Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b08b91b5-4b2d-4d4d-9051-d24ff31a95ae.roa
File: b08b91b5-4b2d-4d4d-9051-d24ff31a95ae.roa (raw, json)
Hash identifier: pjxTLDXyRzPoC7JjyNmT9VocXbr6g/EmcC1R7oQqcYQ=
Subject key identifier: 25:94:CE:39:54:88:52:1E:8D:BD:B9:B0:E6:47:39:9E:EE:39:16:C3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4D0937161A0B2402CB8991CA1C3C37A0DDBDF5C7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b08b91b5-4b2d-4d4d-9051-d24ff31a95ae.roa
Signing time: Thu 22 May 2025 01:36:58 +0000
ROA not before: Thu 22 May 2025 01:36:58 +0000
ROA not after: Thu 26 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:a000::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 03 Jun 2025 20:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:09:37:16:1a:0b:24:02:cb:89:91:ca:1c:3c:37:a0:dd:bd:f5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 01:36:58 2025 GMT
Not After : Jun 26 23:59:59 2025 GMT
Subject: serialNumber=05a269ee2094a6c33fd0d14d360385a4b2b413f4e49beab632edb622022a00f0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:e4:e4:ad:ce:83:23:52:e4:1d:72:82:f1:
46:6a:64:08:66:a5:63:d8:81:6a:ae:1f:35:2b:5f:
43:4d:4e:22:89:3f:34:7f:6c:1d:c0:05:d1:42:e9:
8d:4c:6a:02:66:a2:40:94:6d:d1:0c:05:c4:0d:89:
81:0f:9b:90:04:a3:bc:71:5d:0c:ed:8b:10:c7:1a:
be:3a:9d:5d:4e:9d:3b:33:c8:65:5e:29:f3:25:7a:
4f:3d:3e:44:a8:17:43:db:62:83:b5:46:40:85:e8:
a0:40:5d:ad:4a:e8:f6:1d:e5:fa:02:a3:57:0f:0c:
1b:a6:8b:9e:cc:a4:57:70:ed:7e:a6:8f:ca:68:e8:
4d:fa:b9:52:7b:87:73:73:df:9a:c7:92:c2:4e:c6:
0f:22:72:9a:f9:7f:bd:20:b3:f4:60:b5:ca:10:ef:
90:ee:9d:cd:4f:9b:bc:d2:c2:a9:c7:4d:c9:dc:8e:
fa:bd:ed:33:ac:3b:fc:a2:66:8c:80:2d:12:05:c3:
36:b2:2d:aa:5b:6f:64:f4:5f:d8:3d:f2:96:40:3d:
a1:41:09:e4:32:32:fc:7e:0a:28:f7:e6:90:80:d9:
98:09:3e:9e:da:0c:e5:ce:07:64:d8:c4:83:49:61:
ef:ea:bf:94:1f:c2:4b:27:3d:4b:03:57:98:eb:8a:
97:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:94:CE:39:54:88:52:1E:8D:BD:B9:B0:E6:47:39:9E:EE:39:16:C3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b08b91b5-4b2d-4d4d-9051-d24ff31a95ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:a000::/40
Signature Algorithm: sha256WithRSAEncryption
3c:66:84:f8:10:94:6f:94:16:75:32:83:b7:a2:63:31:3e:78:
26:62:55:65:b5:80:bd:ae:41:94:20:81:d0:b8:fb:31:58:6b:
c3:a9:ce:57:71:b3:05:a3:21:7c:1a:3e:55:a8:d1:52:82:c0:
72:48:50:3a:60:ff:17:c3:8f:64:43:3d:a9:40:68:6f:89:74:
77:4c:34:fb:4e:7e:b5:ce:d6:4f:cc:87:ee:43:d9:df:d1:8f:
b5:5e:64:25:d2:29:4f:52:2b:7d:7b:3f:52:14:b7:6f:12:95:
57:de:99:f2:e0:69:5e:ef:2c:8d:98:ad:f8:50:2d:dc:94:9a:
cd:57:1b:b7:17:d0:b9:ba:41:60:39:fe:1c:00:9b:44:36:c2:
2e:52:ff:e0:d5:6a:8d:75:19:e0:f8:be:6e:e5:c3:8d:9b:56:
5b:7d:cf:11:55:6e:c7:6d:37:6f:af:52:08:e0:d3:d6:7e:87:
36:c5:45:ee:0a:14:92:39:25:fb:01:54:4c:d6:ca:dd:67:2a:
bc:a3:bd:4c:a7:0a:a9:1d:2e:e7:96:6e:56:58:40:0d:36:4d:
a2:7a:52:95:9a:fa:f7:8b:db:56:2a:d8:1b:65:a3:90:61:0d:
62:74:51:e6:9b:0e:08:d5:1e:97:f4:f1:4c:54:e2:2f:19:88:
e8:9f:a9:87
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUTQk3FhoLJALLiZHKHDw3oN299ccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjIwMTM2NThaFw0yNTA2MjYyMzU5NTlaMHoxSTBHBgNV
BAUTQDA1YTI2OWVlMjA5NGE2YzMzZmQwZDE0ZDM2MDM4NWE0YjJiNDEzZjRlNDli
ZWFiNjMyZWRiNjIyMDIyYTAwZjAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK//5OStzoMjUuQdcoLxRmpkCGalY9iBaq4fNStfQ01OIok/NH9sHcAF0ULp
jUxqAmaiQJRt0QwFxA2JgQ+bkASjvHFdDO2LEMcavjqdXU6dOzPIZV4p8yV6Tz0+
RKgXQ9tig7VGQIXooEBdrUro9h3l+gKjVw8MG6aLnsykV3DtfqaPymjoTfq5UnuH
c3PfmseSwk7GDyJymvl/vSCz9GC1yhDvkO6dzU+bvNLCqcdNydyO+r3tM6w7/KJm
jIAtEgXDNrItqltvZPRf2D3ylkA9oUEJ5DIy/H4KKPfmkIDZmAk+ntoM5c4HZNjE
g0lh7+q/lB/CSyc9SwNXmOuKl0cCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQllM45
VIhSHo29ubDmRzme7jkWwzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjA4YjkxYjUtNGIyZC00ZDRkLTkwNTEtZDI0ZmYzMWE5NWFlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Fmg
MA0GCSqGSIb3DQEBCwUAA4IBAQA8ZoT4EJRvlBZ1MoO3omMxPngmYlVltYC9rkGU
IIHQuPsxWGvDqc5XcbMFoyF8Gj5VqNFSgsBySFA6YP8Xw49kQz2pQGhviXR3TDT7
Tn61ztZPzIfuQ9nf0Y+1XmQl0ilPUit9ez9SFLdvEpVX3pny4Gle7yyNmK34UC3c
lJrNVxu3F9C5ukFgOf4cAJtENsIuUv/g1WqNdRng+L5u5cONm1Zbfc8RVW7HbTdv
r1II4NPWfoc2xUXuChSSOSX7AVRM1srdZyq8o71MpwqpHS7nlm5WWEANNk2ielKV
mvr3i9tWKtgbZaOQYQ1idFHmmw4I1R6X9PFMVOIvGYjon6mH
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:57:45 2025 by rpki-client