Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1dd56ff-b451-42fc-a12d-7b4eeecceab3.roa
File: f1dd56ff-b451-42fc-a12d-7b4eeecceab3.roa (raw, json)
Hash identifier: t2p99mwC877yvg0fu4Lt5yBtDZxF+pNf5SxepJY0ONM=
Subject key identifier: EB:8F:FC:1E:9C:DE:33:9B:EA:54:38:CF:14:C5:65:26:CD:D5:A9:18
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 76D849E8B387E1A655DE00BAA6E91CFAD61A7A7A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1dd56ff-b451-42fc-a12d-7b4eeecceab3.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d040:2000::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 Jan 2025 02:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:d8:49:e8:b3:87:e1:a6:55:de:00:ba:a6:e9:1c:fa:d6:1a:7a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:be:b3:e1:28:70:6c:d4:39:2d:90:1d:d6:33:
a2:19:c0:ca:18:62:e8:92:a6:3a:54:86:0d:23:b2:
83:be:47:7e:f4:e2:c0:69:b5:9c:a1:78:55:5a:8a:
fc:3c:35:72:da:d4:ef:1b:79:05:3b:0c:34:73:4b:
41:3f:cc:3d:ec:bf:b9:cb:ea:ae:7f:28:6c:df:d4:
91:68:9b:fa:48:97:c3:fd:f0:d3:5e:1d:95:1c:d2:
f2:e6:28:fb:73:69:8d:32:6b:5e:4f:9d:bb:46:d2:
11:56:9a:39:ad:d8:e3:dc:e1:ac:ec:5e:67:9f:25:
cd:40:0d:d7:9d:f4:65:d8:d9:7e:9f:4d:ec:34:b1:
24:10:ac:cc:73:83:82:1c:40:a3:a3:e3:a7:f9:94:
e5:10:af:70:90:99:34:0e:4e:52:bd:2a:fa:76:4b:
68:b4:3c:8d:78:70:d2:0d:02:d7:95:f9:2b:b9:80:
8c:23:1c:d2:19:93:c1:cf:42:f4:84:ed:0e:10:40:
f6:41:95:40:c9:aa:f1:22:31:ac:52:f6:63:d3:1c:
e0:81:07:36:a8:b0:c4:b1:30:f7:f5:e5:e9:ac:2c:
8f:89:9d:d1:53:74:7b:f5:d4:2e:30:a3:cc:06:9e:
60:7c:b2:6c:f1:e4:81:2a:5f:c8:bc:00:b2:d5:7f:
93:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8F:FC:1E:9C:DE:33:9B:EA:54:38:CF:14:C5:65:26:CD:D5:A9:18
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1dd56ff-b451-42fc-a12d-7b4eeecceab3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d040:2000::/40
Signature Algorithm: sha256WithRSAEncryption
b8:8d:ee:f7:0e:63:ca:c9:50:44:f4:d5:37:00:97:c0:d0:88:
9e:7b:b9:ab:b7:8e:fe:02:1c:54:d7:e4:ba:93:06:fe:31:b6:
8b:22:5d:08:52:28:c1:18:6b:05:7d:bd:6f:8b:1a:66:d9:68:
ed:3a:f2:ef:c1:02:eb:55:86:9f:d0:c8:77:48:cc:01:c9:a7:
ca:60:4b:50:b3:d0:6b:1a:89:cc:e8:68:71:bb:6d:16:9c:07:
d8:ba:28:b5:b2:6b:d1:fb:d2:4f:78:2b:62:01:2f:c3:d0:7b:
5c:04:da:45:7f:d4:bd:f8:70:d4:e0:0f:55:82:c7:5f:e6:c1:
2f:1b:c6:d9:e0:ea:2c:5e:f2:56:2f:c2:88:3c:d6:61:38:c2:
52:03:ce:c9:62:a0:72:82:91:3f:ae:76:66:b3:89:c7:5a:4e:
03:10:a6:27:80:a6:8f:e6:3f:ea:e9:91:f5:55:92:2c:9b:b0:
1a:a7:95:36:81:ab:2a:d6:72:52:83:12:7b:31:60:1c:38:bc:
af:34:c4:be:04:75:00:f4:6e:df:64:83:bb:12:aa:6f:bd:7c:
54:05:5a:09:71:fd:57:f2:2b:3c:cf:8f:5e:2b:0d:22:fd:00:
3b:e5:0d:27:61:a7:12:e9:10:57:71:0a:b3:98:7e:c9:f7:7d:
53:ec:33:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:41 2025 by rpki-client