Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe7959ea-9688-478e-99c7-018d54b858d3.roa
File: fe7959ea-9688-478e-99c7-018d54b858d3.roa (raw, json)
Hash identifier: pTCV0B/zgBevF+1lZIZMqE/bDqt/YdrK2GFCbM9NxR0=
Subject key identifier: 7F:13:CE:25:F7:43:81:DF:11:93:7B:2D:A0:B1:FF:C0:46:5C:B7:82
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 56CA16EA7704C4EC8AB9786B12ED7E8807C3D37C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe7959ea-9688-478e-99c7-018d54b858d3.roa
Signing time: Thu 22 May 2025 01:24:13 +0000
ROA not before: Thu 22 May 2025 01:24:13 +0000
ROA not after: Thu 26 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:6000::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 03 Jun 2025 20:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ca:16:ea:77:04:c4:ec:8a:b9:78:6b:12:ed:7e:88:07:c3:d3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 01:24:13 2025 GMT
Not After : Jun 26 23:59:59 2025 GMT
Subject: serialNumber=a9d1805f40aeb312ed8a7b30f304d21951bcb48fb94652159f834be3b32dec28, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:35:de:cf:a4:1a:a7:1e:70:f4:e4:c3:af:8d:
65:10:b5:92:c6:e3:4c:d8:6b:9c:51:5d:8f:9d:6f:
1a:0d:df:4d:f7:be:4b:85:52:cd:e2:c0:52:10:53:
40:3d:eb:60:10:ca:9a:95:ab:e1:a2:ca:dc:94:ed:
27:29:46:ee:82:fa:fa:e3:3f:c9:75:f0:86:9d:8b:
5d:6a:c8:2f:65:ae:0e:65:ee:6e:40:cb:83:a3:0c:
77:63:21:44:c6:54:76:c3:a4:48:f2:af:55:f7:48:
41:f1:81:ad:34:aa:47:0b:b1:e7:4c:61:0a:70:2e:
9f:fb:e4:cb:11:e1:d3:80:02:0d:ef:9d:2c:5b:67:
46:8a:21:6a:ed:fc:48:ec:38:24:7e:14:d7:27:8c:
ef:dd:e3:3d:a9:2f:39:fe:b1:65:b6:9e:b4:14:22:
6c:09:65:9d:76:03:52:2e:5d:3b:54:bc:75:07:51:
66:d3:f9:a8:f2:38:47:c8:e7:72:53:df:35:2b:97:
ec:eb:df:03:ab:d2:e4:20:0e:76:03:4d:5d:8c:28:
01:ff:15:e1:28:f8:66:22:72:3f:b4:47:c6:7e:46:
37:4b:c9:08:b1:20:1d:be:69:05:0a:87:d4:80:81:
b2:9a:bf:f0:11:02:a1:94:9f:5e:44:e6:b7:62:78:
61:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:13:CE:25:F7:43:81:DF:11:93:7B:2D:A0:B1:FF:C0:46:5C:B7:82
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe7959ea-9688-478e-99c7-018d54b858d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:6000::/40
Signature Algorithm: sha256WithRSAEncryption
95:7c:40:16:a4:fc:6a:47:ab:b3:60:ce:23:80:8b:62:8e:b5:
79:b3:bb:b2:5b:f0:4c:2e:11:22:12:81:33:7c:10:f8:0c:8a:
c1:29:fa:b7:6a:c5:f9:af:fb:2e:32:c4:f3:f2:82:68:32:2a:
df:a4:e0:4e:10:b6:8a:f5:c3:dc:3e:d4:bf:89:53:91:ca:fc:
b3:60:63:db:be:f9:35:ec:71:bb:30:20:35:fc:ef:05:b4:37:
94:fc:8a:0e:ca:b5:07:09:0c:9d:60:9f:65:54:ed:94:e2:0c:
a6:2b:24:fd:47:03:04:a0:17:38:e8:63:f0:99:cf:3e:8d:b9:
01:98:61:20:ae:1c:4e:f0:26:7c:f0:59:44:73:66:d5:80:f5:
6b:6b:d3:6f:34:3d:5f:73:19:55:82:87:5f:3e:9a:a2:d4:e8:
05:3f:ec:39:b1:33:ec:b1:9f:48:72:86:3e:4f:62:a8:18:a9:
fb:8a:5e:90:34:de:af:43:81:74:fe:1d:b9:b6:f0:6e:a3:15:
65:3f:1b:e0:1b:22:fb:0b:41:eb:a5:8e:9f:f6:05:8c:b3:ba:
1c:ca:18:ee:b5:f4:a9:c8:73:cc:ac:12:ef:71:c0:89:2c:b4:
55:e6:b4:cd:ad:b8:17:a4:b7:d5:1f:72:dc:2d:c5:5a:1a:15:
c8:57:18:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:58:07 2025 by rpki-client