Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b5d84c54-c2c8-424e-8ae9-879a4fa44dbd.roa
File: b5d84c54-c2c8-424e-8ae9-879a4fa44dbd.roa (raw, json)
Hash identifier: hh9d+8gP2HaRi1IQMpvguYyGz5sFj9P5LyaeiIHG90I=
Subject key identifier: 76:24:FA:55:3B:F6:4A:56:40:06:66:F2:D4:0F:9C:8A:04:97:5F:98
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 76C789DF2C3A7A3C233959DD369B7A8319F3C8CE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b5d84c54-c2c8-424e-8ae9-879a4fa44dbd.roa
Signing time: Tue 20 May 2025 19:00:01 +0000
ROA not before: Tue 20 May 2025 19:00:01 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:5040::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 21:08:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:c7:89:df:2c:3a:7a:3c:23:39:59:dd:36:9b:7a:83:19:f3:c8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:00:01 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=56a8d387d60ca82b7b67c7cc9a301c7a6b795015b1928808d67f3de2498e1a62, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:88:12:ab:d7:4c:c9:ed:71:8a:f8:dd:9f:a5:
24:de:df:be:51:2b:81:e5:d0:71:58:62:67:81:3e:
d8:d1:eb:f7:46:5b:1d:2d:97:2c:49:a2:c1:32:f8:
47:0d:0a:b6:d2:05:2f:86:5f:a7:e0:3e:b7:0e:35:
b6:3c:c3:83:e7:5c:ba:f2:78:4e:c4:8b:1e:68:f6:
e3:14:97:f0:fa:47:f8:bc:3c:a1:68:a0:af:8d:52:
6a:e7:0f:34:ce:1b:6e:e7:26:a4:44:ce:23:d5:67:
5b:c9:dd:d9:3f:9f:e0:41:e7:65:5f:ff:f7:aa:3a:
33:63:44:d8:1e:23:ba:bc:28:9d:4a:99:dc:ad:1c:
d9:3f:c5:47:c1:45:e6:cf:3a:f4:f0:d3:61:b5:3c:
4f:c4:b2:04:6d:62:4f:75:4f:eb:8f:ee:c9:21:85:
71:9a:52:7e:aa:4c:72:f0:25:c4:a3:9f:11:6e:5f:
40:50:0d:09:70:6f:7a:98:42:06:09:ee:c8:cd:e4:
cf:65:1b:92:69:65:4c:2d:82:4e:c6:b9:38:b5:4f:
f0:60:bf:c2:55:cd:49:3a:30:22:7c:63:ef:d6:6b:
36:32:38:46:b8:5e:bd:d4:80:4d:5b:cd:88:66:04:
3a:c3:1f:18:bb:08:0c:4f:57:3a:ef:cc:b7:12:2d:
16:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:24:FA:55:3B:F6:4A:56:40:06:66:F2:D4:0F:9C:8A:04:97:5F:98
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b5d84c54-c2c8-424e-8ae9-879a4fa44dbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:5040::/48
Signature Algorithm: sha256WithRSAEncryption
c6:1f:ad:88:2f:49:49:e5:41:c9:79:98:7f:35:c1:20:7f:81:
cd:02:c3:06:d8:f9:c7:88:c9:f2:cd:e5:a8:9b:c3:4e:68:ae:
08:85:83:f2:dd:76:6d:b0:03:1f:94:c5:95:9a:03:15:b9:78:
e5:87:f6:3f:34:11:a6:a6:ed:6c:5a:fd:47:52:66:b3:b6:4b:
16:3a:92:86:24:5f:c7:f9:6b:d4:20:32:83:46:0f:e0:47:c1:
9c:0b:7a:3f:61:6a:ca:fc:09:9d:3b:92:d3:79:20:7c:a7:4e:
9a:76:92:db:ee:a7:56:e6:ec:87:8d:5d:22:df:7b:ed:93:b9:
dc:c1:8b:e3:cd:e2:55:62:50:5d:93:8a:86:79:ef:11:f4:56:
dd:92:33:05:b4:7e:c9:26:f3:05:5a:db:10:e6:9f:0a:15:03:
a0:e4:5a:16:15:40:f8:16:6a:2e:1a:09:5e:6e:b7:b2:6c:b4:
53:74:db:67:4e:d7:65:da:9f:c5:31:cd:90:67:31:f3:68:84:
36:6b:10:c9:6e:4b:86:8a:f0:0c:fd:99:01:e0:05:35:2e:a9:
07:0a:aa:50:b8:fc:a5:ce:dc:f5:d0:76:3d:53:28:62:ab:67:
ea:2e:64:01:c2:d6:16:3f:b0:4c:28:aa:40:4e:ba:49:67:eb:
5c:89:bb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:58:09 2025 by rpki-client