Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ce4b79c-26b8-4e2b-8de2-ef5254a2c33e.roa
File: 1ce4b79c-26b8-4e2b-8de2-ef5254a2c33e.roa (raw, json)
Hash identifier: y2X2qQjRiZF+Ng10OZyFHdYEptHYeHHfiK/4f7BOLCk=
Subject key identifier: 9D:31:3C:2B:67:DE:D5:9A:D7:D0:19:10:B0:AA:95:84:64:36:E0:CD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4AD008EC0DECBF57628CD7D2C43DA18520562847
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ce4b79c-26b8-4e2b-8de2-ef5254a2c33e.roa
Signing time: Tue 20 May 2025 19:10:13 +0000
ROA not before: Tue 20 May 2025 19:10:13 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:6040::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 21:08:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:d0:08:ec:0d:ec:bf:57:62:8c:d7:d2:c4:3d:a1:85:20:56:28:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:10:13 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=3cfecca095d84fc44905994b382d3be726ec830406219e37e489d802c689691f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c4:31:dc:4b:cd:52:de:56:52:20:09:79:15:
91:d0:49:7e:30:5d:5c:e6:99:8b:ad:a6:50:25:6a:
34:30:24:8f:b1:2d:c3:92:e7:76:bb:64:3f:d3:63:
07:f3:aa:b5:6c:a0:b5:d6:24:4e:c6:a7:eb:ea:62:
1c:e6:c6:34:12:11:18:c5:2f:58:ac:3e:92:63:c1:
95:a2:82:4c:74:be:8f:e0:28:12:95:f9:f9:9d:e9:
73:01:af:0b:7b:b9:34:f0:11:f1:2b:3f:42:07:3f:
1e:8e:a5:2c:2f:ae:14:df:fb:ed:f3:51:93:55:ca:
2c:13:5c:1b:65:d0:62:07:9e:6e:66:79:3e:94:59:
8f:d0:70:4b:d7:76:22:04:98:dc:94:a5:32:5a:37:
2e:ba:94:3d:fa:ed:33:51:e4:9e:72:09:ab:29:84:
c6:6b:9e:bf:59:5b:8c:17:9f:cf:97:31:e0:63:05:
b9:8f:98:57:0e:21:ed:60:dc:b0:1f:95:cc:4d:33:
ca:54:bd:d1:45:19:ed:d7:04:0b:ee:a1:4f:dc:d8:
2c:8d:f2:f6:3f:1a:1a:b1:68:fa:f3:62:12:3b:4c:
b7:4c:e6:a3:92:13:b1:d7:98:c9:d6:c4:2c:b0:99:
e7:8e:89:e7:2a:33:8c:c0:03:48:06:3d:d7:0f:d1:
8d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:31:3C:2B:67:DE:D5:9A:D7:D0:19:10:B0:AA:95:84:64:36:E0:CD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ce4b79c-26b8-4e2b-8de2-ef5254a2c33e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:6040::/48
Signature Algorithm: sha256WithRSAEncryption
68:72:b0:9b:6e:a9:9e:c0:ef:a2:75:3e:46:0c:a2:be:2f:95:
2b:f5:bf:7d:a4:af:54:4b:89:fd:61:0c:0d:84:63:f0:74:6b:
63:11:20:c9:6e:b6:c6:0c:bc:ae:ea:a5:f0:43:fb:4b:0c:8e:
5e:55:d2:2e:da:35:9c:94:0c:b7:0a:3a:bf:35:00:08:55:33:
5f:43:c4:b8:9f:c9:0c:5e:8b:42:11:d0:35:5c:59:bf:2e:a9:
64:20:0d:43:5e:54:0e:f0:8f:eb:c7:de:73:93:47:74:a1:6d:
11:b4:37:90:02:78:a5:d3:3c:c3:cc:21:12:10:1c:53:13:23:
2a:b0:eb:ba:f5:18:02:e0:3b:9f:ac:8a:60:44:5e:1a:ba:1e:
96:98:f1:a4:24:77:c8:b7:d5:1b:fc:c9:7b:4c:3e:e5:f1:37:
05:6a:cb:08:6c:68:89:cc:38:6c:8b:13:94:9b:a1:e7:82:91:
b1:a6:b9:14:dd:b2:75:33:8f:63:0f:a0:4a:68:16:5f:e0:36:
1e:7d:d4:e9:02:21:25:fc:85:df:b0:6e:4d:eb:74:a4:b4:e3:
4d:cb:20:4b:92:ca:69:70:62:e1:3e:fa:d4:2d:a9:2e:d2:d8:
3b:7d:d0:0a:06:e7:86:f5:05:98:92:68:1f:55:bc:92:4b:41:
2b:df:ac:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:57:16 2025 by rpki-client