Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e580dca1-bc51-4f11-b7e4-287944d98510.roa
File: e580dca1-bc51-4f11-b7e4-287944d98510.roa (raw, json)
Hash identifier: 5ptZqqEhpNW4dGnh6trPnzgvI4zBsGOLHNCTj1SWhG0=
Subject key identifier: E3:96:A2:2B:4B:2B:44:BE:0A:CB:94:7D:0E:07:8E:BE:3C:1A:37:FD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6B32703D67B6B1F73DAFAA9869C4C9026BE8A861
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e580dca1-bc51-4f11-b7e4-287944d98510.roa
Signing time: Tue 20 May 2025 18:30:56 +0000
ROA not before: Tue 20 May 2025 18:30:56 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:a000::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 03 Jun 2025 20:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:32:70:3d:67:b6:b1:f7:3d:af:aa:98:69:c4:c9:02:6b:e8:a8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 18:30:56 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=e0f4fc69fbe06a30aa0f5a35d956b51158e2a12d183724c84e24b7d6c0a2c56a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:09:6e:c1:43:a5:c9:02:e7:c7:c0:df:9a:
a6:0f:36:9f:bf:82:14:a3:af:3b:7c:1b:50:3a:07:
71:19:4a:19:88:04:1e:66:7a:24:63:68:00:9e:83:
ef:52:36:34:52:5a:f3:8d:f4:45:81:bf:f0:5f:cf:
2d:2c:0c:1c:a4:40:8c:7a:29:b1:9e:65:26:4f:27:
f2:01:31:45:45:91:0f:a7:68:aa:df:2c:e9:26:02:
f4:14:38:63:da:14:b3:1e:f6:a3:63:af:fb:d2:c8:
e1:4d:e0:ae:cf:45:df:97:0f:86:23:f7:c7:b0:6d:
f7:f5:fe:75:3c:5b:8b:32:b6:3e:9c:4e:ab:80:bc:
85:a8:fb:24:f2:3c:98:06:eb:00:79:34:2f:76:fc:
d3:e0:1f:e6:69:02:6e:f7:99:c7:21:3f:a4:dc:00:
12:ee:fa:1f:4e:7a:9c:5e:1b:da:e5:38:ce:6e:81:
30:ed:cc:01:14:01:c7:58:1b:56:2b:91:cf:6c:bb:
19:8c:d8:ca:11:13:c5:01:c3:85:25:8d:40:fd:db:
72:5f:5e:c4:ae:cd:77:03:64:8d:df:01:6e:75:70:
c1:ff:16:16:b9:92:c7:95:74:41:ba:fc:1d:a4:98:
86:87:2c:67:fb:e2:c8:bb:cc:e5:00:8b:30:5e:d8:
33:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:96:A2:2B:4B:2B:44:BE:0A:CB:94:7D:0E:07:8E:BE:3C:1A:37:FD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e580dca1-bc51-4f11-b7e4-287944d98510.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:a000::/40
Signature Algorithm: sha256WithRSAEncryption
81:30:a3:a2:ca:ad:4e:c6:a4:96:78:bb:dc:87:50:18:8d:b6:
1c:e4:bd:b7:3b:2c:47:c4:0c:ab:86:08:35:f1:92:d8:ac:be:
42:0d:cf:94:60:43:7a:80:84:bf:9d:bd:78:54:c1:0d:03:c5:
a4:e7:72:59:de:d8:ab:3f:45:b7:4f:2d:a9:3a:7a:f6:56:59:
f3:dd:1d:46:13:9f:e4:8f:fa:6f:74:21:38:6c:64:78:56:be:
9b:8f:b7:bb:2c:b6:0e:3d:a3:31:67:11:36:6e:71:e2:da:69:
2f:ae:77:61:cb:50:b3:9d:7c:83:9a:a2:23:32:04:e6:74:8e:
e1:11:c1:f3:d0:be:96:23:bf:dd:7c:06:27:e2:2e:36:68:e5:
26:ca:1e:43:12:f0:ed:e5:ee:72:f4:59:a7:ba:ff:39:20:1e:
5e:6f:83:c9:8b:9e:ab:70:d8:a1:32:da:65:95:ad:b7:29:17:
c1:1f:cf:41:8f:77:c8:7e:f8:65:51:34:fe:aa:12:29:16:f5:
90:fc:2a:6e:4c:1b:c0:93:8e:6e:96:58:c2:a2:5e:2d:b5:3d:
b5:bd:59:3e:f5:2d:35:1c:16:12:9b:fe:f9:90:2f:5c:32:46:
4a:03:81:60:f0:1a:b8:16:35:ce:28:8b:0d:5b:34:45:34:60:
ab:38:97:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:59:29 2025 by rpki-client