Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d49f5a30-e41b-4396-8b86-e8869140c6e7.roa
File: d49f5a30-e41b-4396-8b86-e8869140c6e7.roa (raw, json)
Hash identifier: /Qv0qzOvC12oGTqq0R3v7a92wR3f9gp70vgKc1uWimE=
Subject key identifier: 35:AB:CB:97:93:69:F7:4E:86:19:F3:5C:19:5D:D5:1E:4B:70:F5:31
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4CA7E52BDB9059FB80BCC0887FEB82F9DE58E41B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d49f5a30-e41b-4396-8b86-e8869140c6e7.roa
Signing time: Thu 22 May 2025 01:36:55 +0000
ROA not before: Thu 22 May 2025 01:36:55 +0000
ROA not after: Thu 26 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:800::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 03 Jun 2025 20:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:a7:e5:2b:db:90:59:fb:80:bc:c0:88:7f:eb:82:f9:de:58:e4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 01:36:55 2025 GMT
Not After : Jun 26 23:59:59 2025 GMT
Subject: serialNumber=6add5943621265e594b3e8d370bab13182d2d9a3bbb9adba0fe7ccfe43b0e2fc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:b1:a0:98:c1:06:1b:70:0f:f1:ea:38:dd:
f8:b6:43:47:42:82:28:c1:71:df:59:d5:62:75:7a:
31:c9:df:ae:6b:3a:04:10:9a:9d:0c:0c:53:87:32:
9b:11:73:16:f7:d2:75:66:1e:7d:37:a4:7e:04:98:
62:47:5c:da:72:7f:c3:de:c6:67:09:c6:ef:dc:13:
92:a1:9a:d4:65:ef:f2:c2:0b:63:10:43:1f:e5:62:
a2:67:72:db:0e:25:21:17:7c:0e:48:47:05:d1:ec:
19:20:06:c0:b2:1c:da:fd:70:cf:f4:c1:39:70:94:
3e:fd:21:c9:3f:91:d0:6b:7a:26:59:1b:5f:bf:9b:
e6:fd:3a:f8:20:63:04:e2:ab:b5:06:a3:36:5a:11:
98:34:74:f3:11:0c:27:19:e9:ee:c8:86:c3:24:db:
ef:d1:94:6f:65:5a:b1:59:ae:cc:a5:56:a9:2a:37:
0b:e9:e7:0e:56:2d:22:d0:3a:aa:20:3e:96:96:fb:
1b:9f:e9:2e:dd:2a:14:07:b3:2b:d7:19:2a:74:7f:
46:83:f4:3d:57:9f:8d:6b:52:8a:72:15:9f:f7:24:
6d:0d:31:b3:db:b0:3c:36:6e:61:be:9d:d7:ee:e7:
ce:51:fd:e0:10:56:ff:c4:b1:6c:c1:9c:b8:5b:c9:
f6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AB:CB:97:93:69:F7:4E:86:19:F3:5C:19:5D:D5:1E:4B:70:F5:31
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d49f5a30-e41b-4396-8b86-e8869140c6e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:800::/40
Signature Algorithm: sha256WithRSAEncryption
0a:5e:d0:ab:d1:0a:cf:be:3c:b9:54:c3:71:fc:40:1b:49:69:
f1:e4:0c:1c:fb:34:f8:4d:43:cc:52:65:56:ed:89:2b:d5:5b:
e0:e7:d1:fa:2a:f5:0c:c7:db:66:0d:07:40:aa:da:97:c0:db:
c5:bc:fc:23:00:4d:15:1e:9f:2e:f6:1a:3f:ed:7c:7b:87:c9:
a7:cb:42:24:98:5f:3c:d8:a3:d9:8e:d6:4b:38:6f:97:83:52:
ed:78:86:f4:38:5e:20:7a:a1:d6:3e:61:15:1a:70:c0:48:f0:
4b:cb:12:6f:3f:5f:38:63:03:98:9e:1d:53:b9:d0:17:02:e1:
8e:69:4b:0f:0e:5b:ec:71:2b:8a:ad:e5:da:f7:c7:e1:e8:8c:
71:5f:fe:76:04:16:b6:4f:56:9f:a0:a4:19:df:50:75:55:77:
7d:4f:1c:b5:f6:e7:40:97:7f:ca:bc:9a:54:c2:34:4f:be:3e:
c2:45:a6:ef:8b:e5:fb:6d:8b:e9:e8:13:8b:99:dc:9a:0c:b3:
9f:46:56:ad:62:47:f1:4c:f4:a9:44:da:34:91:3d:fc:b5:b6:
8c:91:64:ca:c3:0b:25:ed:f9:15:a1:3c:fb:83:f3:4f:a9:fd:
a3:6a:6d:ce:0f:ec:10:1b:d3:fc:89:dc:c8:55:bc:90:f2:e1:
f6:72:08:b9
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUTKflK9uQWfuAvMCIf+uC+d5Y5BswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjIwMTM2NTVaFw0yNTA2MjYyMzU5NTlaMHoxSTBHBgNV
BAUTQDZhZGQ1OTQzNjIxMjY1ZTU5NGIzZThkMzcwYmFiMTMxODJkMmQ5YTNiYmI5
YWRiYTBmZTdjY2ZlNDNiMGUyZmMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKt+saCYwQYbcA/x6jjd+LZDR0KCKMFx31nVYnV6Mcnfrms6BBCanQwMU4cy
mxFzFvfSdWYefTekfgSYYkdc2nJ/w97GZwnG79wTkqGa1GXv8sILYxBDH+Viomdy
2w4lIRd8DkhHBdHsGSAGwLIc2v1wz/TBOXCUPv0hyT+R0Gt6JlkbX7+b5v06+CBj
BOKrtQajNloRmDR08xEMJxnp7siGwyTb79GUb2VasVmuzKVWqSo3C+nnDlYtItA6
qiA+lpb7G5/pLt0qFAezK9cZKnR/RoP0PVefjWtSinIVn/ckbQ0xs9uwPDZuYb6d
1+7nzlH94BBW/8SxbMGcuFvJ9gMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ1q8uX
k2n3ToYZ81wZXdUeS3D1MTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDQ5ZjVhMzAtZTQxYi00Mzk2LThiODYtZTg4NjkxNDBjNmU3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FkI
MA0GCSqGSIb3DQEBCwUAA4IBAQAKXtCr0QrPvjy5VMNx/EAbSWnx5Awc+zT4TUPM
UmVW7Ykr1Vvg59H6KvUMx9tmDQdAqtqXwNvFvPwjAE0VHp8u9ho/7Xx7h8mny0Ik
mF882KPZjtZLOG+Xg1LteIb0OF4geqHWPmEVGnDASPBLyxJvP184YwOYnh1TudAX
AuGOaUsPDlvscSuKreXa98fh6IxxX/52BBa2T1afoKQZ31B1VXd9Txy19udAl3/K
vJpUwjRPvj7CRabvi+X7bYvp6BOLmdyaDLOfRlatYkfxTPSpRNo0kT38tbaMkWTK
wwsl7fkVoTz7g/NPqf2jam3OD+wQG9P8idzIVbyQ8uH2cgi5
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:58:56 2025 by rpki-client