Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce635f88-1bab-435a-bf3d-2ed9319ca185.roa
File: ce635f88-1bab-435a-bf3d-2ed9319ca185.roa (raw, json)
Hash identifier: gJ+fDPzJCj1RzqCrGAiM4A+kx8E3Y7mVh+ZEjWbiNTc=
Subject key identifier: AE:25:CC:00:AF:F5:91:1C:83:B4:B2:13:4F:46:3A:2B:22:A4:5F:3B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5FDB2912A7FC1C0A83117B9F61977842DBB16EDF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce635f88-1bab-435a-bf3d-2ed9319ca185.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d040:e000::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 Jan 2025 02:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:db:29:12:a7:fc:1c:0a:83:11:7b:9f:61:97:78:42:db:b1:6e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:94:1c:fa:e2:f6:58:f5:02:2c:fd:38:4f:84:
46:ca:2f:15:d1:65:08:31:dc:96:8a:96:1d:0e:6d:
d4:20:47:15:ef:08:86:08:56:4d:d2:ba:f7:4e:1c:
bb:92:b5:fc:bb:00:13:ba:c1:db:6d:47:d3:45:4a:
22:ef:a7:0b:40:d3:aa:95:f9:2c:9b:10:05:ea:1e:
5f:9b:f0:7e:a7:62:26:63:b9:c6:1f:82:a6:65:84:
79:57:eb:c1:d1:1d:7b:77:0d:06:0e:c2:a4:83:af:
c6:30:0b:7e:fc:79:1c:46:60:4d:21:9c:01:4c:fa:
71:4b:a1:94:4f:1b:cc:49:f9:48:c1:98:a2:c4:b4:
ac:c6:95:dc:98:e8:47:d8:4a:a5:66:4f:1e:83:40:
fd:d5:2b:a3:a8:58:11:98:a7:09:ee:35:91:a4:fe:
fc:7d:94:58:67:66:d0:69:d2:b3:19:b0:53:42:e4:
b0:97:c8:34:2c:dd:cf:0b:dc:37:9d:bd:2f:34:7c:
12:6d:25:1e:a7:46:b1:77:91:55:f8:94:79:ad:3d:
cc:43:c0:65:57:e8:83:96:4c:22:1c:6e:dc:cc:bf:
ac:e6:cd:e2:f0:8f:48:f4:56:70:56:54:4f:1c:2a:
d4:2c:bb:b2:be:b1:e9:59:59:f9:e2:fc:32:18:3a:
9d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:25:CC:00:AF:F5:91:1C:83:B4:B2:13:4F:46:3A:2B:22:A4:5F:3B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce635f88-1bab-435a-bf3d-2ed9319ca185.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d040:e000::/40
Signature Algorithm: sha256WithRSAEncryption
12:ba:a2:8f:14:2b:c2:24:47:3a:a6:c7:22:50:6a:b7:01:d1:
e6:b8:08:3f:c9:ba:2e:a9:59:07:c1:2b:da:40:ce:8a:d8:52:
0a:12:bf:fb:d7:d9:a9:b3:92:aa:9a:cb:15:ca:64:d4:4c:ae:
2a:0a:a4:09:fe:c6:97:54:8f:57:b5:38:93:a8:b1:df:39:e4:
f7:e4:69:34:8f:16:a8:2d:64:e5:15:3b:3c:e7:52:ee:12:18:
5b:77:16:20:80:24:a3:43:32:68:8e:68:ea:40:95:63:ab:68:
b0:1f:f8:2c:3f:4d:9c:0c:61:e9:e7:7a:f6:5f:72:df:dd:1f:
2b:3c:6b:a5:98:6a:c9:df:a6:0f:82:c4:36:d2:4f:1b:32:c4:
aa:e1:02:29:2d:45:0a:ae:44:b6:15:5f:89:f9:cf:9f:49:35:
3b:ea:5a:e7:f4:42:eb:a5:09:1e:9e:07:a8:79:78:ab:3b:f6:
1a:5e:b8:f5:97:05:1f:32:1c:91:30:1a:6f:18:71:f6:f2:9c:
14:2b:85:e3:fa:f1:26:8f:f0:80:97:f3:17:b5:bb:3e:ce:fc:
93:e5:e9:d6:b7:45:39:1e:95:0b:9e:ed:88:7e:e3:9e:78:b1:
3c:45:30:06:08:91:1d:b6:df:87:da:51:44:ce:4b:8d:38:3b:
20:3c:eb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:18 2025 by rpki-client