Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ac551e9a-50f2-4eff-9247-e71429bd9c80.roa
File: ac551e9a-50f2-4eff-9247-e71429bd9c80.roa (raw, json)
Hash identifier: iUqQXnpMHJ8WI4bTXGbkvGFkPbXp9VUg2pgi2sABmEQ=
Subject key identifier: 99:BF:D1:CC:A6:A7:E1:10:1C:E2:52:32:8C:DC:4D:B9:A5:D7:3A:AE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1D7AFF7AB7BDF87BA6E5199DC2C40AD99196C36D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ac551e9a-50f2-4eff-9247-e71429bd9c80.roa
Signing time: Tue 20 May 2025 19:00:18 +0000
ROA not before: Tue 20 May 2025 19:00:18 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:b080::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 21:22:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:7a:ff:7a:b7:bd:f8:7b:a6:e5:19:9d:c2:c4:0a:d9:91:96:c3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:00:18 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=88ccd4d4a7020f63a0e5ae6f5da63cd49696f29abb720d9d1ee2f962f9e13790, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f9:94:e7:11:d5:4a:32:ad:1e:80:a0:95:22:
d0:e3:5e:45:cf:ef:d9:1d:e9:a1:68:5b:5a:4a:0e:
c3:89:11:72:d2:f2:e5:f6:8b:85:a4:63:69:66:8e:
6c:d9:5f:84:a2:70:10:5f:c2:57:d1:e5:74:83:c9:
71:ed:ae:97:59:be:b5:62:2d:e4:04:d9:ab:b1:ce:
20:3c:5c:23:32:5a:cd:01:d2:3b:fe:ff:50:4f:97:
62:6d:56:32:c2:b3:d0:31:fa:ff:16:02:c8:2a:6c:
1c:78:10:80:ca:3e:14:70:3e:71:13:73:9b:53:72:
31:c0:2d:5d:3f:9c:66:76:29:47:86:da:d9:66:e3:
3e:fd:50:8e:a8:e8:33:01:48:e2:2a:58:3e:69:75:
6c:99:de:d2:9d:11:9d:e8:da:d6:da:7c:70:aa:5b:
06:02:33:f1:cc:97:2a:cb:c2:9b:26:8c:97:81:36:
62:3b:79:3e:a5:93:56:3b:7b:0f:08:7b:2a:05:c2:
bd:36:f7:2d:b9:df:61:9d:56:13:7c:4a:5f:dd:4c:
3e:fc:6f:ce:59:11:f9:71:6c:e6:14:c6:81:73:2c:
e9:d2:e2:3a:3a:8a:24:61:63:ef:09:22:75:5b:78:
c6:f4:4d:d3:4e:73:cb:34:7a:59:df:f8:35:29:cb:
e1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BF:D1:CC:A6:A7:E1:10:1C:E2:52:32:8C:DC:4D:B9:A5:D7:3A:AE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ac551e9a-50f2-4eff-9247-e71429bd9c80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:b080::/48
Signature Algorithm: sha256WithRSAEncryption
20:27:84:36:f6:0d:43:26:5f:4f:74:b2:1a:7e:dd:28:01:7b:
8d:29:42:36:e2:88:63:4d:bd:69:cc:76:3a:b1:b4:af:12:b5:
be:06:f3:9f:c3:78:91:79:d7:f0:41:d8:6b:28:37:c1:fb:4e:
84:07:11:72:ce:99:0d:90:e5:4d:43:2d:98:9f:73:82:a5:e7:
49:a5:12:33:47:15:90:a0:b8:fa:12:f8:38:3f:00:00:ee:84:
59:af:dc:70:bc:0e:0e:b9:86:02:a2:04:c4:d1:6c:22:3a:4f:
0d:bf:74:ad:f8:53:76:39:82:62:f5:51:e8:55:ea:12:30:d8:
7e:99:0c:c9:6d:ec:c9:0f:d2:c3:ba:12:1e:44:5c:ac:d9:8e:
3e:69:31:b9:dc:e9:74:71:c4:c0:93:64:29:9a:fd:17:7b:62:
6f:e5:fb:23:cd:80:0e:2d:73:41:7e:e0:ef:cc:d4:65:40:16:
62:d2:50:ca:ad:09:1c:15:04:f2:6b:7d:73:62:07:8a:31:88:
1d:d5:83:af:f6:af:dd:77:be:e5:ba:ea:34:29:af:6e:8c:55:
cd:09:98:f6:39:95:b8:02:2e:6b:9e:79:b6:ce:e6:d6:8a:a5:
28:1c:c3:c3:5b:53:96:10:67:8e:72:07:f2:f0:90:61:9d:6d:
4e:8f:07:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:59:24 2025 by rpki-client