Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9beb52ef-bed6-4e3c-b003-e2b0e5840627.roa
File: 9beb52ef-bed6-4e3c-b003-e2b0e5840627.roa (raw, json)
Hash identifier: jFmTAZ/JxS8MTT5bUnApM+0X1B6W2voCyYrYq4Fw2bk=
Subject key identifier: F7:CA:EA:B3:75:97:56:A6:32:01:EF:36:BE:08:21:5C:1F:89:DB:03
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6BD1A5808EE885AFCCEB20ED5977291D3D05008D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9beb52ef-bed6-4e3c-b003-e2b0e5840627.roa
Signing time: Thu 22 May 2025 01:24:02 +0000
ROA not before: Thu 22 May 2025 01:24:02 +0000
ROA not after: Thu 26 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:a040::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 21:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:d1:a5:80:8e:e8:85:af:cc:eb:20:ed:59:77:29:1d:3d:05:00:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 01:24:02 2025 GMT
Not After : Jun 26 23:59:59 2025 GMT
Subject: serialNumber=0770280554c870ec3dfeccac4aa4b88e517fe1f4d79769b30c45d2d7577f5db3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7c:cb:27:a4:c4:a7:4f:af:be:f1:55:7f:c8:
84:51:5e:bd:f4:a6:45:60:83:3c:c4:62:a9:31:26:
a7:99:b4:9c:15:93:db:71:62:c0:60:62:d2:a1:25:
fb:a9:00:bf:12:aa:5b:03:83:87:e2:5f:9b:97:9f:
94:35:69:7b:d6:8d:ce:c8:ac:63:47:34:a7:24:b9:
0b:19:e8:78:9a:0d:9c:2b:83:b1:9e:14:6b:ea:d8:
e5:e8:f2:7a:90:32:e6:6c:fa:cc:5e:00:6b:53:d6:
b6:6a:71:3d:7f:92:74:15:23:11:44:57:ab:a3:f8:
26:f0:94:c9:0a:48:05:a2:33:52:91:25:ad:24:aa:
02:5d:a6:b1:4a:75:90:88:71:0d:17:0e:58:ed:33:
3b:05:4c:d4:e0:3a:5b:b9:68:cc:fe:ad:a6:d8:4e:
50:3f:2e:32:a4:c8:4a:c5:8b:f3:17:5b:fb:d0:a4:
9b:a1:78:f0:c7:62:53:74:a1:a9:86:a6:3e:c0:c4:
05:d8:f9:53:33:ad:86:d8:70:7e:a4:2c:c1:5c:73:
88:a2:9d:1f:84:92:70:ed:63:6f:69:4b:21:de:fa:
fd:bc:a6:44:e9:d1:10:12:04:72:f3:62:3b:78:ea:
5a:26:60:34:46:a2:05:28:c2:3e:38:92:10:14:7b:
3d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CA:EA:B3:75:97:56:A6:32:01:EF:36:BE:08:21:5C:1F:89:DB:03
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9beb52ef-bed6-4e3c-b003-e2b0e5840627.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:a040::/48
Signature Algorithm: sha256WithRSAEncryption
10:26:3f:32:24:e5:7d:2c:ba:d7:83:cd:1b:bd:8b:72:e8:3a:
12:1c:c2:26:06:e8:2b:b6:51:95:0d:6f:5c:a3:ca:7b:f9:5f:
0d:89:5d:14:7a:80:db:1e:e0:af:f5:17:5f:10:a7:4a:4d:8a:
ec:53:54:38:6e:73:e5:e4:80:4f:1b:83:67:9e:ca:dd:16:42:
0d:37:98:db:51:83:db:c4:25:b2:07:8a:47:57:11:56:30:32:
bb:5b:bd:d0:19:0a:d9:a3:6e:92:fb:2a:77:c3:e2:ef:2c:04:
00:9c:80:45:f5:8e:a8:dc:a7:c1:0d:a1:a6:62:d2:d8:1f:b8:
ec:97:bc:31:71:57:a2:16:84:71:66:7d:d6:a2:3a:fa:cf:37:
99:a1:19:46:15:e9:05:39:95:f6:a7:07:8a:3a:05:bf:bc:39:
dc:bc:c8:64:37:d9:6e:96:a7:f9:e9:db:68:83:2e:6b:24:3d:
f1:b8:1f:e4:ff:74:6c:1a:cc:86:4d:27:94:62:45:3f:25:84:
f0:7a:03:b4:36:6c:1b:fe:70:75:f4:5c:8b:3e:ee:e1:0d:71:
96:f2:cc:03:fb:6a:68:8a:58:fc:f8:36:f0:24:40:cd:c0:65:
0e:db:53:60:f4:8c:9c:04:0a:99:42:53:b8:a3:d4:96:f0:76:
a1:2d:c7:1e
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUa9GlgI7oha/M6yDtWXcpHT0FAI0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjIwMTI0MDJaFw0yNTA2MjYyMzU5NTlaMHoxSTBHBgNV
BAUTQDA3NzAyODA1NTRjODcwZWMzZGZlY2NhYzRhYTRiODhlNTE3ZmUxZjRkNzk3
NjliMzBjNDVkMmQ3NTc3ZjVkYjMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMp8yyekxKdPr77xVX/IhFFevfSmRWCDPMRiqTEmp5m0nBWT23FiwGBi0qEl
+6kAvxKqWwODh+Jfm5eflDVpe9aNzsisY0c0pyS5CxnoeJoNnCuDsZ4Ua+rY5ejy
epAy5mz6zF4Aa1PWtmpxPX+SdBUjEURXq6P4JvCUyQpIBaIzUpElrSSqAl2msUp1
kIhxDRcOWO0zOwVM1OA6W7lozP6tpthOUD8uMqTISsWL8xdb+9Ckm6F48MdiU3Sh
qYamPsDEBdj5UzOththwfqQswVxziKKdH4SScO1jb2lLId76/bymROnREBIEcvNi
O3jqWiZgNEaiBSjCPjiSEBR7PcMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT3yuqz
dZdWpjIB7za+CCFcH4nbAzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OWJlYjUyZWYtYmVkNi00ZTNjLWIwMDMtZTJiMGU1ODQwNjI3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Fmg
QDANBgkqhkiG9w0BAQsFAAOCAQEAECY/MiTlfSy614PNG72Lcug6EhzCJgboK7ZR
lQ1vXKPKe/lfDYldFHqA2x7gr/UXXxCnSk2K7FNUOG5z5eSATxuDZ57K3RZCDTeY
21GD28QlsgeKR1cRVjAyu1u90BkK2aNukvsqd8Pi7ywEAJyARfWOqNynwQ2hpmLS
2B+47Je8MXFXohaEcWZ91qI6+s83maEZRhXpBTmV9qcHijoFv7w53LzIZDfZbpan
+enbaIMuayQ98bgf5P90bBrMhk0nlGJFPyWE8HoDtDZsG/5wdfRciz7u4Q1xlvLM
A/tqaIpY/Pg28CRAzcBlDttTYPSMnAQKmUJTuKPUlvB2oS3HHg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:59:10 2025 by rpki-client