Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0d61e6e9-c6e3-48de-a299-bec19822751f.roa
File: 0d61e6e9-c6e3-48de-a299-bec19822751f.roa (raw, json)
Hash identifier: hTjNgdn1lMafR2FdKoevRvputsnTR/2hIGRj8SYyWxM=
Subject key identifier: 8B:89:AC:9E:F6:7C:06:4C:74:D7:A6:0A:F5:95:BB:FD:F5:F4:17:93
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 437C0821CD3A511E5AC9AEA516A0344A77C09019
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0d61e6e9-c6e3-48de-a299-bec19822751f.roa
Signing time: Thu 17 Apr 2025 16:07:19 +0000
ROA not before: Thu 17 Apr 2025 16:07:19 +0000
ROA not after: Thu 22 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dabb:a000::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 17 Apr 2025 20:09:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:7c:08:21:cd:3a:51:1e:5a:c9:ae:a5:16:a0:34:4a:77:c0:90:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Apr 17 16:07:19 2025 GMT
Not After : May 22 23:59:59 2025 GMT
Subject: serialNumber=134c8c19b863eec71bd4069940a3485dcd8a81a34325137ac6e340f508a3e89b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:eb:1b:e5:3c:83:b2:0a:c6:80:03:af:1d:c2:
18:23:2d:37:a8:ee:97:8f:25:96:9b:83:06:2c:b3:
25:9b:bb:c5:b6:bc:68:9b:29:08:2e:13:05:04:d4:
af:30:12:a3:85:6d:71:3f:fa:e9:02:85:19:1b:ae:
20:53:c2:be:f4:92:8d:5f:20:c6:74:ed:b2:68:b8:
60:69:52:bc:9b:a1:ac:d8:68:cd:c3:ec:1f:a2:d4:
47:00:57:8d:09:85:4c:f8:8f:41:c9:3f:52:d0:be:
78:d6:52:01:be:1d:d6:a0:2f:6e:54:f0:a0:98:70:
82:c5:b3:09:cf:5a:e0:53:d1:06:a2:61:61:25:ae:
bd:a8:23:5c:26:3f:eb:b0:23:20:da:e4:cb:96:a8:
3c:11:03:c3:9a:99:dd:5f:7c:8e:ff:c0:81:0f:95:
73:94:96:3e:bf:54:c0:fe:13:48:8d:82:cc:ae:44:
79:91:7f:c3:0d:04:09:a7:61:08:3c:d4:26:c9:90:
80:4c:e9:d2:b9:9b:1d:25:68:f3:50:32:51:16:b0:
4f:43:7e:72:6d:c1:03:e8:14:1f:37:96:f9:7e:57:
10:56:c5:06:2e:98:23:38:4a:fe:06:36:b8:cb:72:
e6:a0:f9:db:b2:10:cc:7d:88:52:45:4f:ad:47:a3:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:89:AC:9E:F6:7C:06:4C:74:D7:A6:0A:F5:95:BB:FD:F5:F4:17:93
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0d61e6e9-c6e3-48de-a299-bec19822751f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dabb:a000::/40
Signature Algorithm: sha256WithRSAEncryption
01:68:d8:0a:7c:48:e0:60:5b:fe:5a:a2:0e:5b:f5:87:ef:f5:
14:fb:47:09:e1:e1:56:86:0f:66:f4:aa:52:28:8a:86:96:ca:
73:6a:60:29:30:7a:83:82:4f:96:11:25:84:12:66:5a:64:ec:
17:7e:97:03:fe:86:01:c1:f5:22:e5:b8:be:b5:a9:c4:12:dd:
9a:b5:86:3c:03:89:41:02:35:dc:e8:74:67:4f:86:eb:bb:36:
99:17:44:8b:b3:e1:07:ef:49:a1:6d:0a:aa:2e:91:26:b8:b0:
8d:01:77:9a:aa:83:b4:3b:ea:4e:d7:b6:4a:e5:09:11:fa:97:
d0:77:f5:01:69:30:c0:79:65:5c:ca:3d:2a:f3:bb:73:40:00:
e4:e4:57:a9:b0:b4:2c:c0:46:9d:de:06:51:88:41:4f:da:24:
4b:e9:9f:75:1e:2c:c5:ae:e3:ce:38:74:24:21:23:d8:fa:de:
74:ff:f6:c1:80:ad:15:1e:fb:b6:68:99:c3:0f:ab:9a:42:97:
42:31:f5:a2:6d:b2:ab:c4:7e:34:e5:a6:66:54:b0:63:fc:43:
7a:c0:de:f9:33:4d:60:be:06:11:d1:02:9b:e4:05:b8:04:44:
14:66:5c:5b:93:a9:c9:f2:b6:44:02:14:8e:b4:55:b7:7d:db:
dc:32:ca:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:34:28 2025 by rpki-client