Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9cc30d00-3b04-4784-bb45-a31801f1706c.roa
File: 9cc30d00-3b04-4784-bb45-a31801f1706c.roa (raw, json)
Hash identifier: XJIryy9WPsOUhD64EHXQE9eliM/Vw76xm06SVqYvpoI=
Subject key identifier: 34:F8:6E:C8:05:7D:B1:2C:DF:F6:03:71:4A:51:52:21:CE:24:A4:9F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5BAD3984039B59985B5ED12B945B9CC0B6E2BDD9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9cc30d00-3b04-4784-bb45-a31801f1706c.roa
Signing time: Mon 12 May 2025 16:20:44 +0000
ROA not before: Mon 12 May 2025 16:20:44 +0000
ROA not after: Mon 16 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06e:c000::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 18:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ad:39:84:03:9b:59:98:5b:5e:d1:2b:94:5b:9c:c0:b6:e2:bd:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 12 16:20:44 2025 GMT
Not After : Jun 16 23:59:59 2025 GMT
Subject: serialNumber=dfa48f2208105a3a9d2a428ef1bf93b7727c250b67cdfed45413844512852a74, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:65:3f:58:3f:ad:b9:59:a1:22:bf:c8:6a:
0f:82:49:f3:71:cc:ec:e6:81:4d:2b:03:2b:69:9b:
86:17:09:12:b7:22:1a:af:92:c8:62:54:7e:d9:ef:
c2:41:06:47:69:83:3f:e0:b0:00:d4:0e:12:5b:25:
ff:c2:da:d1:f8:a4:de:1b:6b:ba:6d:9e:d8:69:a7:
61:49:d2:f4:ee:ba:e5:a1:b3:b3:33:d8:76:5e:ce:
84:f2:32:4a:3d:4c:95:b6:63:6a:e6:0c:d1:4f:7f:
cd:15:6d:d8:94:8d:7f:6c:a2:1c:d3:83:64:35:9e:
fa:96:87:ac:f6:26:5a:51:fa:d5:a4:83:0c:63:ad:
21:8b:3f:1f:d8:00:92:e9:ff:b0:4f:a9:15:94:5d:
7c:a5:32:ea:c3:b9:9a:9c:8d:cf:7e:f9:09:b0:96:
d2:af:de:81:89:8f:8c:a1:1c:a5:de:0a:86:6e:fc:
62:ce:fc:db:14:b3:ac:9c:e9:69:db:72:8e:6e:57:
10:93:53:68:25:05:ed:a6:9b:18:aa:44:29:cf:86:
84:e2:d9:00:c0:d4:b4:b6:d5:e6:e4:c8:80:65:d0:
77:07:01:78:c9:c2:b9:b9:44:34:b4:ba:9e:d5:0a:
35:93:45:56:b7:c2:8b:f1:70:68:7b:fc:ea:63:8c:
e2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F8:6E:C8:05:7D:B1:2C:DF:F6:03:71:4A:51:52:21:CE:24:A4:9F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9cc30d00-3b04-4784-bb45-a31801f1706c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06e:c000::/40
Signature Algorithm: sha256WithRSAEncryption
74:38:a3:06:e1:26:42:c6:3d:2b:a5:be:22:a7:7d:a6:7f:7a:
20:f3:47:7b:90:b1:bc:7b:b7:d1:cc:5d:4d:1b:8d:8e:be:d3:
e4:ed:2c:be:3d:2b:c7:e3:c2:33:5d:38:bf:11:2b:99:5b:5e:
87:fe:36:8b:44:7d:db:49:2c:39:ae:16:93:14:a4:de:e8:8b:
6d:01:ff:0d:72:d2:2f:9b:10:68:ba:ff:ea:7c:65:ee:f2:f9:
53:2f:74:72:83:f3:d8:b3:46:0b:8b:75:96:dc:8a:89:23:60:
2a:45:95:64:96:9f:d6:78:3b:12:e2:0e:fb:42:2a:1d:31:66:
be:4f:3b:1b:b4:8b:8a:bb:97:e9:2f:76:36:ba:42:37:41:05:
f9:81:0a:0a:c6:36:c7:1c:53:af:2a:7d:48:e3:57:b4:ae:87:
89:77:53:1c:e0:c5:c1:53:45:61:94:72:1d:fc:d4:f3:33:87:
3c:0c:4c:b2:b7:08:a1:57:a6:fa:46:10:a7:57:e1:42:67:41:
ec:82:3b:e5:67:3b:d6:20:5a:57:72:be:13:50:b4:cc:10:d9:
f9:38:a6:ec:66:5c:f9:05:7a:3d:cd:41:e4:82:22:8d:80:56:
ea:86:33:38:e0:0f:28:f1:cd:bc:f9:f1:08:59:d4:74:80:de:
e7:74:eb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:58:48 2025 by rpki-client