Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e69f05de-2f21-4c50-9f35-41a8ec3505ad.roa
File: e69f05de-2f21-4c50-9f35-41a8ec3505ad.roa (raw, json)
Hash identifier: tuO7/DOEZ3puxImS20Q9OsukbRAxD3eu8x7GsWu67+8=
Subject key identifier: 4B:D7:70:9C:57:12:A5:DB:B6:7D:B1:8D:66:54:A4:2F:E7:E6:86:F1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 52DAEEE5DF9958B07270FE7388BEA6EDEF687D8B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e69f05de-2f21-4c50-9f35-41a8ec3505ad.roa
Signing time: Thu 22 May 2025 01:22:23 +0000
ROA not before: Thu 22 May 2025 01:22:23 +0000
ROA not after: Thu 26 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:1080::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 20:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:da:ee:e5:df:99:58:b0:72:70:fe:73:88:be:a6:ed:ef:68:7d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 01:22:23 2025 GMT
Not After : Jun 26 23:59:59 2025 GMT
Subject: serialNumber=b1b18f450d3348538c1df890354e8a4912855d93878d58d3a3a491a92fbf54e3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:e4:71:22:ff:bc:1c:70:ee:0e:79:1a:41:
88:c9:29:7e:bc:9b:4d:e9:c3:14:7c:66:91:d2:df:
c3:c9:db:76:af:d1:09:68:7d:42:21:1c:0d:ba:f5:
8e:0b:64:65:87:4c:2b:2e:38:ef:97:4c:23:4c:95:
fc:75:2e:bf:58:4b:6f:04:3f:20:57:b2:ed:88:c0:
66:e6:75:dc:e4:ad:99:3b:ca:70:46:82:33:5c:0e:
44:41:8f:fe:30:d3:15:2a:a6:2e:c4:2a:e8:df:6d:
7b:bc:bb:27:87:ff:92:97:1f:d9:93:02:cb:9d:fc:
84:1f:44:92:e9:31:06:15:a1:0c:cd:9b:55:e9:e0:
7e:dc:32:63:a5:e8:13:63:92:98:c3:c7:e8:e2:1a:
1a:8d:9f:3a:79:47:6f:11:6f:58:69:b0:50:e1:74:
1b:3f:b8:a8:83:91:2b:ac:c0:e8:70:4a:db:95:6f:
0d:89:48:ea:af:42:70:8a:38:34:91:fe:40:5a:32:
ee:2c:ae:6b:9d:d8:e9:6b:9f:3f:9c:e4:27:77:74:
32:1b:ea:2b:8a:6f:8a:3e:99:c6:ea:23:3e:1c:c7:
71:e6:49:b2:12:a6:3f:29:ae:ec:e0:d1:ee:ca:63:
65:d9:b6:1f:73:01:15:fa:2e:b0:f6:1f:b3:9a:77:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D7:70:9C:57:12:A5:DB:B6:7D:B1:8D:66:54:A4:2F:E7:E6:86:F1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e69f05de-2f21-4c50-9f35-41a8ec3505ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:1080::/48
Signature Algorithm: sha256WithRSAEncryption
16:0a:f0:27:83:65:41:a5:02:6b:8f:c0:d8:10:a0:db:27:d3:
a2:66:61:8d:16:38:7d:b8:57:9f:65:44:c5:a1:cb:ce:45:60:
e2:b6:32:29:d0:5a:fa:2c:00:57:92:b6:c9:9b:b5:6c:2a:53:
e0:99:41:dc:85:f7:1d:bb:b3:14:37:01:4a:45:b6:09:88:24:
93:a0:07:0b:2e:e2:ce:8d:49:e7:d5:9c:59:8a:03:4c:38:66:
b2:ce:83:51:b3:71:20:73:fc:84:54:15:1e:f0:4c:34:4d:c7:
80:dc:a9:db:67:08:df:e1:eb:56:4f:3c:ab:cd:15:cb:f8:33:
b6:b9:bc:06:de:2d:13:73:7c:32:d9:03:a5:1a:25:d2:03:62:
50:ac:02:03:00:78:45:45:11:4b:b9:56:13:3c:ad:f7:db:5a:
51:5a:75:ad:bb:8c:ee:67:ed:4d:2d:42:ea:01:56:ec:2b:8c:
89:04:f1:5b:06:90:89:00:11:37:4c:c4:28:c6:6c:b7:2d:41:
b6:10:68:86:57:f8:2b:49:52:cd:14:63:e2:a6:46:99:e6:c1:
41:97:e6:18:bd:fa:95:cf:6f:9f:12:38:59:84:e7:7e:e0:d6:
9e:ae:88:14:bd:50:c0:c3:58:f9:1d:9f:39:e1:ca:e1:1c:23:
df:05:71:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:58:51 2025 by rpki-client