Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25828dd0-b4f8-4565-8518-552462044a44.roa
File: 25828dd0-b4f8-4565-8518-552462044a44.roa (raw, json)
Hash identifier: rnQPHBNF06XNMv1ava/8jqwTsEiocWCGHPKVLyrCKS0=
Subject key identifier: 6A:95:32:E9:FC:BC:E5:8A:7A:55:7B:CB:C0:9F:25:71:94:14:06:2B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 166C6D0D093397546F8C5BFFF703C6CB81ADD247
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25828dd0-b4f8-4565-8518-552462044a44.roa
Signing time: Thu 22 May 2025 01:24:02 +0000
ROA not before: Thu 22 May 2025 01:24:02 +0000
ROA not after: Thu 26 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:90c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 21:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:6c:6d:0d:09:33:97:54:6f:8c:5b:ff:f7:03:c6:cb:81:ad:d2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 01:24:02 2025 GMT
Not After : Jun 26 23:59:59 2025 GMT
Subject: serialNumber=550bfe80f88e9077815ce908a93cffb1802a97b26efb1c7afa0d56a316ae1d66, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:e0:8b:72:11:e8:16:e0:b4:b7:d0:08:8d:
6e:28:6c:8f:8e:80:48:9e:a4:c3:23:64:5d:e1:ce:
41:fc:d0:2b:1d:d0:75:89:6f:ea:c6:47:e9:0f:1e:
b4:3d:fa:e0:34:92:89:5a:84:57:e4:26:f7:f8:d7:
71:78:33:7b:91:3f:e7:02:2c:35:17:7b:48:eb:6a:
bb:ed:98:c0:b8:1e:b5:da:4a:a2:d4:a6:3e:a6:ed:
f2:61:f1:d7:65:ff:55:fe:b7:b1:d0:3c:55:ba:03:
15:46:b5:5f:bc:66:71:be:6f:d9:1a:bb:8e:49:74:
59:fb:9d:43:f9:25:47:9c:5c:ea:68:6e:d5:d4:5e:
cb:b9:96:a6:af:b9:0b:d9:7c:e2:27:6b:67:9b:d4:
3b:27:9f:5b:d7:25:85:67:18:aa:ba:40:ff:ad:03:
bb:22:b4:48:f3:a1:fb:fa:dc:f4:88:36:a2:2b:74:
59:c2:d6:72:5a:74:56:2f:6e:94:c7:f8:c4:98:21:
9f:90:d0:3c:21:a7:e8:6c:01:fd:49:6e:13:72:c6:
b2:3e:90:1b:c2:af:be:51:17:66:9a:60:ab:f8:d4:
9e:4b:fb:66:a2:56:11:19:4a:e2:17:cf:55:00:d3:
6c:03:23:9b:39:ae:2b:cf:61:ec:89:91:69:c7:ba:
9f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:95:32:E9:FC:BC:E5:8A:7A:55:7B:CB:C0:9F:25:71:94:14:06:2B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25828dd0-b4f8-4565-8518-552462044a44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:90c0::/48
Signature Algorithm: sha256WithRSAEncryption
04:44:06:c0:5b:5e:e9:90:4e:cf:37:74:ff:ac:37:78:34:1f:
47:88:3f:db:0a:7b:34:6d:12:70:03:d5:a4:22:f3:36:d3:86:
82:03:98:c4:e3:c4:ab:8e:fd:05:ef:18:23:22:38:1e:0c:0a:
7a:25:07:18:c5:b1:65:0b:fb:00:b1:db:7a:ac:8f:85:46:9d:
6b:d2:68:18:8c:9e:6a:2d:5c:8f:bd:0b:b2:dd:cc:2d:83:ec:
c6:90:60:29:ff:6e:f5:a6:f0:eb:6a:cf:02:64:30:df:d9:62:
c4:a1:4b:0a:77:7d:a0:5c:cc:f4:eb:88:71:e7:56:5c:90:7d:
b4:e0:7e:c9:d4:43:b8:42:b2:0d:3a:18:a5:9a:2c:df:1c:4b:
86:1d:e3:56:d6:4b:b5:2b:de:34:64:35:a2:b4:6b:12:dd:67:
ae:d0:db:a4:0f:ea:c1:bf:16:10:cb:6b:4c:d0:bc:e5:12:4a:
e3:3a:52:6d:4c:30:66:d4:be:f3:a1:48:26:10:d5:f6:f6:67:
a9:f2:94:05:7e:f6:8c:58:38:89:de:69:c8:5b:98:e5:fd:e6:
fe:5e:96:ac:4f:6a:17:52:3e:1b:56:2a:d7:62:34:6d:1a:86:
aa:79:e5:7e:b9:27:e0:f3:a9:51:5f:9d:3e:97:56:b8:4f:5f:
3f:21:4d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:07:48 2025 by rpki-client