Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/84d0d38e-8b2f-4092-881f-d63d195b8be1.roa
File: 84d0d38e-8b2f-4092-881f-d63d195b8be1.roa (raw, json)
Hash identifier: IocUieXxzo6+cBUHfyycr6jSxAOttFoNnOWE2mrK5eI=
Subject key identifier: B1:21:4C:57:E0:57:2B:7C:E7:00:EE:07:2A:E2:60:58:A7:AA:A5:FD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3514C91D1B1906081F4A022CAD7FC98B64D4AD96
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/84d0d38e-8b2f-4092-881f-d63d195b8be1.roa
Signing time: Thu 22 May 2025 01:24:07 +0000
ROA not before: Thu 22 May 2025 01:24:07 +0000
ROA not after: Thu 26 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:e040::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 21:08:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:14:c9:1d:1b:19:06:08:1f:4a:02:2c:ad:7f:c9:8b:64:d4:ad:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 01:24:07 2025 GMT
Not After : Jun 26 23:59:59 2025 GMT
Subject: serialNumber=0c069dbeaa4945de1dd902a6650b3b2b22fd6e23316d5b8642b7e7fd7718ae1b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5d:74:22:2b:5d:a1:fb:86:6b:98:3d:8a:c8:
ff:9a:c0:5f:31:8d:a9:30:fe:fd:9d:7c:4c:19:19:
61:e8:9e:bc:4e:6d:f1:cf:6c:31:58:4f:41:e2:d6:
b6:fc:0c:56:61:3c:05:dc:04:ed:8a:8e:3b:11:5d:
a0:65:79:20:6a:c5:4c:66:c3:4b:a2:75:ca:4e:b3:
43:5c:fa:f3:a4:ce:df:cd:62:70:24:32:81:a2:61:
dd:3e:7e:35:ab:74:3b:c4:62:a6:8a:74:3f:9b:84:
08:d8:08:40:b4:28:2f:36:21:c0:b0:59:4c:ab:1f:
3d:29:bc:32:71:bf:4e:23:76:6a:73:f5:3e:6f:e0:
7d:69:77:87:f6:05:cc:06:53:f3:41:22:81:31:14:
e4:5f:e9:83:76:bf:ad:8b:0f:c2:de:b0:9a:84:a6:
32:93:57:56:0d:04:65:b6:17:9d:d4:c2:f7:c9:f0:
12:45:d1:00:f0:02:fa:f9:c0:7a:83:69:62:af:ed:
37:69:95:41:e2:58:85:1e:71:c8:3e:bf:ff:99:af:
5a:2b:ba:86:25:82:04:35:f0:b2:17:08:f1:c1:1e:
b0:fa:91:b0:e2:5a:df:7a:d2:8b:38:f2:cd:f7:14:
ad:b8:8b:ec:63:af:4f:14:79:ae:d0:f7:31:30:5d:
b6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:21:4C:57:E0:57:2B:7C:E7:00:EE:07:2A:E2:60:58:A7:AA:A5:FD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/84d0d38e-8b2f-4092-881f-d63d195b8be1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:e040::/48
Signature Algorithm: sha256WithRSAEncryption
aa:ec:af:0e:d7:b7:c5:d4:c7:87:8e:82:23:c6:95:a3:9d:36:
63:37:c6:a8:dd:40:64:cc:c3:b0:3d:68:da:57:5f:c7:0b:f6:
d5:a1:57:99:bb:02:e0:f6:57:5a:5a:59:d0:46:f0:3a:58:83:
e3:95:f9:3c:97:69:78:2d:cd:19:37:b4:7a:98:5a:8c:dd:e6:
39:18:31:16:e0:74:c9:ba:8b:9a:40:9f:8f:e7:d2:31:82:68:
d5:30:05:e9:0f:26:bb:b4:89:40:0f:a7:c6:ff:9f:20:bb:35:
07:ec:73:99:79:99:20:1b:20:f3:39:20:11:49:3c:9d:aa:3e:
05:8a:45:d0:90:ff:c2:e3:17:b4:59:28:f2:3f:7f:b0:0b:7d:
43:3c:8c:fa:c6:95:88:e7:62:d9:71:0d:49:31:28:bd:46:6c:
12:93:55:e5:f6:e8:ed:b5:45:24:bd:ef:6f:36:34:ab:a0:45:
08:df:a6:3d:33:84:cf:88:2b:9f:a7:df:a9:91:0a:da:9e:be:
48:da:b5:37:35:bb:80:6c:2a:da:56:df:c1:3e:7a:f3:25:73:
0e:2e:7f:82:28:49:83:5e:16:7e:12:01:dd:7e:ec:e5:9c:10:
f9:68:08:f2:f6:c2:d7:f2:96:5c:ed:fe:3e:c4:0d:15:c2:ab:
31:63:1e:0b
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUNRTJHRsZBggfSgIsrX/Ji2TUrZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjIwMTI0MDdaFw0yNTA2MjYyMzU5NTlaMHoxSTBHBgNV
BAUTQDBjMDY5ZGJlYWE0OTQ1ZGUxZGQ5MDJhNjY1MGIzYjJiMjJmZDZlMjMzMTZk
NWI4NjQyYjdlN2ZkNzcxOGFlMWIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOBddCIrXaH7hmuYPYrI/5rAXzGNqTD+/Z18TBkZYeievE5t8c9sMVhPQeLW
tvwMVmE8BdwE7YqOOxFdoGV5IGrFTGbDS6J1yk6zQ1z686TO381icCQygaJh3T5+
Nat0O8Ripop0P5uECNgIQLQoLzYhwLBZTKsfPSm8MnG/TiN2anP1Pm/gfWl3h/YF
zAZT80EigTEU5F/pg3a/rYsPwt6wmoSmMpNXVg0EZbYXndTC98nwEkXRAPAC+vnA
eoNpYq/tN2mVQeJYhR5xyD6//5mvWiu6hiWCBDXwshcI8cEesPqRsOJa33rSizjy
zfcUrbiL7GOvTxR5rtD3MTBdtk8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSxIUxX
4FcrfOcA7gcq4mBYp6ql/TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ODRkMGQzOGUtOGIyZi00MDkyLTg4MWYtZDYzZDE5NWI4YmUxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Fng
QDANBgkqhkiG9w0BAQsFAAOCAQEAquyvDte3xdTHh46CI8aVo502YzfGqN1AZMzD
sD1o2ldfxwv21aFXmbsC4PZXWlpZ0EbwOliD45X5PJdpeC3NGTe0ephajN3mORgx
FuB0ybqLmkCfj+fSMYJo1TAF6Q8mu7SJQA+nxv+fILs1B+xzmXmZIBsg8zkgEUk8
nao+BYpF0JD/wuMXtFko8j9/sAt9QzyM+saViOdi2XENSTEovUZsEpNV5fbo7bVF
JL3vbzY0q6BFCN+mPTOEz4grn6ffqZEK2p6+SNq1NzW7gGwq2lbfwT568yVzDi5/
gihJg14WfhIB3X7s5ZwQ+WgI8vbC1/KWXO3+PsQNFcKrMWMeCw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:57:10 2025 by rpki-client