Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6fc382d-8afa-468e-b2ba-7f94844874ff.roa
File: c6fc382d-8afa-468e-b2ba-7f94844874ff.roa (raw, json)
Hash identifier: s6O6De9ENeI1RT89lHV0B/7n75+y++9WTXGDN9zfeyo=
Subject key identifier: 72:A7:E6:06:98:AD:20:50:46:38:C0:11:39:F4:0F:F8:DB:85:6B:30
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5CDE749486C6CCC4D07F2B83B1FA365AFFF93053
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6fc382d-8afa-468e-b2ba-7f94844874ff.roa
Signing time: Thu 17 Apr 2025 16:37:17 +0000
ROA not before: Thu 17 Apr 2025 16:37:17 +0000
ROA not after: Thu 22 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05b:e000::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 17 Apr 2025 20:37:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:de:74:94:86:c6:cc:c4:d0:7f:2b:83:b1:fa:36:5a:ff:f9:30:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 17 16:37:17 2025 GMT
Not After : May 22 23:59:59 2025 GMT
Subject: serialNumber=d5a83caad0fb158876db668bbd87c5a5edc802984350ad4ad73cd366fc8c63c3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:16:15:8d:c1:2b:74:72:96:02:b5:26:ce:80:
3b:fb:bf:e4:e5:ee:c8:af:93:04:6e:2a:97:d7:9a:
ef:0e:65:28:f6:df:cc:05:e0:0e:84:1b:fb:58:b0:
93:96:0f:7b:69:b7:a0:f9:4a:71:36:1b:37:c6:10:
11:9f:4e:c2:16:96:99:1a:e0:78:a8:ce:5b:b7:d3:
36:45:a4:40:6a:f4:0f:3c:31:28:55:90:60:0d:9e:
d5:71:48:0a:e8:0a:80:5b:ab:51:09:a4:9f:21:7a:
ee:fd:dc:29:01:95:ce:a0:5a:df:51:a5:20:c7:64:
16:3a:1d:a7:bc:43:b1:81:34:1d:d9:43:f1:32:ab:
5a:f7:0e:27:c6:21:3e:27:b5:a8:44:ae:cb:94:6e:
a8:80:57:c5:1a:aa:cb:30:5b:10:a1:79:50:ee:3f:
48:0e:af:50:42:09:4e:6c:70:cb:3a:87:0d:39:ad:
29:48:ff:ec:12:04:d9:16:99:3e:e1:18:31:11:5e:
c3:c0:10:73:0f:88:d6:f5:98:51:5a:a8:e5:8c:61:
66:d4:d0:d4:9f:1f:f2:6f:69:8a:a7:a3:0f:d9:a4:
7c:e4:9f:2c:4f:be:95:4d:20:b9:1d:7e:f9:f9:08:
66:22:07:f0:12:5f:df:7a:20:16:c9:a2:e4:05:0c:
f3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A7:E6:06:98:AD:20:50:46:38:C0:11:39:F4:0F:F8:DB:85:6B:30
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6fc382d-8afa-468e-b2ba-7f94844874ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05b:e000::/40
Signature Algorithm: sha256WithRSAEncryption
ba:b0:2c:d6:2f:30:85:bb:ed:a3:42:ef:7c:45:12:3b:35:0b:
41:2d:b7:48:aa:61:0f:20:a5:c8:1a:e4:84:92:12:22:0f:f0:
4e:89:b6:90:8b:ec:93:90:63:32:ae:19:7f:7f:41:98:30:47:
66:a5:6f:c5:16:87:32:8c:8d:05:8e:b3:53:88:b8:1a:6f:31:
c3:d6:8b:18:cb:44:f8:d3:f7:c3:63:97:58:fa:74:d2:c3:ba:
75:b0:b1:fc:39:2b:1e:7d:09:5b:2a:ec:b2:32:40:5b:1e:53:
72:bb:66:c3:bc:2f:f9:e9:32:87:dc:4f:e8:63:5f:e6:32:84:
29:9d:16:eb:2d:8e:ee:d6:c8:ec:02:67:07:97:81:39:65:b2:
a9:dc:e9:7f:1b:3b:66:30:57:6b:0e:4e:6f:0f:81:67:ad:c7:
69:e1:38:f9:54:0d:86:41:b7:e4:df:99:20:4c:9c:a5:80:2d:
c4:56:1b:22:8f:a4:51:a7:4d:9d:74:4a:46:29:cc:52:38:f3:
f6:b0:85:5d:22:fd:a1:76:12:e6:f0:f9:83:e9:f4:23:f2:ca:
e4:a8:7c:71:1d:43:09:0f:6a:03:86:57:2c:29:6b:35:85:ff:
2e:6d:9d:d3:fd:84:be:10:ef:60:3b:ca:f1:2d:e2:55:61:e2:
13:9d:b5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:46:19 2025 by rpki-client