Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0cdaab32-60e8-4bc9-9416-2ffaf4b89078.roa
File: 0cdaab32-60e8-4bc9-9416-2ffaf4b89078.roa (raw, json)
Hash identifier: v9NcvGJ02EiU/u6oCko3pOfWb4X7HOo9mxbxugEwzBU=
Subject key identifier: 6E:39:DD:09:D5:5E:28:5E:D5:13:02:12:AE:92:49:EC:2E:DE:9F:0C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5C7241277E961F0E7BD0D92EE802EFAC892CB7CD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0cdaab32-60e8-4bc9-9416-2ffaf4b89078.roa
Signing time: Thu 17 Apr 2025 16:37:16 +0000
ROA not before: Thu 17 Apr 2025 16:37:16 +0000
ROA not after: Thu 22 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05b:c000::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 17 Apr 2025 20:37:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:72:41:27:7e:96:1f:0e:7b:d0:d9:2e:e8:02:ef:ac:89:2c:b7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 17 16:37:16 2025 GMT
Not After : May 22 23:59:59 2025 GMT
Subject: serialNumber=bf0fb07afedf8b8c5ed6f393971a7d19e1331a89b2b197fe7ae0bd6d3589e868, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7e:fe:bd:17:e9:92:c0:08:53:0b:a3:60:f8:
3c:a3:67:f2:8c:89:24:9c:d8:d1:1d:7a:b6:e8:6c:
9e:b4:45:3d:d0:dd:75:3c:35:4d:53:18:81:ce:1c:
24:1d:65:f2:83:d8:e1:26:f1:21:e2:22:47:6f:19:
26:04:d8:6d:dc:9a:ac:bb:ed:c4:ee:83:5a:e3:44:
ff:ec:9f:5c:3e:a7:9d:e0:6a:47:62:d5:1a:0c:24:
ae:86:0a:c5:48:49:15:06:13:1a:e3:c2:0d:78:03:
da:ad:5e:13:67:d5:ce:6b:ea:24:b1:63:35:c2:e9:
93:87:9e:2e:ba:24:d5:41:ce:bc:e4:91:30:c3:3c:
be:c6:96:50:60:e5:81:66:e5:02:ef:4d:dd:5f:8b:
ea:73:42:e3:9a:dc:d7:cf:ad:a9:f1:9b:fc:98:c9:
55:06:36:89:45:c5:df:03:41:fa:e0:6f:24:51:77:
30:5c:ed:2b:e7:d2:88:9a:a1:64:0b:65:3d:ef:0c:
2e:12:68:bf:f5:17:72:ab:f0:a7:9b:0b:b3:ed:53:
d1:eb:d7:78:d3:81:cf:43:1b:49:ec:e0:b7:55:ed:
7f:ac:c7:3b:21:10:80:3c:6a:1e:98:a6:8c:54:56:
0e:28:9b:fe:2c:36:53:8b:2b:3e:13:56:8f:f4:f4:
9b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:39:DD:09:D5:5E:28:5E:D5:13:02:12:AE:92:49:EC:2E:DE:9F:0C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0cdaab32-60e8-4bc9-9416-2ffaf4b89078.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05b:c000::/40
Signature Algorithm: sha256WithRSAEncryption
32:91:da:ac:2d:5c:ba:a9:b4:06:7f:0b:f1:0f:87:78:57:78:
67:ac:32:55:f1:15:df:c4:c0:9b:96:38:ff:48:f9:7d:b0:77:
58:ea:ac:6e:d2:f0:3e:1a:c8:70:76:d1:06:0c:7a:cb:0f:73:
50:f4:69:a5:8c:99:b9:22:92:b3:67:75:f2:45:9f:00:55:38:
3d:93:a3:e9:6b:38:ff:3c:e4:ee:9a:1a:a1:cf:24:35:4b:3f:
a2:18:10:95:a3:3e:da:74:57:49:48:60:35:24:32:54:d3:db:
cd:94:18:23:44:99:47:b1:44:0e:1e:c2:98:45:67:45:a4:d9:
63:d6:e1:05:56:5d:68:31:f3:21:5d:82:b8:b7:5d:a9:9f:50:
91:02:b4:36:fe:6c:36:21:1d:40:b1:be:cb:3d:8b:e0:c6:7a:
6c:13:2a:7c:fa:9c:1b:60:70:2e:14:b2:57:c4:22:d2:79:d0:
4f:ef:56:7c:38:f9:ec:36:ac:37:93:2f:47:18:06:2e:84:d5:
d4:a8:0e:96:48:0c:0d:56:4f:3d:c9:51:37:39:34:1d:65:ad:
1d:bf:6d:54:2e:ff:a0:4a:9f:06:24:50:47:71:cd:2d:8e:76:
3d:0e:1f:d2:24:f0:8c:30:27:72:6c:c5:21:8b:23:ae:ff:98:
70:74:bf:79
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUXHJBJ36WHw570Nku6ALvrIkst80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MTcxNjM3MTZaFw0yNTA1MjIyMzU5NTlaMHoxSTBHBgNV
BAUTQGJmMGZiMDdhZmVkZjhiOGM1ZWQ2ZjM5Mzk3MWE3ZDE5ZTEzMzFhODliMmIx
OTdmZTdhZTBiZDZkMzU4OWU4NjgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOJ+/r0X6ZLACFMLo2D4PKNn8oyJJJzY0R16tuhsnrRFPdDddTw1TVMYgc4c
JB1l8oPY4SbxIeIiR28ZJgTYbdyarLvtxO6DWuNE/+yfXD6nneBqR2LVGgwkroYK
xUhJFQYTGuPCDXgD2q1eE2fVzmvqJLFjNcLpk4eeLrok1UHOvOSRMMM8vsaWUGDl
gWblAu9N3V+L6nNC45rc18+tqfGb/JjJVQY2iUXF3wNB+uBvJFF3MFztK+fSiJqh
ZAtlPe8MLhJov/UXcqvwp5sLs+1T0evXeNOBz0MbSezgt1Xtf6zHOyEQgDxqHpim
jFRWDiib/iw2U4srPhNWj/T0m/MCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRuOd0J
1V4oXtUTAhKukknsLt6fDDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MGNkYWFiMzItNjBlOC00YmM5LTk0MTYtMmZmYWY0Yjg5MDc4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FvA
MA0GCSqGSIb3DQEBCwUAA4IBAQAykdqsLVy6qbQGfwvxD4d4V3hnrDJV8RXfxMCb
ljj/SPl9sHdY6qxu0vA+GshwdtEGDHrLD3NQ9GmljJm5IpKzZ3XyRZ8AVTg9k6Pp
azj/POTumhqhzyQ1Sz+iGBCVoz7adFdJSGA1JDJU09vNlBgjRJlHsUQOHsKYRWdF
pNlj1uEFVl1oMfMhXYK4t12pn1CRArQ2/mw2IR1Asb7LPYvgxnpsEyp8+pwbYHAu
FLJXxCLSedBP71Z8OPnsNqw3ky9HGAYuhNXUqA6WSAwNVk89yVE3OTQdZa0dv21U
Lv+gSp8GJFBHcc0tjnY9Dh/SJPCMMCdybMUhiyOu/5hwdL95
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:46:13 2025 by rpki-client