f5:55:d0:a7:01:bc:
09:1e:f6:64:29:25:62:86:ce:74:e8:e9:93:b0:b9:
6c:ee:58:1c:be:65:fb:a0:60:75:db:9c:0a:93:f3:
05:31:d2:42:6f:2c:bf:23:ae:32:c9:e4:42:9d:87:
f9:8f:e7:fa:19:49:80:36:43:f0:26:a0:1b:5d:9d:
44:26:29:76:59:5c:0b:61:95:5c:27:19:30:a0:2c:
5f:47:b2:49:d1:dc:4c:f9:e2:33:fa:72:dd:60:2f:
2a:2b:b3:e9:c0:83:6a:3b:42:67:2f:6b:7e:66:e1:
3f:dc:d9:e2:18:0c:47:b3:b9:42:22:0b:c3:1c:79:
65:ec:b2:c4:14:22:5c:40:7c:ff:2e:8f:78:a9:8f:
ae:8b:31:ea:45:23:98:51:50:5b:e8:cf:a7:ec:53:
c6:8b:06:51:25:23:39:a3:8e:3b:04:92:f5:ec:28:
95:0f:ee:3f:ce:21:8d:ff:2d:c5:00:ac:10:56:88:
9b:ff:04:69:58:91:66:5b:da:0c:48:c2:c1:ad:3b:
b6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:73:56:86:8C:D4:81:DD:71:8C:E6:A5:B3:A0:00:F6:52:7C:50:C1
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2851aa8e-afc0-4fb3-af32-b2a1bbaf1304.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.5.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:53:66:bf:c2:f5:f2:c1:29:ae:06:ac:cf:e2:47:2a:40:33:
51:e9:90:69:c4:37:05:e0:48:1b:30:3e:70:53:b8:6b:56:78:
16:62:86:b3:fb:db:b3:77:fb:54:c5:e9:25:c6:a7:78:d4:7d:
b6:0e:99:94:f1:b3:3b:68:2c:76:fb:d2:7b:c1:6b:7f:5a:c3:
bf:1b:ce:e7:f9:b7:a3:ae:9f:0d:a0:65:82:86:0b:9b:a5:43:
3c:1f:1e:e7:c9:0f:43:2e:76:22:6d:82:1c:8c:03:0e:9d:5a:
62:c3:d3:7c:a6:3e:d6:34:e9:4a:46:63:44:7d:0d:dc:f6:03:
72:9b:f2:37:d8:14:e3:10:ef:2f:cc:ce:db:ed:53:71:3a:87:
e9:d2:87:aa:bd:7e:15:aa:e3:20:0c:ab:49:26:37:1c:10:27:
cf:0e:5e:b7:35:7d:f5:65:01:3d:c1:75:ad:27:5a:34:f4:58:
bb:d0:0e:a2:aa:57:aa:01:f8:55:72:2d:31:5c:29:98:91:0a:
04:86:c8:51:a1:73:ae:ee:3f:cf:c1:64:fa:79:e3:d2:21:1c:
fe:e7:f8:c1:41:a9:48:d2:1e:be:bd:12:a3:75:39:10:c0:2e:
b6:ee:cd:45:02:07:65:ba:01:bc:53:f1:16:ce:e2:e2:0c:63:
c3:12:df:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:20:09 2025 by rpki-client