Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2f9730c8-a79c-4904-b174-700cfacc16e1.roa
File: 2f9730c8-a79c-4904-b174-700cfacc16e1.roa (raw, json)
Hash identifier: 9gIYfVjo/KzmXrbPZXByZ3N5pflCUfZp1SgYTG1t1ng=
Subject key identifier: B5:E2:7C:78:C4:42:00:13:8D:C0:1A:79:C8:D4:CB:58:20:EE:FE:67
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2E03BC1A8AC1E1F65684CF875AB8A502C0D8F51F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2f9730c8-a79c-4904-b174-700cfacc16e1.roa
Signing time: Thu 22 May 2025 01:23:59 +0000
ROA not before: Thu 22 May 2025 01:23:59 +0000
ROA not after: Thu 26 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:8c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 21:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:03:bc:1a:8a:c1:e1:f6:56:84:cf:87:5a:b8:a5:02:c0:d8:f5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 01:23:59 2025 GMT
Not After : Jun 26 23:59:59 2025 GMT
Subject: serialNumber=6af2273d23dea169e353cdc0c8bdec36d3594b02483785af9cf1a838e97371df, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:51:e8:bf:14:5c:65:12:94:20:58:f4:c1:
dc:96:73:3a:61:72:68:ba:43:88:e0:11:6f:1c:96:
7e:6c:a1:05:8c:9a:e6:8b:c6:d1:65:cc:a0:ad:b1:
0c:e0:19:0d:65:11:c2:c1:30:f1:a8:80:1b:d6:cb:
0a:4b:e3:b5:ad:cf:98:ba:62:06:2f:3d:3a:33:86:
f9:48:02:0a:34:c3:f1:e4:7f:fb:30:38:75:7c:c5:
20:0a:8c:93:36:a3:ae:1f:34:e0:e3:62:f7:80:d4:
71:fa:8b:49:4e:f4:d7:29:b6:7d:32:42:8e:96:20:
09:71:0b:c9:00:15:11:84:e4:de:f5:3e:c9:ba:dd:
15:c0:9b:2e:ef:51:46:39:f0:a8:0c:c4:38:26:1b:
48:4c:67:54:ce:ef:dd:45:b1:89:22:a7:85:68:a9:
d3:fb:24:c3:5e:7c:28:23:6f:ab:ee:8c:83:78:db:
f2:54:96:f2:48:39:97:b0:f5:22:d2:50:88:ef:d2:
cd:63:76:c2:d1:54:e1:63:be:ba:40:ca:4d:88:f2:
cb:50:55:38:ca:a4:05:94:f2:e7:c9:33:27:bf:c4:
7f:5b:8a:e6:57:d3:06:3f:61:63:15:4b:d4:39:8f:
14:57:49:f4:1c:6c:54:67:9a:c4:b1:1a:4a:7c:cf:
44:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E2:7C:78:C4:42:00:13:8D:C0:1A:79:C8:D4:CB:58:20:EE:FE:67
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2f9730c8-a79c-4904-b174-700cfacc16e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:8c0::/48
Signature Algorithm: sha256WithRSAEncryption
aa:69:cf:d2:01:68:ea:73:33:0e:2a:d7:71:34:15:1f:23:6b:
f0:df:bd:71:b9:97:3c:05:43:45:59:7e:68:4b:09:42:3c:dc:
02:38:10:3d:87:a4:ff:6c:a9:6b:d7:fc:08:98:cf:a7:4f:28:
9a:24:a5:e1:9b:ac:dd:f9:e4:1b:44:64:34:c1:d9:05:96:83:
59:f7:2b:ff:2f:5e:e9:b2:15:b1:f1:ad:48:ae:45:c7:6f:a7:
0f:4a:8f:be:b7:af:c6:b3:46:6e:25:44:b8:ab:ca:54:46:92:
65:47:b4:3f:5e:4f:2a:81:7c:84:a0:10:7d:1e:1c:3f:25:4c:
eb:45:c9:bc:49:49:8c:6c:64:09:60:49:a4:04:d0:9b:3b:3e:
0c:b3:ed:46:1a:54:e6:f2:fb:97:c1:56:f1:cd:73:cf:b9:a6:
89:37:90:6e:c4:09:bf:bf:ae:18:e7:d6:4b:38:33:cb:9f:69:
c8:65:1e:43:86:fb:66:c1:5f:d6:35:b3:78:ad:f0:aa:2c:40:
6a:13:30:5c:48:02:25:e4:62:a5:14:54:fc:f1:7b:c0:0b:c7:
42:bc:a3:13:77:22:e5:c4:fe:8c:6d:96:d3:8e:33:2d:22:82:
f6:39:e8:34:4c:4b:a2:b1:42:f1:76:8c:a7:84:7b:f1:bf:76:
08:ef:23:a1
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIULgO8GorB4fZWhM+HWrilAsDY9R8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjIwMTIzNTlaFw0yNTA2MjYyMzU5NTlaMHoxSTBHBgNV
BAUTQDZhZjIyNzNkMjNkZWExNjllMzUzY2RjMGM4YmRlYzM2ZDM1OTRiMDI0ODM3
ODVhZjljZjFhODM4ZTk3MzcxZGYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKR+Uei/FFxlEpQgWPTB3JZzOmFyaLpDiOARbxyWfmyhBYya5ovG0WXMoK2x
DOAZDWURwsEw8aiAG9bLCkvjta3PmLpiBi89OjOG+UgCCjTD8eR/+zA4dXzFIAqM
kzajrh804ONi94DUcfqLSU701ym2fTJCjpYgCXELyQAVEYTk3vU+ybrdFcCbLu9R
RjnwqAzEOCYbSExnVM7v3UWxiSKnhWip0/skw158KCNvq+6Mg3jb8lSW8kg5l7D1
ItJQiO/SzWN2wtFU4WO+ukDKTYjyy1BVOMqkBZTy58kzJ7/Ef1uK5lfTBj9hYxVL
1DmPFFdJ9BxsVGeaxLEaSnzPRJ0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBS14nx4
xEIAE43AGnnI1MtYIO7+ZzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MmY5NzMwYzgtYTc5Yy00OTA0LWIxNzQtNzAwY2ZhY2MxNmUxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0FkI
wDANBgkqhkiG9w0BAQsFAAOCAQEAqmnP0gFo6nMzDirXcTQVHyNr8N+9cbmXPAVD
RVl+aEsJQjzcAjgQPYek/2ypa9f8CJjPp08omiSl4Zus3fnkG0RkNMHZBZaDWfcr
/y9e6bIVsfGtSK5Fx2+nD0qPvrevxrNGbiVEuKvKVEaSZUe0P15PKoF8hKAQfR4c
PyVM60XJvElJjGxkCWBJpATQmzs+DLPtRhpU5vL7l8FW8c1zz7mmiTeQbsQJv7+u
GOfWSzgzy59pyGUeQ4b7ZsFf1jWzeK3wqixAahMwXEgCJeRipRRU/PF7wAvHQryj
E3ci5cT+jG2W044zLSKC9jnoNExLorFC8XaMp4R78b92CO8joQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:58:47 2025 by rpki-client