Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4aa907bc-98a5-45e3-b1a4-925446bf0a7e.roa
File: 4aa907bc-98a5-45e3-b1a4-925446bf0a7e.roa (raw, json)
Hash identifier: bSnaNPi2TLx9VngJ5cv79u/Bv63+xOdbNHZsGjyrjqs=
Subject key identifier: 5D:27:18:64:2C:67:F6:66:9B:6B:7E:BA:76:02:1E:70:20:5B:FA:4A
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 04D219EB8663D64867FDF226E5512D7DF93318A2
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4aa907bc-98a5-45e3-b1a4-925446bf0a7e.roa
Signing time: Fri 28 Mar 2025 00:00:18 +0000
ROA not before: Fri 28 Mar 2025 00:00:18 +0000
ROA not after: Fri 02 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daee:4800::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 14 Apr 2025 13:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:d2:19:eb:86:63:d6:48:67:fd:f2:26:e5:51:2d:7d:f9:33:18:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Mar 28 00:00:18 2025 GMT
Not After : May 2 23:59:59 2025 GMT
Subject: serialNumber=8d2bab2c68e2e511942df4a8240824f365ac7f2405742a63d2dca0eb3df982cb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bb:04:31:4f:8c:30:23:f8:01:60:30:4a:ef:
c3:4f:5e:72:50:23:56:9c:45:47:85:f4:7d:e1:33:
3d:69:2d:f4:dc:2c:7d:bb:77:87:52:dd:42:42:fe:
b1:68:e3:fe:b8:c9:fd:1f:5f:64:19:db:f3:e4:77:
aa:7f:a5:cb:cc:8c:d5:97:c4:4a:ef:40:dc:91:7b:
ad:03:b8:ec:df:af:fb:9d:c4:06:c6:80:4a:13:f2:
fc:3d:f3:ba:0a:3a:4f:9f:c2:5d:8b:6c:d1:e0:80:
0b:96:31:ff:5f:1f:2d:00:12:c2:5c:4d:8f:c4:d3:
a8:79:68:1d:67:91:76:b4:6a:af:fd:88:0e:28:85:
57:56:31:e0:12:0b:bb:a9:3f:fd:67:9c:6a:fb:d5:
9a:69:9d:58:ec:00:66:b0:2d:2f:ef:10:be:c5:17:
81:bd:f1:53:b9:05:26:35:5d:a5:91:51:56:90:aa:
ef:70:61:a1:5c:05:3a:11:36:41:61:bb:8a:af:be:
37:61:4a:6d:b4:bd:34:3c:e1:bc:1a:ec:4c:4a:d3:
06:ac:9f:10:c6:ae:ef:2a:0f:c4:5d:da:43:77:13:
3c:91:f5:cd:42:63:b4:3f:ba:68:a5:51:a2:86:06:
bb:2d:74:fb:2b:57:f0:08:57:1f:25:69:18:83:e9:
73:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:27:18:64:2C:67:F6:66:9B:6B:7E:BA:76:02:1E:70:20:5B:FA:4A
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4aa907bc-98a5-45e3-b1a4-925446bf0a7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daee:4800::/40
Signature Algorithm: sha256WithRSAEncryption
63:b4:6b:8b:2b:fe:ec:0f:01:74:82:e4:a0:96:89:f9:d9:d3:
20:5d:f6:24:ce:cd:08:96:0a:99:a3:1e:5a:a7:8b:2a:d5:c4:
ee:ab:d3:b0:e5:50:8c:13:f0:d0:e8:26:26:fd:49:14:ea:b2:
4c:58:af:ca:30:9d:e4:a8:db:78:36:12:a4:6a:e5:20:1f:45:
f2:18:09:b6:6f:bf:33:d8:99:e2:3e:1b:df:03:46:5e:62:2e:
b0:10:d7:b1:e2:44:ca:2a:d8:5b:f0:da:30:14:19:9b:b0:3b:
f1:09:8a:f2:de:d6:d1:ed:3c:7a:f9:1c:3f:2c:85:48:93:16:
c7:b8:47:f0:1a:0a:7d:f3:b8:c1:5b:5e:9b:13:87:a9:1f:fd:
ae:a6:67:ec:58:5d:02:2e:f5:e6:5e:e4:c5:47:99:5d:6f:29:
1e:88:ab:13:33:1b:30:09:d0:8c:c2:3b:f7:99:e8:da:1d:76:
f3:06:61:ed:34:6d:56:e7:04:6e:b1:e2:3a:a1:7d:b7:ab:33:
79:50:13:54:62:b7:09:ea:8a:c2:a6:15:2f:e9:68:78:a7:7d:
15:66:84:c0:ec:1c:d2:0e:5a:80:e6:36:2a:d0:f5:29:22:9f:
99:ad:26:76:45:23:82:7b:b5:24:b8:49:d1:8e:59:d0:88:6c:
10:93:60:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:36:03 2025 by rpki-client