Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c370eb8-54a5-4673-8a65-6e9076b61352.roa
File: 3c370eb8-54a5-4673-8a65-6e9076b61352.roa (raw, json)
Hash identifier: rBVIvHcOQY3JESODggMmX9zrGdFDdea3NA2vQOcGUR4=
Subject key identifier: 11:4E:B6:E0:D5:3D:FC:01:E5:DA:7B:7B:0E:0B:C1:7B:D2:00:60:A1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 77BD1375A0CD5ED1D9CAB22F49CFB8430F9F1D51
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c370eb8-54a5-4673-8a65-6e9076b61352.roa
Signing time: Thu 22 May 2025 01:36:59 +0000
ROA not before: Thu 22 May 2025 01:36:59 +0000
ROA not after: Thu 26 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:b000::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 03 Jun 2025 20:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:bd:13:75:a0:cd:5e:d1:d9:ca:b2:2f:49:cf:b8:43:0f:9f:1d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 01:36:59 2025 GMT
Not After : Jun 26 23:59:59 2025 GMT
Subject: serialNumber=ff52236d4ba7c3f484fb882edf4d8309e8151afc263bb34a33a30062cfc3043d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6e:83:1f:fc:5b:e7:ef:a5:bd:57:a8:ed:d0:
41:93:50:9a:2e:de:e6:f5:50:5b:5c:47:f4:b9:b6:
b9:93:3a:42:bc:2e:ca:01:95:19:f9:c0:b1:05:8e:
e9:b8:44:02:9a:73:7a:2b:8f:dc:48:92:13:db:cc:
50:c1:ab:17:28:f7:a6:42:71:cc:fd:26:d2:d6:27:
6b:94:8f:39:22:64:6a:4f:20:f1:d8:6e:ed:10:ce:
d9:96:a4:1d:68:20:c3:83:c0:a2:d9:8f:e8:81:95:
c5:b2:b8:43:74:74:0a:4d:16:2b:4b:bd:b1:37:f5:
c2:52:93:55:16:3c:ee:d2:a2:ca:8a:85:75:b2:66:
1b:98:08:39:ee:74:c8:46:e3:23:74:74:9d:aa:c7:
a8:f9:ce:18:ec:26:c1:15:e0:bd:72:6b:c3:98:56:
22:d8:be:31:56:6c:b9:be:0d:de:d8:ae:86:8f:11:
4d:b2:cd:b3:4a:94:ec:f0:b4:5d:39:02:17:a7:6c:
76:14:c6:cb:55:b9:f4:f8:4e:5c:eb:b5:dd:3b:06:
4d:45:bd:7e:69:46:f2:9b:79:02:c2:1c:10:85:6c:
e3:3c:3a:98:59:ef:81:86:a2:a4:e5:8c:61:2f:04:
d0:1a:a4:d4:82:06:84:70:eb:d6:a8:5b:9e:e8:a0:
50:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4E:B6:E0:D5:3D:FC:01:E5:DA:7B:7B:0E:0B:C1:7B:D2:00:60:A1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c370eb8-54a5-4673-8a65-6e9076b61352.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:b000::/40
Signature Algorithm: sha256WithRSAEncryption
0b:f6:9b:f0:5e:b9:ab:b0:bb:dd:8e:f8:1b:26:d2:57:9b:9d:
d4:fa:f1:6e:31:3b:ca:bc:6d:16:fe:90:50:bd:46:ab:68:44:
7f:3a:24:c4:10:60:fa:cf:5f:cd:b1:ad:9f:54:89:0e:d9:f1:
63:5e:33:57:7e:2e:4d:7b:73:33:e0:18:88:bc:b7:c9:4e:27:
bd:b1:5f:9a:e1:55:74:32:83:e4:d1:ac:1e:1b:f3:ce:19:69:
1e:96:1c:31:d9:54:97:2c:72:09:b9:62:8e:c7:85:d2:85:e6:
0c:17:38:cd:7f:63:54:23:22:ce:47:cb:29:be:ae:9b:19:e6:
16:b2:4e:fd:08:f7:75:24:10:42:c0:8c:0d:9d:b4:ce:a6:ac:
11:c2:db:99:29:26:28:81:9a:f4:10:c8:cb:bd:d5:a3:ad:4b:
f4:75:be:4a:ac:fb:3f:ad:ee:43:40:72:5b:4d:31:21:62:95:
67:ad:00:45:82:1f:3e:cd:18:c0:5d:1d:91:e5:27:c9:4b:49:
ed:9b:cf:a6:f4:cd:34:63:a6:ae:6a:de:89:2f:db:29:c7:6e:
b8:e3:fc:53:1c:e7:f9:dc:97:7c:7e:3d:28:2f:c4:09:5a:cb:
3c:15:f8:39:db:ae:a6:af:ed:77:c6:66:bb:2f:0b:49:31:ca:
2f:d7:b1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:00:54 2025 by rpki-client