Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/81f42a93-1149-4ab0-ac9d-c3d0989d729e.roa
File: 81f42a93-1149-4ab0-ac9d-c3d0989d729e.roa (raw, json)
Hash identifier: 027k58o+79CABlqBs/y4+qHtKJCuJ4SxDJnW6VlAMVk=
Subject key identifier: F0:1B:45:91:39:3E:07:45:B6:96:3B:62:32:82:5B:7F:76:BC:BB:2F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2EC0C19385484B8C51112CABC9CFBD3453BC8B82
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/81f42a93-1149-4ab0-ac9d-c3d0989d729e.roa
Signing time: Mon 14 Apr 2025 13:52:15 +0000
ROA not before: Mon 14 Apr 2025 13:52:15 +0000
ROA not after: Mon 19 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06e::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 17 Apr 2025 16:39:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:c0:c1:93:85:48:4b:8c:51:11:2c:ab:c9:cf:bd:34:53:bc:8b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 14 13:52:15 2025 GMT
Not After : May 19 23:59:59 2025 GMT
Subject: serialNumber=e0bfcac4323a5d8b7e01176d65364e1f4fa5c6b4ceebbf8ef8f63ac0326788d0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9e:3b:57:d3:0f:a9:e7:a8:84:87:74:b3:a0:
b3:e8:50:7f:fc:11:8b:08:fd:ae:b2:54:e2:13:8d:
9b:be:5c:66:c7:ba:2f:56:72:27:e3:7b:73:3a:eb:
a1:d6:0b:a1:4e:54:e0:ff:83:ec:97:f7:be:0b:02:
bf:5c:a9:50:f3:76:fc:71:70:4d:84:2c:37:9d:20:
14:e3:d3:f8:68:a1:af:7e:8f:64:f6:bb:88:21:02:
05:ea:08:8b:05:6a:48:d2:13:fd:cd:a9:49:51:cb:
d1:1f:a1:9e:f3:e6:3a:1f:26:97:b1:d5:19:57:9d:
25:40:c2:a7:da:cd:76:3a:52:8b:35:da:81:89:14:
77:a2:48:85:0d:45:a3:69:1a:5d:2f:a1:4d:13:d4:
7f:e5:ba:5b:5e:45:f2:e5:e7:3a:0e:14:c7:f9:7e:
cd:e8:28:f5:02:87:7e:58:40:1f:2e:c6:5b:c0:40:
25:58:61:18:a9:65:c0:10:b2:2b:ba:a0:3e:79:af:
e3:b7:5d:5b:0d:2f:bb:3b:93:47:b7:e9:7f:70:0a:
aa:b0:b6:da:58:10:a9:8e:02:38:41:db:f1:7d:9e:
aa:20:a7:08:13:08:5a:e3:d6:b7:8d:38:ab:c0:90:
cc:87:a7:f2:3b:8d:cb:cf:aa:00:1c:6d:a7:7a:36:
ef:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1B:45:91:39:3E:07:45:B6:96:3B:62:32:82:5B:7F:76:BC:BB:2F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/81f42a93-1149-4ab0-ac9d-c3d0989d729e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06e::/32
Signature Algorithm: sha256WithRSAEncryption
31:a4:2d:8a:90:b6:f8:2a:cc:e8:05:f1:a3:75:6f:f1:c5:e8:
6f:f2:c2:11:4a:3a:60:9c:cc:18:70:98:f2:45:ef:ee:0a:4b:
31:42:99:c2:44:ec:e3:da:b3:66:cb:09:cc:4d:56:6d:22:cc:
32:dc:10:b9:70:ac:76:c7:7b:60:45:4f:cc:48:03:e8:09:48:
db:38:3e:e0:2b:75:4a:2d:a1:6b:7c:e4:e6:4a:92:f8:0d:b9:
a2:5a:ba:85:ce:30:67:1a:ef:30:2d:7a:4b:25:c3:6b:a2:04:
46:35:9d:20:a7:1d:4d:95:af:1f:3a:3d:87:0d:c7:73:36:53:
4d:81:ec:13:52:8d:f7:35:3c:b1:20:5f:fd:04:c8:4d:a1:e9:
05:33:f8:15:dc:b9:15:16:9c:72:25:58:b9:1f:3a:bd:91:cd:
11:92:10:6a:a6:2b:0f:74:87:8f:bb:17:64:f2:85:7b:d7:62:
52:76:d0:0f:0b:9e:81:73:2d:d2:27:d5:1b:2c:b5:31:15:4d:
be:26:2a:97:e0:9f:52:30:af:19:8e:15:10:5f:65:da:87:e5:
fc:eb:67:61:7a:6f:12:04:b1:72:9e:68:f8:1e:4f:94:66:88:
89:9d:c0:30:9e:2e:2a:0a:d5:46:e3:55:9b:d9:fd:ea:80:fd:
4c:a9:9b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:46:07 2025 by rpki-client