Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d5d5e8f3-732b-4b43-a5ad-446f966cc003.roa
File: d5d5e8f3-732b-4b43-a5ad-446f966cc003.roa (raw, json)
Hash identifier: 0FBxAx0Y8WqnlpGDJ6SW1/6QnzXFJIzqO2PC0sUSRiM=
Subject key identifier: 31:C1:89:04:F7:38:80:31:CA:6A:25:79:34:40:6B:E1:43:04:56:69
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 26BAE0F3530EC76BAC69F121634F1F1DBE66B3E5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d5d5e8f3-732b-4b43-a5ad-446f966cc003.roa
Signing time: Thu 22 May 2025 01:22:27 +0000
ROA not before: Thu 22 May 2025 01:22:27 +0000
ROA not after: Thu 26 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:50c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 21:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:ba:e0:f3:53:0e:c7:6b:ac:69:f1:21:63:4f:1f:1d:be:66:b3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 01:22:27 2025 GMT
Not After : Jun 26 23:59:59 2025 GMT
Subject: serialNumber=8358a0da04eab53659bbca3889c2ebbb359c8421f549294e48318b6e9d26a119, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:31:20:f1:de:75:54:ff:1c:81:f6:0e:4b:
12:7a:8e:94:c6:59:93:a4:d6:ab:93:9d:38:24:40:
ae:74:5b:c5:65:ee:33:79:30:f9:e4:28:f6:b5:3c:
8b:65:2d:60:ab:d8:47:e4:b0:1b:64:d4:95:ca:71:
ca:b4:a8:11:c7:bf:58:e8:27:f0:f5:21:93:bd:10:
33:2e:d3:da:23:3a:93:93:e5:65:67:99:cc:80:4b:
7d:37:62:4a:d1:15:b3:d7:ae:72:75:c2:ba:72:13:
44:23:53:9b:85:3e:ea:5f:7b:cf:22:0b:fb:1d:8b:
45:b9:f8:90:be:c6:c1:cf:58:7e:4e:f9:ff:1f:fc:
e2:ee:8a:8f:01:28:4c:50:fb:1b:d7:77:14:66:95:
4c:d9:80:b5:3b:62:a8:de:5e:e0:f4:d7:6d:3b:a5:
d1:11:bf:f0:f5:5e:cc:fe:d0:7a:46:31:1f:fd:e4:
55:63:d8:ad:31:18:48:1e:4e:82:3c:a1:12:5f:a8:
62:21:6f:0f:56:20:48:39:b7:3a:d0:99:21:90:60:
54:ba:80:69:50:59:2e:d2:0d:08:28:d3:f4:e3:91:
bb:23:5f:46:09:e6:56:f1:42:a8:40:e6:b1:00:7f:
df:4b:00:9d:1f:f0:26:3e:7e:7a:79:4e:a4:97:01:
8a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C1:89:04:F7:38:80:31:CA:6A:25:79:34:40:6B:E1:43:04:56:69
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d5d5e8f3-732b-4b43-a5ad-446f966cc003.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
8a:63:9d:46:1a:ac:d6:a0:f0:4c:62:a9:21:0c:ae:b8:2c:c3:
8d:34:bb:ac:1e:2b:8f:55:06:1a:fe:a4:e5:0c:69:00:b3:3c:
65:97:f4:90:20:ea:eb:4b:45:ba:09:5f:17:0a:87:7e:2a:cc:
2a:b1:56:71:ae:5c:f3:19:f4:e5:df:7d:96:ff:7c:fc:bd:9c:
d8:55:3d:98:99:1c:9d:0b:b3:77:55:d7:e6:0c:63:1f:c5:85:
2e:70:4a:eb:9c:11:73:d9:5f:af:e4:14:3e:5d:31:de:47:da:
71:e3:91:ed:6d:a3:57:64:bc:84:1b:f5:f1:84:1e:77:b7:d4:
03:64:bc:b3:47:af:a3:13:1b:e3:a7:01:72:c2:9e:2c:eb:ac:
21:5e:c4:10:7d:2b:51:53:3a:f2:e6:b7:f6:9c:c6:74:5c:f5:
e8:05:48:dc:31:6e:06:ca:58:1d:9a:b1:94:3a:2b:dc:84:c3:
62:2d:76:99:c8:06:88:f2:29:86:db:71:c1:19:7a:41:56:32:
64:53:ad:1a:be:da:6c:f3:88:07:ca:6c:ba:31:f3:f9:52:9a:
3b:a6:7d:ea:e9:32:16:81:a0:80:0a:16:2e:75:b7:41:c4:9f:
8c:7d:04:9f:64:7b:91:e6:e4:33:b5:68:8b:69:24:c3:dd:94:
dd:51:4e:fa
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUJrrg81MOx2usafEhY08fHb5ms+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjIwMTIyMjdaFw0yNTA2MjYyMzU5NTlaMHoxSTBHBgNV
BAUTQDgzNThhMGRhMDRlYWI1MzY1OWJiY2EzODg5YzJlYmJiMzU5Yzg0MjFmNTQ5
Mjk0ZTQ4MzE4YjZlOWQyNmExMTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALDLMSDx3nVU/xyB9g5LEnqOlMZZk6TWq5OdOCRArnRbxWXuM3kw+eQo9rU8
i2UtYKvYR+SwG2TUlcpxyrSoEce/WOgn8PUhk70QMy7T2iM6k5PlZWeZzIBLfTdi
StEVs9eucnXCunITRCNTm4U+6l97zyIL+x2LRbn4kL7Gwc9Yfk75/x/84u6KjwEo
TFD7G9d3FGaVTNmAtTtiqN5e4PTXbTul0RG/8PVezP7QekYxH/3kVWPYrTEYSB5O
gjyhEl+oYiFvD1YgSDm3OtCZIZBgVLqAaVBZLtINCCjT9OORuyNfRgnmVvFCqEDm
sQB/30sAnR/wJj5+enlOpJcBivUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQxwYkE
9ziAMcpqJXk0QGvhQwRWaTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDVkNWU4ZjMtNzMyYi00YjQzLWE1YWQtNDQ2Zjk2NmNjMDAzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0FlQ
wDANBgkqhkiG9w0BAQsFAAOCAQEAimOdRhqs1qDwTGKpIQyuuCzDjTS7rB4rj1UG
Gv6k5QxpALM8ZZf0kCDq60tFuglfFwqHfirMKrFWca5c8xn05d99lv98/L2c2FU9
mJkcnQuzd1XX5gxjH8WFLnBK65wRc9lfr+QUPl0x3kfaceOR7W2jV2S8hBv18YQe
d7fUA2S8s0evoxMb46cBcsKeLOusIV7EEH0rUVM68ua39pzGdFz16AVI3DFuBspY
HZqxlDor3ITDYi12mcgGiPIphttxwRl6QVYyZFOtGr7abPOIB8psujHz+VKaO6Z9
6ukyFoGggAoWLnW3QcSfjH0En2R7kebkM7Voi2kkw92U3VFO+g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:57:39 2025 by rpki-client