Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/638086cf-e82b-4323-a185-d95bbb37839d.roa
File: 638086cf-e82b-4323-a185-d95bbb37839d.roa (raw, json)
Hash identifier: mCQjkuUzLrCKzQynZzcgBySx38ScBcStwE46/WMMLjw=
Subject key identifier: D8:0F:52:8E:C2:D1:B0:88:88:72:D2:41:90:26:4F:CE:81:E7:D9:17
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5A56D8DDD827777AD3DAF403C5F35A61C036F2D4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/638086cf-e82b-4323-a185-d95bbb37839d.roa
Signing time: Thu 17 Apr 2025 16:38:48 +0000
ROA not before: Thu 17 Apr 2025 16:38:48 +0000
ROA not after: Thu 22 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06e:a000::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 17 Apr 2025 20:37:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:56:d8:dd:d8:27:77:7a:d3:da:f4:03:c5:f3:5a:61:c0:36:f2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 17 16:38:48 2025 GMT
Not After : May 22 23:59:59 2025 GMT
Subject: serialNumber=224d5699214444b3ae5f940cc5eb07c4ea8f15e9913bb78f94a310c47a7ad8b3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:02:38:e2:ab:d3:f0:14:1f:fe:a0:69:70:59:
bf:5b:64:3a:3c:e1:28:a9:49:b5:f6:29:2d:36:c9:
ed:20:bc:f1:42:77:9d:8a:24:15:94:ef:8d:0c:c9:
b5:cc:00:c3:4e:2d:71:31:5a:52:27:66:7d:72:c8:
17:b9:a6:c8:52:d8:58:1d:a0:ee:81:64:9a:e6:38:
a2:c8:ad:f1:fe:7f:0d:f3:22:22:20:22:c0:9a:85:
f1:14:14:2b:83:17:fe:51:ab:55:fe:04:cb:71:b8:
98:ca:1b:81:d3:1c:4f:68:4b:66:72:b2:68:f4:b2:
51:15:46:a3:be:ad:ce:10:48:54:f5:e8:db:2e:6e:
66:38:0f:9c:f0:5e:e8:79:43:57:4a:4a:b4:99:6a:
2c:cb:ab:b6:c2:65:8e:79:40:b9:16:cd:7b:46:a0:
3a:3c:23:97:28:6c:e5:09:8f:86:04:44:7f:36:9d:
8f:94:4d:57:07:9c:2a:42:ff:6c:de:60:84:09:0b:
34:14:d2:f8:80:95:12:f3:73:5e:10:11:fd:1b:42:
e7:ba:be:2f:fd:6f:89:08:4b:2a:b7:af:74:1d:16:
ff:09:85:42:a2:24:f4:0e:d5:b6:2e:fa:c4:de:32:
20:26:d1:f7:a3:46:db:cc:b2:21:fb:ab:b6:35:ec:
68:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0F:52:8E:C2:D1:B0:88:88:72:D2:41:90:26:4F:CE:81:E7:D9:17
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/638086cf-e82b-4323-a185-d95bbb37839d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06e:a000::/40
Signature Algorithm: sha256WithRSAEncryption
3f:67:70:65:d5:e9:fd:ee:15:2d:36:48:0f:a0:78:bc:96:0d:
ea:c4:70:5a:50:82:64:4f:81:cc:9e:1a:43:93:1b:8c:27:15:
7a:48:db:06:a2:a9:3a:b6:ed:aa:13:69:e4:9c:f9:2f:65:19:
28:ef:41:ca:da:a6:6e:77:0e:25:58:0c:10:28:54:fc:cd:10:
9f:73:23:af:6a:e2:5c:df:24:79:fd:37:94:a7:8f:24:19:22:
44:0b:db:0f:e7:6b:04:f9:bc:17:fd:29:59:56:e2:3e:51:2b:
a9:20:de:77:e2:cf:4e:09:a9:bf:91:05:4d:1f:65:31:70:04:
b4:66:aa:65:e2:bf:20:aa:db:05:b3:f9:5b:85:20:25:d9:ce:
9e:37:5d:cd:57:39:e2:e5:b3:34:50:5d:42:3e:1f:53:8c:af:
ab:05:27:4c:e6:14:c1:76:43:cf:8b:9e:50:28:df:f3:39:10:
01:61:0f:c5:37:a1:28:75:8f:84:b2:53:d9:3c:74:2f:ce:e3:
06:e1:80:ea:67:a7:01:09:68:c2:4b:1a:54:ee:ba:e8:0c:3c:
ed:e9:82:e6:11:01:81:e6:a0:e0:c6:b4:4b:a0:db:ee:ed:32:
13:0c:52:8b:a5:fc:cf:89:fd:c3:e4:62:56:58:2e:04:1f:e6:
5f:00:92:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:50:35 2025 by rpki-client