Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/516fa848-805f-4093-b4bd-dc0af15f57b0.roa
File: 516fa848-805f-4093-b4bd-dc0af15f57b0.roa (raw, json)
Hash identifier: NT9M4/yIDONcFKwm4nBGffll4/aICMiCsLsS27PMJGo=
Subject key identifier: 8C:D8:54:5F:18:E1:E6:2C:A7:DD:2B:FF:B6:A7:1A:A0:70:04:CB:73
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 449B5F54F290926B0CC21C921B29D391ACDE6E4F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/516fa848-805f-4093-b4bd-dc0af15f57b0.roa
Signing time: Mon 12 May 2025 16:20:03 +0000
ROA not before: Mon 12 May 2025 16:20:03 +0000
ROA not after: Mon 16 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05b:1000::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 18:52:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:9b:5f:54:f2:90:92:6b:0c:c2:1c:92:1b:29:d3:91:ac:de:6e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 12 16:20:03 2025 GMT
Not After : Jun 16 23:59:59 2025 GMT
Subject: serialNumber=b63b0ca876e00ec4296a8a454e325839b37b786b7606d5d2570abdc6f2b80d3b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:15:75:fc:7c:97:17:23:51:64:f4:ef:05:
90:34:cb:f0:72:9e:8c:90:4e:8f:67:b0:07:fa:5c:
af:58:10:f2:37:cc:16:ff:9d:06:25:92:8b:1d:a6:
5c:6b:a8:34:d4:4b:48:43:aa:01:ca:a7:69:d8:76:
72:9e:a1:b8:93:b9:bd:2e:1a:b9:8d:a3:13:d2:7b:
ab:65:f9:75:15:bc:27:d6:2a:cd:bf:2e:a0:f3:2c:
ee:10:80:94:8d:69:2e:0c:4c:15:ce:1b:e6:48:60:
fd:ae:c0:39:ce:e5:7d:c6:c8:90:5c:00:22:3e:24:
41:2f:62:2a:3e:c9:ef:69:c6:de:ef:64:ab:59:c4:
cf:fa:e8:4e:98:75:98:9e:64:d8:a9:b0:e2:27:69:
87:d9:7a:b5:54:73:e0:12:ec:1f:19:f2:3a:7b:43:
aa:f8:b5:5a:51:bc:d0:de:94:20:8f:18:f8:d8:04:
75:01:b8:d3:7b:4c:03:e1:5b:bb:12:4e:da:9e:1b:
2a:a5:30:ed:58:24:08:99:bb:ee:02:8b:5f:40:11:
16:04:8a:b1:5e:7b:a8:80:f2:e8:c4:68:a0:8c:04:
45:e4:37:53:b4:91:1f:9f:3d:c0:31:c0:71:aa:11:
97:5e:62:7a:27:f8:38:34:76:52:7f:7b:61:4e:ef:
b1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D8:54:5F:18:E1:E6:2C:A7:DD:2B:FF:B6:A7:1A:A0:70:04:CB:73
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/516fa848-805f-4093-b4bd-dc0af15f57b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05b:1000::/40
Signature Algorithm: sha256WithRSAEncryption
58:7f:a9:17:33:49:78:f7:5d:21:49:df:6b:a3:33:9c:d1:5e:
54:77:06:36:12:2a:dc:04:0e:e2:14:c4:3d:4d:71:a3:ca:ff:
1a:29:a4:d4:ad:94:11:3e:40:13:aa:66:c1:c3:4d:3b:c8:09:
b2:a7:45:f9:b2:7b:95:f0:df:69:f6:a1:51:4f:11:32:6e:e4:
55:40:76:c2:e8:47:fe:ef:15:09:b3:3f:fc:88:91:c8:43:6b:
5d:17:d1:26:85:88:6b:aa:44:f2:df:14:64:30:f1:78:ad:fb:
4b:6f:d1:5d:92:12:a0:b6:c7:0e:f4:bf:4f:f2:25:29:cc:d6:
d9:15:8b:11:5c:d5:21:71:71:91:48:17:66:35:fc:77:9b:76:
92:6c:3e:4c:cd:79:7e:8f:65:18:f9:d1:62:1f:90:74:f6:62:
3d:26:a8:e0:02:7f:6f:46:ea:45:1c:92:b6:7e:a0:2d:70:6f:
02:a9:1a:9c:ae:65:f9:63:90:e3:63:80:22:17:26:73:67:9b:
15:16:66:19:a2:f3:cf:eb:72:3f:3d:22:ba:cd:c6:75:91:03:
61:e6:b2:72:a4:26:a0:30:8a:11:66:a2:56:d3:61:ae:d6:5a:
09:7f:b6:c9:51:a7:34:17:03:27:68:04:92:1b:d7:e6:35:d4:
a7:e5:e5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:38:37 2025 by rpki-client