Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a64e8df1-4906-48de-bb69-c49945f68500.roa
File: a64e8df1-4906-48de-bb69-c49945f68500.roa (raw, json)
Hash identifier: ++jny+YRO4ky/9lGhALVSPNKTAIJg+2wgDV1/9RHstk=
Subject key identifier: FF:8D:42:9C:03:F1:89:94:94:F6:74:32:25:66:AC:7D:19:F2:7F:97
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 796B37AE10858CCFA9B75265060CEE85D66AD534
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a64e8df1-4906-48de-bb69-c49945f68500.roa
Signing time: Tue 20 May 2025 18:30:17 +0000
ROA not before: Tue 20 May 2025 18:30:17 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:6080::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 21:08:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:6b:37:ae:10:85:8c:cf:a9:b7:52:65:06:0c:ee:85:d6:6a:d5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 18:30:17 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=97a87a5d17801840a2588ec93a37fb58bd3513cb8e73dab589daa94f6e0c3175, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5e:fd:de:3d:b3:28:05:56:c5:d5:29:f1:7f:
1e:b5:32:17:ca:6b:dd:56:11:35:3d:98:89:50:4e:
83:6a:cf:66:db:c9:ca:15:89:32:79:66:eb:b4:f1:
8b:87:82:ab:9e:03:cc:65:cf:b9:f6:7b:59:5d:59:
cb:b9:c4:c0:fc:76:14:38:6f:69:02:c6:9c:10:21:
37:37:d8:86:42:9a:d9:d6:75:ff:1f:b1:fc:23:f8:
98:31:db:5b:2d:3c:33:ba:46:0d:b1:68:23:7f:a8:
2e:b8:13:6b:e2:3c:83:ad:ef:d7:b0:b9:b9:ca:cc:
bf:36:74:34:b5:d9:07:76:6b:3d:3e:79:c7:64:11:
c6:62:c7:d6:fc:96:56:0b:1a:48:29:7a:66:70:7b:
30:d4:f7:7d:00:fb:72:00:73:81:06:3e:12:c0:5b:
61:c3:e2:79:ea:06:a7:7a:da:a8:f8:49:69:67:b7:
7b:c3:a3:77:ee:b3:ab:5c:80:59:56:eb:80:5b:20:
66:0c:a8:4e:54:e7:0b:6e:36:1b:70:d8:5c:0d:df:
c8:34:3c:5f:a8:d3:9d:a7:78:89:6e:6f:62:67:55:
1c:18:65:6b:93:55:bb:8a:b0:f4:b1:04:55:21:80:
ff:8e:f8:d2:d7:82:fb:28:30:f9:38:31:e1:48:08:
35:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8D:42:9C:03:F1:89:94:94:F6:74:32:25:66:AC:7D:19:F2:7F:97
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a64e8df1-4906-48de-bb69-c49945f68500.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:6080::/48
Signature Algorithm: sha256WithRSAEncryption
10:e3:88:84:d7:9f:ce:45:39:46:5a:71:0d:5f:4e:fa:e7:1d:
45:92:f9:ad:30:e6:50:c0:ca:49:e8:d3:ec:8e:aa:c3:c8:08:
4b:05:56:32:ea:d0:cb:b5:4c:68:fe:87:fc:a7:d9:df:99:1c:
7d:c9:af:88:c8:c0:9e:80:6b:0e:12:95:4e:b0:6f:cf:26:47:
19:8e:c0:29:78:e3:85:f1:3e:ca:74:db:98:88:7d:a9:c7:e5:
2e:4a:e3:a1:46:98:9f:18:36:17:30:f8:05:2a:c5:a2:b9:82:
31:ba:66:50:fe:87:a6:fc:5f:2f:a6:c6:6a:b8:cf:91:bb:53:
d4:61:62:fb:21:88:18:55:91:8a:ce:2e:9a:1f:b8:db:b6:ec:
0f:36:30:32:69:01:dd:d3:29:74:28:01:ee:0c:a6:6d:bd:11:
0e:01:c8:55:ee:c8:91:37:2d:a3:48:91:45:3b:63:97:e6:b2:
38:c4:2d:39:0a:af:57:bf:46:04:ee:a4:19:61:07:4a:2c:98:
44:5f:95:16:e4:41:a0:df:4b:45:1b:38:1d:a0:9d:c1:42:5b:
31:a7:30:12:07:43:7c:71:c1:53:53:18:79:60:aa:a9:e0:f4:
d2:69:88:9a:8b:40:57:2c:86:3e:13:de:36:f2:78:2f:d5:b7:
22:3b:1f:73
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUeWs3rhCFjM+pt1JlBgzuhdZq1TQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAxODMwMTdaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDk3YTg3YTVkMTc4MDE4NDBhMjU4OGVjOTNhMzdmYjU4YmQzNTEzY2I4ZTcz
ZGFiNTg5ZGFhOTRmNmUwYzMxNzUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJle/d49sygFVsXVKfF/HrUyF8pr3VYRNT2YiVBOg2rPZtvJyhWJMnlm67Tx
i4eCq54DzGXPufZ7WV1Zy7nEwPx2FDhvaQLGnBAhNzfYhkKa2dZ1/x+x/CP4mDHb
Wy08M7pGDbFoI3+oLrgTa+I8g63v17C5ucrMvzZ0NLXZB3ZrPT55x2QRxmLH1vyW
VgsaSCl6ZnB7MNT3fQD7cgBzgQY+EsBbYcPieeoGp3raqPhJaWe3e8Ojd+6zq1yA
WVbrgFsgZgyoTlTnC242G3DYXA3fyDQ8X6jTnad4iW5vYmdVHBhla5NVu4qw9LEE
VSGA/4740teC+ygw+Tgx4UgINRUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT/jUKc
A/GJlJT2dDIlZqx9GfJ/lzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTY0ZThkZjEtNDkwNi00OGRlLWJiNjktYzQ5OTQ1ZjY4NTAwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HRg
gDANBgkqhkiG9w0BAQsFAAOCAQEAEOOIhNefzkU5RlpxDV9O+ucdRZL5rTDmUMDK
SejT7I6qw8gISwVWMurQy7VMaP6H/KfZ35kcfcmviMjAnoBrDhKVTrBvzyZHGY7A
KXjjhfE+ynTbmIh9qcflLkrjoUaYnxg2FzD4BSrFormCMbpmUP6HpvxfL6bGarjP
kbtT1GFi+yGIGFWRis4umh+427bsDzYwMmkB3dMpdCgB7gymbb0RDgHIVe7IkTct
o0iRRTtjl+ayOMQtOQqvV79GBO6kGWEHSiyYRF+VFuRBoN9LRRs4HaCdwUJbMacw
EgdDfHHBU1MYeWCqqeD00mmImotAVyyGPhPeNvJ4L9W3Ijsfcw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:57:12 2025 by rpki-client