Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e707bb7-0fb9-46f4-90ac-cd37b9f1f306.roa
File: 6e707bb7-0fb9-46f4-90ac-cd37b9f1f306.roa (raw, json)
Hash identifier: /hsLx/OIqBsZPWiKJSDEAdbwVrWH8BtZkVHqg8RJXGI=
Subject key identifier: 35:A2:2C:A6:E9:E9:67:65:D9:4B:61:5B:AB:00:D5:7C:71:D3:CB:EF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2F6211E0E5867111525629AC720E959C5D017DDC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e707bb7-0fb9-46f4-90ac-cd37b9f1f306.roa
Signing time: Thu 22 May 2025 01:22:26 +0000
ROA not before: Thu 22 May 2025 01:22:26 +0000
ROA not after: Thu 26 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:5080::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 21:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:62:11:e0:e5:86:71:11:52:56:29:ac:72:0e:95:9c:5d:01:7d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 01:22:26 2025 GMT
Not After : Jun 26 23:59:59 2025 GMT
Subject: serialNumber=42ff3d7b8ad86937fd6c6b5536d8916973fd9302fe8c605564c6498abc9c6fb4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:90:32:e0:fd:4d:90:65:7d:d3:2c:fd:6e:
e5:56:b9:13:95:b4:02:46:bf:18:12:64:ce:18:c9:
f7:3e:8c:59:90:9b:ab:ad:a1:dd:19:df:6b:e5:1d:
ba:b0:81:e5:28:1c:db:7c:4a:6c:88:ee:a0:46:6b:
21:1c:d7:80:fe:95:14:22:2b:0f:9f:6c:5f:43:46:
ad:36:12:f0:f7:19:d3:1a:cd:c0:61:00:fc:3e:d6:
b8:99:45:96:11:97:29:8f:1d:fc:55:fb:8d:13:f5:
d2:aa:d5:fd:bc:1b:0b:ac:ea:8c:cc:44:8b:db:60:
2a:6c:c5:b1:83:f7:ca:62:db:9d:3d:f2:b6:ee:64:
2e:ac:ac:15:c0:bf:07:53:01:71:ba:51:79:3a:4d:
f1:ff:5c:b3:98:48:84:62:40:22:06:6f:e1:bc:1e:
b0:88:df:20:86:c2:27:c6:00:b9:fd:b7:f8:01:f0:
61:c4:56:82:ac:d1:78:ec:d9:37:ab:bf:3b:5f:1d:
c3:87:35:81:e0:1f:2c:5f:66:63:eb:63:6a:88:b9:
a7:2d:9f:96:f2:e1:13:84:4f:7a:34:29:e4:9e:5e:
d1:cb:b9:63:1e:b6:5e:c6:64:35:00:9e:b8:86:53:
b4:80:5f:7d:e1:52:1f:80:3b:ed:bc:3b:e9:56:3c:
b9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A2:2C:A6:E9:E9:67:65:D9:4B:61:5B:AB:00:D5:7C:71:D3:CB:EF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e707bb7-0fb9-46f4-90ac-cd37b9f1f306.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:5080::/48
Signature Algorithm: sha256WithRSAEncryption
ba:42:74:b1:3a:85:9a:1c:db:ac:2e:d3:4c:78:88:a8:e1:1e:
a1:cc:09:91:43:e9:4c:c2:5b:77:c8:1d:18:81:5f:3c:6c:be:
0e:df:b5:4b:f7:46:64:59:bc:18:36:7d:19:5a:92:b0:e2:b3:
5e:75:5d:02:fc:71:47:95:bc:d0:79:7b:f6:ba:88:4c:9c:8c:
73:4e:ab:5c:36:b6:cf:5d:77:82:cd:8f:dc:cf:09:e2:88:96:
c2:d1:18:a7:e6:7e:be:c6:b0:a0:46:97:7b:51:c2:6d:fe:c0:
59:c6:91:32:37:93:25:61:0e:2d:23:b6:db:95:e3:d4:20:f4:
24:9b:6c:a8:7a:8e:8b:40:98:08:f7:71:48:53:87:73:3d:35:
e0:ab:ba:73:6d:08:b7:5f:8c:f9:c5:00:53:89:d2:5d:f9:c1:
00:cc:7b:7a:bd:62:0b:2c:80:c4:56:2b:70:f8:58:8b:c5:a5:
21:06:78:99:62:c4:f1:fe:ff:f7:6a:bc:49:69:6e:f9:07:9f:
f5:78:e7:4f:95:49:39:31:41:03:b9:ca:7f:fa:e6:19:0c:36:
10:b4:b1:f8:f2:0d:78:b2:a0:94:6c:f6:1e:40:fb:04:1d:82:
57:3b:4a:95:d6:eb:37:e0:61:ce:80:2a:46:c5:e6:31:bf:3d:
ea:0a:53:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:58:35 2025 by rpki-client