Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15a3a252-e83b-4245-9585-281ac1a7eb4a.roa
File: 15a3a252-e83b-4245-9585-281ac1a7eb4a.roa (raw, json)
Hash identifier: /1c6wARFXlkY+/aSVUV2xWbQJgwVmcNsFGKD+w7ddxE=
Subject key identifier: 4F:50:04:8F:DB:30:1E:CA:1C:68:36:3D:F1:98:47:AB:18:2A:BA:55
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 41213DDF74FEEB13AE02D4FEA4C7791D0BE3BFC0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15a3a252-e83b-4245-9585-281ac1a7eb4a.roa
Signing time: Mon 31 Mar 2025 19:30:22 +0000
ROA not before: Mon 31 Mar 2025 19:30:22 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:40c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 16 Apr 2025 19:22:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:21:3d:df:74:fe:eb:13:ae:02:d4:fe:a4:c7:79:1d:0b:e3:bf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 19:30:22 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=715cef4558a1509f31c92f1a6cc54702afd1a8ee3e196241fb28bac2f4efa3b1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4a:bd:7c:b7:f3:f3:ba:2a:63:0f:7a:f6:2d:
5c:63:72:1b:00:54:59:ca:7e:d3:f8:39:03:09:1e:
dd:b5:c9:d1:9e:58:5e:2a:5a:54:7e:8b:f1:13:46:
b0:2c:8f:30:79:d6:35:32:61:ae:0a:a3:7d:68:33:
1a:1f:be:7a:4f:cf:85:70:3d:1f:8a:99:86:4f:16:
f9:a4:98:24:74:8d:8c:10:18:69:d2:d0:df:db:fa:
4f:41:73:ae:a5:40:bd:f0:f8:fc:f1:d3:51:80:c2:
85:22:52:6a:f2:7e:c6:f4:07:b8:2e:6c:44:ad:6d:
82:3c:4a:97:f5:5f:b6:5d:b8:1a:0b:65:db:3d:d3:
9d:4e:f0:a4:bc:3c:1a:48:94:c4:10:9c:29:10:11:
ec:12:8c:b2:72:49:14:9d:af:23:25:df:a5:7d:7d:
ce:64:02:75:6f:ec:45:5a:cb:e9:ee:9e:20:65:72:
d4:5b:7c:40:75:6c:f6:f9:59:56:35:b3:60:2b:14:
d2:c7:2e:3a:01:7c:d2:cb:ed:da:f1:82:8a:a3:d2:
c2:4c:06:ec:40:df:d3:f2:a4:39:4c:e2:c2:b5:55:
12:18:05:a5:07:0d:b1:b8:46:22:26:69:23:83:5a:
d8:13:1c:d7:5c:48:61:9e:0a:1b:34:67:20:09:1a:
05:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:50:04:8F:DB:30:1E:CA:1C:68:36:3D:F1:98:47:AB:18:2A:BA:55
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15a3a252-e83b-4245-9585-281ac1a7eb4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
0d:cf:d2:fc:aa:05:4d:5e:34:73:99:22:cc:d2:05:4b:2f:ac:
0a:db:79:17:db:23:29:6c:ca:bf:42:0f:e2:68:6a:a4:22:d5:
e6:5b:81:b1:4b:94:69:65:55:8a:67:d5:4d:ad:3e:9b:7c:e1:
10:59:ca:84:cd:d5:61:7f:2c:d2:53:33:0e:a0:cb:b7:bb:bc:
e4:68:1e:38:30:8e:d0:f9:0a:2a:ef:a3:6b:16:19:8f:70:0a:
03:86:d1:8d:c5:c2:ec:30:e9:4a:25:ee:2d:33:52:cf:82:d0:
1f:ce:89:ff:33:f7:09:a2:e2:f1:9b:0f:f0:06:a0:43:5b:c9:
e3:2d:e5:3d:9a:3c:b7:53:24:bc:64:7b:46:51:1d:74:84:22:
21:71:ae:91:ed:0e:2f:ba:3b:e5:da:d1:c3:d6:53:81:57:29:
24:2d:f3:38:cb:1b:24:e3:a9:cb:04:24:9e:71:64:89:57:9d:
e4:3c:ed:57:7f:91:b1:a7:40:0a:a1:6e:08:5e:fa:bb:57:a4:
2c:da:3b:4f:63:e1:33:09:11:09:96:1c:1f:8a:44:9c:0b:45:
3a:42:96:6f:00:10:10:ac:7c:67:55:72:00:ac:6c:56:dc:43:
30:02:71:4f:4d:b4:02:2f:cb:38:38:d2:5b:c0:7d:fb:fd:c9:
d7:3f:71:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:46:05 2025 by rpki-client