Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/90acb692-e909-4377-8446-c65accbd4ff9.roa
File: 90acb692-e909-4377-8446-c65accbd4ff9.roa (raw, json)
Hash identifier: ofUjWBB8AAzU/2E5M2VV3x/iVfki5Hw0hJ/zO4jKryo=
Subject key identifier: F0:A7:16:BE:4C:0D:B8:BD:EE:A3:7E:D1:07:71:7B:DC:8A:28:FA:11
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 03818C1C851F25B6FAC291AC6A878F00AFACCC84
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/90acb692-e909-4377-8446-c65accbd4ff9.roa
Signing time: Thu 22 May 2025 01:24:08 +0000
ROA not before: Thu 22 May 2025 01:24:08 +0000
ROA not after: Thu 26 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:e080::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 21:08:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:81:8c:1c:85:1f:25:b6:fa:c2:91:ac:6a:87:8f:00:af:ac:cc:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 01:24:08 2025 GMT
Not After : Jun 26 23:59:59 2025 GMT
Subject: serialNumber=1d4e981cb36e1164bd5e7ae26a6fa9ab5b4c8fa087939b13322d977dd61969ee, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:05:7d:90:74:a7:13:24:e1:7d:fa:20:5c:
8f:26:9a:77:37:5b:ef:3c:4a:95:49:80:84:ad:c7:
34:86:ab:cf:15:87:39:07:5f:58:71:27:7d:ff:cb:
f1:b6:c0:75:32:3b:96:a9:f5:b4:e1:a5:50:77:e3:
6d:f0:1a:d3:5f:a3:a2:98:43:71:6b:1d:e5:8a:09:
e3:93:07:63:ba:aa:21:b9:30:65:04:a8:d2:4b:4e:
02:c8:29:1f:31:42:20:6f:0d:58:67:ef:f2:01:79:
33:24:69:f3:23:d7:7f:a3:44:68:1b:bf:21:bf:9c:
06:fa:e1:f0:f8:75:2d:0e:4b:19:87:6b:9a:82:7c:
a3:e7:f5:93:df:e1:78:1d:d6:94:ab:59:d5:65:f5:
24:88:a5:6e:36:51:fd:66:6e:7a:38:fe:a2:5c:1e:
2e:9b:e3:bc:8d:54:f4:aa:8b:73:7d:67:05:eb:06:
3e:91:51:5d:0f:e3:af:55:38:e5:fc:21:75:bf:bf:
74:c1:9c:c3:1e:02:5e:50:03:53:ec:cb:ed:9b:12:
54:80:d1:3e:eb:75:a8:6f:c6:49:92:a9:9a:e2:79:
b7:5f:af:78:c7:7b:23:84:e7:05:b7:2f:bf:5e:59:
a0:cb:4d:c4:28:07:78:2d:83:25:84:30:58:88:20:
2e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A7:16:BE:4C:0D:B8:BD:EE:A3:7E:D1:07:71:7B:DC:8A:28:FA:11
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/90acb692-e909-4377-8446-c65accbd4ff9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:e080::/48
Signature Algorithm: sha256WithRSAEncryption
63:38:e0:d4:6b:39:f2:8a:b5:8d:83:61:1a:4b:84:98:cb:31:
ef:75:85:73:d7:66:d9:3f:2d:c8:3f:12:67:94:7a:8a:fe:09:
ff:d1:6c:9f:bf:9c:1b:32:9b:c4:4c:92:19:4e:b0:86:c7:7d:
d1:9c:da:84:59:b1:8a:77:b2:5a:cc:be:34:83:39:15:b1:7a:
ef:a1:e6:db:e1:81:6a:32:fe:6e:42:3f:4e:03:5b:b9:ce:ad:
e7:a2:6f:07:21:e1:8b:6b:c2:63:be:8e:84:e8:bf:fe:d6:ed:
5e:3b:3f:71:44:98:47:27:0d:3e:38:07:72:d1:05:40:67:11:
4a:be:ba:7a:41:cb:a0:f7:58:4c:5d:e6:60:8d:97:ff:68:54:
d1:42:47:66:e0:7c:75:f5:99:de:6c:b2:96:a4:8a:88:dc:42:
9a:db:68:7f:1b:98:5b:56:25:fe:35:5c:34:09:67:36:d2:be:
92:8f:b9:da:9c:64:54:2b:ac:9a:d7:c6:18:54:d0:21:e4:4d:
b7:9a:4b:c3:fd:a2:2b:1f:62:63:40:0e:50:d0:75:36:78:13:
ba:b4:80:47:92:f5:a1:f4:f5:e5:51:d3:ef:d1:7a:2b:75:45:
88:5b:fd:15:f7:ff:3b:52:82:4f:c4:e8:3c:79:90:a0:d1:72:
9d:03:54:bb
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUA4GMHIUfJbb6wpGsaoePAK+szIQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjIwMTI0MDhaFw0yNTA2MjYyMzU5NTlaMHoxSTBHBgNV
BAUTQDFkNGU5ODFjYjM2ZTExNjRiZDVlN2FlMjZhNmZhOWFiNWI0YzhmYTA4Nzkz
OWIxMzMyMmQ5NzdkZDYxOTY5ZWUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALXnBX2QdKcTJOF9+iBcjyaadzdb7zxKlUmAhK3HNIarzxWHOQdfWHEnff/L
8bbAdTI7lqn1tOGlUHfjbfAa01+jophDcWsd5YoJ45MHY7qqIbkwZQSo0ktOAsgp
HzFCIG8NWGfv8gF5MyRp8yPXf6NEaBu/Ib+cBvrh8Ph1LQ5LGYdrmoJ8o+f1k9/h
eB3WlKtZ1WX1JIilbjZR/WZuejj+olweLpvjvI1U9KqLc31nBesGPpFRXQ/jr1U4
5fwhdb+/dMGcwx4CXlADU+zL7ZsSVIDRPut1qG/GSZKpmuJ5t1+veMd7I4TnBbcv
v15ZoMtNxCgHeC2DJYQwWIggLuUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTwpxa+
TA24ve6jftEHcXvciij6ETAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTBhY2I2OTItZTkwOS00Mzc3LTg0NDYtYzY1YWNjYmQ0ZmY5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Fng
gDANBgkqhkiG9w0BAQsFAAOCAQEAYzjg1Gs58oq1jYNhGkuEmMsx73WFc9dm2T8t
yD8SZ5R6iv4J/9Fsn7+cGzKbxEySGU6whsd90ZzahFmxineyWsy+NIM5FbF676Hm
2+GBajL+bkI/TgNbuc6t56JvByHhi2vCY76OhOi//tbtXjs/cUSYRycNPjgHctEF
QGcRSr66ekHLoPdYTF3mYI2X/2hU0UJHZuB8dfWZ3myylqSKiNxCmttofxuYW1Yl
/jVcNAlnNtK+ko+52pxkVCusmtfGGFTQIeRNt5pLw/2iKx9iY0AOUNB1NngTurSA
R5L1ofT15VHT79F6K3VFiFv9Fff/O1KCT8ToPHmQoNFynQNUuw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:07:42 2025 by rpki-client