Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f4c70465-ed08-49ec-8bb8-6909c7be6133.roa
File: f4c70465-ed08-49ec-8bb8-6909c7be6133.roa (raw, json)
Hash identifier: kGvGxbKKXwc2jqZki7tr0zxrhE4la5Ny3mdxLM6PPiE=
Subject key identifier: A9:0D:86:E6:CE:95:DE:3E:31:AA:5C:72:B5:DE:F1:61:E6:74:8B:0D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 57B0FEC8A4DE9D2E4755E2D4471F03903DA9BDEB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f4c70465-ed08-49ec-8bb8-6909c7be6133.roa
Signing time: Thu 22 May 2025 01:23:57 +0000
ROA not before: Thu 22 May 2025 01:23:57 +0000
ROA not after: Thu 26 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:840::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 21:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:b0:fe:c8:a4:de:9d:2e:47:55:e2:d4:47:1f:03:90:3d:a9:bd:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 01:23:57 2025 GMT
Not After : Jun 26 23:59:59 2025 GMT
Subject: serialNumber=ce2b05201005c7ec84768d6869b5a2d48fc390c9b2b9d5c9cd402bccf175805d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7b:62:ea:69:05:c8:7a:d5:03:5e:79:18:fb:
d3:a6:65:35:c0:52:26:ba:4f:6d:18:d3:ec:86:0d:
02:42:21:04:e3:cb:bf:51:75:f8:b9:cd:cd:d3:71:
63:a3:42:d5:42:d8:f5:5c:30:66:eb:c3:96:12:6e:
ac:0e:c1:48:b0:50:01:07:28:8c:81:cb:77:fa:88:
94:92:78:77:f0:37:36:81:4f:00:b1:20:29:65:21:
dd:f0:1c:53:0b:05:a0:20:db:50:ce:d2:cb:17:33:
7a:d7:3c:c8:ae:84:7c:4c:bc:7e:15:08:dc:92:6a:
59:af:e7:3c:16:c5:33:5f:d3:03:b9:96:c1:38:28:
02:99:e1:76:f2:b9:98:60:a6:52:96:e1:77:6d:17:
d5:5d:db:dd:75:0d:48:03:32:bf:03:74:21:49:e3:
e4:48:ad:fa:fb:d0:cf:d0:21:c6:47:68:9a:1a:a0:
52:7d:81:41:7a:ca:9a:11:cf:45:41:15:ad:4f:41:
bb:49:45:07:53:09:eb:e3:eb:c3:ad:8e:1e:56:e1:
43:08:fb:5b:2e:da:e2:c8:c3:7b:25:90:de:a6:56:
70:d6:3d:ed:ff:79:a4:91:f2:1b:9e:c0:b0:f7:9b:
44:3b:37:36:0b:a7:ee:31:4e:31:fc:8e:34:10:3d:
43:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0D:86:E6:CE:95:DE:3E:31:AA:5C:72:B5:DE:F1:61:E6:74:8B:0D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f4c70465-ed08-49ec-8bb8-6909c7be6133.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:840::/48
Signature Algorithm: sha256WithRSAEncryption
2f:7c:78:a8:96:e3:ea:4c:8a:14:b4:d6:a2:30:80:f8:11:fe:
1e:27:7d:1a:82:90:e2:fe:f4:f2:0d:e9:d8:b2:74:b7:ee:3c:
59:17:0d:9f:cd:f2:5e:a0:bf:4b:2e:0c:65:81:6d:4b:1e:d7:
02:cf:e8:46:92:29:2b:ac:c8:e4:a1:81:19:01:5d:3f:e8:c6:
dc:15:4e:08:80:5c:96:d5:f9:bd:55:93:d0:d1:14:16:fa:2d:
eb:a8:99:52:3b:d1:57:9f:06:9e:74:f4:79:04:9e:87:00:63:
3d:fa:f9:de:89:34:a1:1c:52:bf:59:4b:d7:dc:cc:f8:1a:f6:
24:f4:39:4f:d8:8c:b6:72:36:a3:a6:55:25:67:91:3a:b6:b3:
48:a7:c6:aa:e7:8b:29:c3:0c:09:37:91:39:a9:52:f4:3e:c0:
6c:a5:9b:fb:bb:4b:e0:00:5c:5e:04:dc:94:08:ad:b4:33:4e:
d7:3a:48:31:f6:d0:be:a8:b6:c8:13:5e:b6:56:3f:96:39:6d:
1a:ac:04:af:6d:c6:92:a5:19:cd:6d:ac:2a:f6:4d:12:7e:a6:
5e:ba:a8:68:c6:86:27:35:86:4f:d3:fe:46:cf:8c:de:64:db:
0e:ac:63:d4:1d:d3:da:ba:2b:94:13:6a:2b:0d:78:4a:3a:43:
ed:0f:4b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:07:05 2025 by rpki-client