Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4ec4946d-5a00-40f8-8803-1f8a2bf9c536.roa
File: 4ec4946d-5a00-40f8-8803-1f8a2bf9c536.roa (raw, json)
Hash identifier: K4SlD1Rats0dRT/CdmwYj0SV43vf3yC/pGUnYqenQlQ=
Subject key identifier: E1:A5:DF:B2:E6:6F:A1:01:93:1F:88:2F:11:A8:AF:30:B0:9E:C8:3A
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 01E05469FB7943F0D5EA83753D69E0A751847F80
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4ec4946d-5a00-40f8-8803-1f8a2bf9c536.roa
Signing time: Thu 22 May 2025 00:38:24 +0000
ROA not before: Thu 22 May 2025 00:38:24 +0000
ROA not after: Thu 26 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dab9:7040::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 19:38:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:e0:54:69:fb:79:43:f0:d5:ea:83:75:3d:69:e0:a7:51:84:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 22 00:38:24 2025 GMT
Not After : Jun 26 23:59:59 2025 GMT
Subject: serialNumber=6ac2c284db1af36feddea9a7634fcec401de3b69dce6d1f524fd2f0b5ec6815e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6b:84:00:46:da:81:1e:04:20:43:7c:a4:c7:
3e:af:b2:17:55:f8:bc:73:f3:b4:06:ec:b3:c8:b4:
7f:59:8b:ce:47:6b:e4:59:31:a8:27:c7:53:64:88:
a3:0f:8d:9e:28:06:32:5a:2b:47:52:72:6a:5b:83:
35:a5:30:34:b3:55:08:3f:9d:25:d1:71:49:9b:12:
f1:53:b7:c1:c2:53:cf:62:bf:52:13:c1:09:49:4d:
e1:1b:b2:ae:a3:1c:4c:2d:dd:86:01:12:0d:d7:1f:
49:f4:ff:54:08:24:bc:60:d8:24:87:89:bb:7b:d1:
4c:0b:86:ff:c0:e8:21:75:fd:66:09:ac:42:04:36:
f4:dd:ca:d7:cc:5e:73:91:62:80:e8:16:67:cf:72:
0e:e2:f4:66:3a:06:6c:2a:7f:59:6b:5d:20:c6:28:
a1:31:29:d0:84:22:c2:2a:f7:e7:01:8d:f6:a0:8b:
be:15:aa:98:a1:e8:93:ac:6d:3d:26:27:45:a3:c8:
f5:16:0a:37:b3:92:b1:84:31:1b:0b:4c:01:96:bf:
42:a1:e9:36:ce:9e:98:38:63:9a:6e:e0:aa:6b:25:
2f:e8:cc:c0:53:05:2f:ce:fa:13:67:6e:1a:75:54:
d2:1c:f8:46:55:80:21:20:10:01:46:69:85:60:ac:
8d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A5:DF:B2:E6:6F:A1:01:93:1F:88:2F:11:A8:AF:30:B0:9E:C8:3A
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4ec4946d-5a00-40f8-8803-1f8a2bf9c536.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dab9:7040::/48
Signature Algorithm: sha256WithRSAEncryption
20:bf:a2:ae:94:af:bc:03:64:76:ed:a2:17:96:68:9e:de:8b:
46:5f:51:46:4d:ab:f3:77:f7:c8:a5:32:6f:58:7f:65:2e:12:
b1:8e:be:98:7b:f5:be:6a:dc:cd:04:b1:19:96:40:db:07:c5:
c0:ce:f0:92:e1:b4:66:88:aa:21:75:31:38:a4:8e:4c:7b:97:
2b:6b:63:6e:2f:ed:a1:8b:f5:c9:0b:3b:43:c4:de:08:5c:26:
d9:2f:58:28:8d:07:9e:45:ad:27:7d:d0:95:8d:76:02:d8:e3:
8b:ac:00:99:ee:10:48:ce:7c:ba:02:dd:07:68:4b:c8:a3:3e:
8a:ec:a9:92:c0:3b:c3:d9:f0:49:1d:11:98:3a:bc:75:a2:c1:
53:60:8b:83:70:0d:28:c4:44:67:57:c3:73:ab:24:a2:50:89:
d5:06:c0:0c:48:48:90:2a:21:e1:85:2b:b0:40:22:84:fd:df:
43:63:9a:4d:b5:3b:ef:11:c3:de:ec:25:75:5e:72:2a:66:b9:
b0:4c:30:c0:7d:9c:92:fe:91:17:30:30:51:af:19:fd:cf:ff:
ab:a7:f4:8f:11:fb:8a:cd:54:d2:c8:27:73:cf:32:7f:21:3f:
c5:15:69:22:9d:ea:aa:25:97:cd:fd:f4:23:e2:05:19:62:3c:
ac:ce:bb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:06:03 2025 by rpki-client