Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de97fb45-bcd3-489b-bdb2-9e948580b747.roa
File: de97fb45-bcd3-489b-bdb2-9e948580b747.roa (raw, json)
Hash identifier: uZ4tTztjtkrjmd1t1XgDzooJAoO0YZTXl8CzvzzhSQI=
Subject key identifier: 0D:27:C8:6E:93:23:0E:D8:E7:A0:D2:26:84:C7:EC:4C:48:20:1C:B5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 214322A2DA47F909C979A3AC61A497D104B19C44
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de97fb45-bcd3-489b-bdb2-9e948580b747.roa
Signing time: Thu 22 May 2025 01:22:24 +0000
ROA not before: Thu 22 May 2025 01:22:24 +0000
ROA not after: Thu 26 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:10c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 21:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:43:22:a2:da:47:f9:09:c9:79:a3:ac:61:a4:97:d1:04:b1:9c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 01:22:24 2025 GMT
Not After : Jun 26 23:59:59 2025 GMT
Subject: serialNumber=0f2e9933ad45b780c68bc7944b84097a391a62b14db77cd556c2f4fc9381b8b4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:54:dc:5c:5f:9f:9b:5c:62:37:a7:da:89:
e9:7d:58:3c:27:9f:3a:12:91:02:fb:23:07:c5:89:
50:af:b4:1e:38:33:bf:99:d2:16:43:03:dc:6f:b7:
91:e7:0a:b6:13:e8:96:2f:d3:ea:86:58:d7:00:ea:
0e:9c:f2:de:a3:46:3b:9a:d2:2a:b3:67:cb:9d:ef:
a7:5e:05:11:be:27:e6:c6:d6:c5:c4:83:e4:2b:d5:
70:96:bf:24:92:44:5e:ce:e1:4e:dd:01:18:43:b2:
ba:56:ad:c5:47:32:4e:f4:1e:5b:5a:f4:48:6d:d2:
b3:77:19:64:69:9a:3c:1c:f6:42:a9:a3:d7:50:0d:
7e:3f:d9:eb:3b:2e:2f:9c:56:21:7b:d6:98:62:a1:
6c:02:b5:ca:c0:71:9d:ac:07:c6:a9:6d:d9:ad:16:
54:56:ea:b8:22:57:8c:7c:32:38:d7:56:21:3b:bc:
92:90:47:b6:d7:fc:29:a2:2d:28:95:b8:a0:1f:b7:
6f:31:78:27:a3:b0:25:a7:59:05:8d:47:ce:62:f7:
78:10:1a:52:ad:cd:a5:e3:bf:e8:66:12:ca:24:1d:
fa:6c:16:37:85:90:5b:e8:19:05:77:23:c6:7d:7d:
35:f4:26:14:b7:b1:83:c9:a2:06:e3:03:36:f5:d7:
8b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:27:C8:6E:93:23:0E:D8:E7:A0:D2:26:84:C7:EC:4C:48:20:1C:B5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de97fb45-bcd3-489b-bdb2-9e948580b747.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:10c0::/48
Signature Algorithm: sha256WithRSAEncryption
aa:32:f7:2d:78:a4:9f:00:08:09:d2:28:3a:0b:f1:7d:96:14:
6c:b3:d9:2a:67:5b:81:a8:b7:e8:d9:f4:78:f4:d4:62:56:95:
a6:b3:6a:36:91:3e:07:8f:e5:ac:bd:85:ca:8a:9f:b7:28:0e:
2b:6b:c5:c5:93:8e:fe:67:0a:b1:46:52:51:d8:25:0e:85:98:
4b:df:1a:ce:9f:26:12:e7:5e:14:77:b8:23:2b:5b:8d:f7:71:
0a:d9:06:e8:21:75:6a:91:4a:b7:04:e0:65:d0:1c:56:96:c1:
1c:99:3d:eb:41:39:01:95:b7:92:4f:65:08:c4:2b:e3:72:4d:
ac:b0:88:fa:7d:4f:fa:43:2f:25:0b:9a:39:70:9e:38:ef:4a:
35:72:03:d5:d1:d1:cd:25:70:4c:68:ef:60:c0:f7:5f:b3:5e:
81:0b:8a:02:10:d2:c4:c2:eb:0b:ec:f4:86:a0:a2:9a:3e:a9:
48:f6:e0:b4:08:7f:55:72:1e:bb:0b:7d:40:b5:02:88:dd:00:
3c:e7:ad:a3:d1:ee:b4:cd:1d:df:48:b1:4a:1c:55:e1:d5:87:
38:c2:fd:6c:31:92:19:cb:f2:9c:89:c3:65:91:a7:58:ec:16:
9a:07:61:c8:bb:b6:13:dc:64:58:1f:8e:e8:63:cd:d2:59:97:
32:8f:18:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:00:01 2025 by rpki-client