Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a262add8-250a-40a5-8860-3eaca9d7cd0b.roa
File: a262add8-250a-40a5-8860-3eaca9d7cd0b.roa (raw, json)
Hash identifier: OjLZcFAVo/3Xikfe8AV6Ap5nQBbGtehTNlNgcuRvMFY=
Subject key identifier: 47:EB:AB:4E:BA:B5:88:B6:64:AD:6B:00:B6:FA:0E:A8:D8:41:7B:FD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 69209E20CAB8C840EA5D6D119A1BBD1A58FB6D80
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a262add8-250a-40a5-8860-3eaca9d7cd0b.roa
Signing time: Mon 12 May 2025 16:20:50 +0000
ROA not before: Mon 12 May 2025 16:20:50 +0000
ROA not after: Mon 16 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06e:1000::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 18:52:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:20:9e:20:ca:b8:c8:40:ea:5d:6d:11:9a:1b:bd:1a:58:fb:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 12 16:20:50 2025 GMT
Not After : Jun 16 23:59:59 2025 GMT
Subject: serialNumber=6797983c93c68ca147f392bdf42f8fb5c9595c1f81f7f1b203c4df2673337120, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:79:97:e9:4a:4c:6d:ee:a3:a3:be:00:0f:e5:
20:93:49:43:f6:cc:b1:1a:3d:67:1a:55:a1:e4:a0:
02:54:27:1a:cf:82:ca:ab:60:9c:9d:d5:37:3f:63:
4a:13:18:7e:4a:ee:5c:8f:ab:c0:83:37:fd:2e:9a:
d5:1e:fa:e9:84:ca:16:24:03:e9:d2:69:76:91:68:
f0:90:1b:b9:44:83:9d:c4:90:8a:3c:5c:de:e5:87:
2d:cf:78:40:fd:bd:d8:dd:81:8d:11:df:60:7d:9d:
8a:25:9f:84:8b:ca:40:f3:86:dd:47:8c:7c:bd:64:
7f:d7:45:eb:9a:99:b3:1d:55:49:fe:15:0e:86:b8:
4d:b7:f8:b1:ed:86:b6:96:3c:af:d0:7a:2c:f8:af:
5b:ae:d4:6d:d9:6d:37:27:4f:14:63:57:6b:91:b0:
5e:5f:d8:2a:2e:f4:18:57:e7:a2:a1:30:46:a9:18:
10:97:aa:b6:da:27:95:c4:8b:b2:5f:7d:7f:64:13:
aa:e6:36:19:87:6e:2d:ef:84:c9:1a:ce:a6:2f:70:
c1:39:93:d9:03:7a:01:2b:a9:27:2e:d5:e2:2e:0d:
b8:9a:2d:ff:fd:88:a0:0e:4a:66:1b:79:46:2e:9c:
4c:7e:8f:c4:a6:9c:ec:c2:84:c7:57:ba:8f:66:b4:
65:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EB:AB:4E:BA:B5:88:B6:64:AD:6B:00:B6:FA:0E:A8:D8:41:7B:FD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a262add8-250a-40a5-8860-3eaca9d7cd0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06e:1000::/40
Signature Algorithm: sha256WithRSAEncryption
a6:ae:83:0f:c2:fb:5e:f7:ea:a3:a6:a5:48:82:e9:57:27:06:
fc:9b:1c:8b:36:1d:51:e0:f3:ff:e0:f4:24:d4:ce:85:ad:ac:
45:0b:71:3a:39:57:ed:b9:03:b9:ec:b6:9e:b6:54:78:b1:c0:
5d:78:88:f9:a3:cf:26:17:3f:5f:23:1c:8c:df:4f:18:e9:54:
e8:85:f2:a6:9d:6f:f8:21:de:e3:b5:c9:63:57:5c:d4:c5:b4:
8e:fb:1c:bf:1d:9b:1f:2b:50:07:b7:1f:19:d7:68:17:17:d5:
6d:fb:1d:f4:7e:f1:91:dc:e1:9e:17:7d:fd:0f:82:0c:81:07:
8b:4d:d7:00:03:35:4d:22:be:ac:1d:9d:89:5f:76:b5:2c:8a:
0a:aa:5c:13:cd:72:d2:a8:d9:a5:70:06:91:72:28:ab:d7:54:
53:66:c2:1d:30:66:ef:83:ce:c5:52:72:57:cf:6c:53:50:7e:
7e:80:9f:5b:a2:42:fa:1e:22:a1:76:3f:34:7c:a5:06:ab:43:
82:45:73:6d:9b:76:54:8b:cb:0b:8a:60:7c:62:7f:69:74:8c:
eb:4e:28:3d:aa:3b:85:9d:fd:57:59:23:05:d5:16:58:a4:b5:
de:2c:a1:42:67:12:27:e3:c3:87:30:ea:14:c9:b4:a6:48:28:
2e:48:40:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:37:43 2025 by rpki-client