Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3fa5589f-917e-4d55-9b50-251b7e2f5d97.roa
File: 3fa5589f-917e-4d55-9b50-251b7e2f5d97.roa (raw, json)
Hash identifier: MHgm3iqw/5SSxPjkDFad0ug9jvz+gl0rDIckfoDJymc=
Subject key identifier: B0:58:3D:DA:69:35:B5:80:48:D8:EE:64:6C:58:A1:02:75:59:08:32
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 542C415DBF8D5402BFD1601FAAE75D6CC836BFDF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3fa5589f-917e-4d55-9b50-251b7e2f5d97.roa
Signing time: Tue 20 May 2025 18:51:10 +0000
ROA not before: Tue 20 May 2025 18:51:10 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:e000::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 03 Jun 2025 20:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:2c:41:5d:bf:8d:54:02:bf:d1:60:1f:aa:e7:5d:6c:c8:36:bf:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 18:51:10 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=962cf4f970144c2617274b087d41ce7d573e38a158044bae20573c1026fc0be8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:16:f2:21:16:42:ad:18:df:59:ce:b4:38:32:
ba:74:3c:bd:f4:c4:f4:39:6e:bb:fb:14:39:99:89:
f3:12:46:12:1c:50:0d:17:14:f6:e0:30:25:f1:f6:
0a:bc:61:0b:1c:b3:b0:33:75:eb:49:c8:7a:2e:44:
02:b8:77:cf:1b:cb:a4:ad:6f:dd:ff:24:b9:a6:a4:
9a:61:c9:2d:86:26:31:50:f7:f2:9a:9d:51:09:e2:
12:60:2e:4a:ec:7a:be:69:97:87:66:f2:03:1f:7b:
11:c8:38:84:02:e4:e2:1d:c0:da:e6:6d:53:2c:69:
57:70:c7:de:c8:57:ae:73:99:51:f3:77:8c:5d:3a:
71:c8:a1:7b:81:6a:04:10:14:74:6f:50:75:40:a1:
f4:82:6e:fb:3d:da:ca:92:d1:79:9e:63:97:2f:0e:
26:6c:83:5a:b7:b3:65:a2:69:c4:5a:84:9b:65:8d:
51:fd:2e:7c:61:5b:36:11:1b:3b:3c:90:d4:f2:78:
16:cc:68:70:45:ff:2e:98:8d:a7:06:5e:fb:c6:39:
ea:10:ca:bd:cd:8a:f7:68:2b:de:90:48:d7:2b:93:
78:89:2c:90:d6:37:87:02:97:0a:b9:39:39:67:17:
e9:57:3d:d1:b4:5a:59:75:cc:d3:ad:48:70:f4:e2:
79:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:58:3D:DA:69:35:B5:80:48:D8:EE:64:6C:58:A1:02:75:59:08:32
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3fa5589f-917e-4d55-9b50-251b7e2f5d97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:e000::/40
Signature Algorithm: sha256WithRSAEncryption
83:d7:d1:43:df:c7:6b:0d:dc:a6:21:0f:0d:99:0f:96:e9:4c:
8e:de:20:bb:a2:a9:fd:58:63:d5:25:75:80:5b:1d:4b:3a:a0:
72:f6:52:e6:5f:fb:94:55:52:6f:21:a6:00:45:87:54:89:27:
ff:d0:b0:ee:d8:6c:b8:19:79:39:f6:9c:77:c1:8f:59:64:c5:
54:03:f7:52:67:29:54:72:2a:0f:03:81:ce:f8:1d:09:76:7a:
75:e4:ec:ac:3b:1e:51:8f:94:f2:4b:7d:9a:7b:85:60:57:66:
9f:82:1d:09:96:7d:ac:3b:78:3a:58:55:77:df:bd:46:e5:ef:
b4:2a:48:e1:77:38:ee:85:c9:41:16:f7:0a:c2:d7:51:ce:d1:
3b:24:ad:d7:8c:57:aa:c7:fe:60:bd:92:15:02:03:22:42:17:
08:7d:4a:71:f4:5d:15:b4:c1:3f:6c:69:77:6d:bb:97:00:ab:
2b:7b:31:c0:f9:81:c3:41:fa:58:dc:c1:10:f8:70:b2:f4:69:
6f:19:c3:7f:c7:ef:5d:26:58:2b:d4:3c:35:d4:d8:b0:95:8c:
58:a5:75:e9:fe:17:f9:b9:f3:79:d6:ae:c2:51:94:c1:6d:58:
c8:9a:b0:10:2c:23:2d:d6:18:27:91:0d:0b:a6:e0:85:86:66:
a7:d2:d2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:58:43 2025 by rpki-client