Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f30061f3-1f7d-4570-bbcc-997c2d177fdd.roa
File: f30061f3-1f7d-4570-bbcc-997c2d177fdd.roa (raw, json)
Hash identifier: OitrVbGxpufjugh6dD1I5tj//L2zDApIZARt90csFXg=
Subject key identifier: E1:80:0B:51:06:8B:49:31:AA:C7:CA:3D:7F:3F:D9:C9:99:95:83:CA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2EFFFFF823DC0F88BECD9B7FF47F6CAF8B16FB77
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f30061f3-1f7d-4570-bbcc-997c2d177fdd.roa
Signing time: Thu 22 May 2025 01:37:00 +0000
ROA not before: Thu 22 May 2025 01:37:00 +0000
ROA not after: Thu 26 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:c000::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 03 Jun 2025 20:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:ff:ff:f8:23:dc:0f:88:be:cd:9b:7f:f4:7f:6c:af:8b:16:fb:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 01:37:00 2025 GMT
Not After : Jun 26 23:59:59 2025 GMT
Subject: serialNumber=19749274e55c9891066a3a19fc05214d1741df27bfb4c1e23f4db6256a698a6b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:17:06:70:cb:4a:02:80:25:89:54:44:a9:49:
58:0b:0d:95:a4:9e:18:5b:6b:89:5c:99:19:2b:49:
0f:92:0c:81:f8:dd:c1:06:99:78:2c:0a:50:57:5a:
0a:e6:9e:fc:4d:aa:0b:58:2a:53:19:35:e0:51:b7:
84:a3:e4:5e:c6:ff:24:c0:f2:55:c5:7f:46:2c:f2:
06:1c:7d:8a:19:fc:d7:0f:a3:64:40:97:15:0e:15:
1d:bc:b9:6d:b6:28:92:76:93:8d:9c:c8:9d:ef:34:
02:87:96:7f:50:fb:62:8d:3c:91:48:1a:2d:74:9d:
f1:1f:30:61:a9:0a:51:a4:37:c3:11:c3:9c:83:e4:
ee:ea:39:25:e3:e1:d8:6b:98:0e:29:88:aa:e9:01:
26:5c:64:77:bd:d1:18:e9:aa:bb:fc:e1:47:f8:b1:
0e:ab:d5:1f:1b:13:23:cf:fb:c3:ad:8e:c4:f0:3b:
1c:26:b8:d6:a3:3a:3f:94:a0:a4:09:8a:24:af:a3:
8c:57:77:f0:0f:2d:3c:9a:25:eb:81:e5:d6:70:5e:
3a:70:47:e0:a9:80:2b:02:33:7e:11:91:73:e0:ec:
e5:49:7f:71:67:c9:2b:84:e9:9a:6f:3d:f6:0b:b0:
8e:e3:41:ab:f8:02:60:be:9f:8a:8e:93:9a:96:59:
fa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:80:0B:51:06:8B:49:31:AA:C7:CA:3D:7F:3F:D9:C9:99:95:83:CA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f30061f3-1f7d-4570-bbcc-997c2d177fdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:c000::/40
Signature Algorithm: sha256WithRSAEncryption
69:83:61:0c:c5:1a:29:83:3c:6c:0d:5d:ad:0a:a3:d7:d8:47:
a4:c3:81:2e:e7:53:6b:14:5e:bc:c4:2c:c1:30:90:dc:22:67:
70:48:32:25:0c:42:76:86:35:45:80:a0:c0:72:5a:a9:84:c5:
c1:82:d6:45:e1:81:bc:75:77:76:49:4c:24:1d:27:bf:0c:ce:
88:15:4d:60:2b:5d:3e:a7:0e:aa:7d:e4:b3:9e:07:ae:8d:89:
d9:b4:ae:46:80:72:17:e3:14:c9:46:71:fa:df:26:30:83:aa:
f5:07:91:c4:18:e4:39:1b:e7:fd:26:29:36:f3:76:92:d0:f8:
20:e0:92:09:b2:37:00:6c:28:9a:fb:03:fa:51:b0:ff:7c:e6:
94:49:71:3b:3c:56:cb:87:92:3b:54:ef:cc:16:5b:7e:63:1e:
8c:d6:4e:6f:69:44:82:ae:04:45:a6:bb:a9:b5:57:42:62:52:
35:ab:ee:63:6e:55:c5:9b:61:30:17:9d:da:22:29:9b:cd:22:
d9:ad:64:74:45:8c:de:75:73:10:a3:cc:6e:b3:4d:84:90:a0:
fb:ed:d9:6f:75:4c:1c:98:88:16:5e:2e:fa:ed:b9:3f:d7:6f:
59:41:70:48:3e:8b:7c:2a:bc:c2:65:df:cd:05:a2:ef:89:d7:
b3:9b:8a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:02:33 2025 by rpki-client