Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63ba5dc3-2832-4e3e-a466-ceae264e78f6.roa
File: 63ba5dc3-2832-4e3e-a466-ceae264e78f6.roa (raw, json)
Hash identifier: tgVwiUyf1kJUM4flla99mMbXqiVLrObZQlhSNcGy18M=
Subject key identifier: C3:02:FA:87:5E:F3:82:3C:50:D5:36:F6:AF:2E:D3:8B:97:25:CD:58
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 6621D1939CC708A5884DB233E314C52EFC8544B9
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63ba5dc3-2832-4e3e-a466-ceae264e78f6.roa
Signing time: Thu 17 Apr 2025 16:07:14 +0000
ROA not before: Thu 17 Apr 2025 16:07:14 +0000
ROA not after: Thu 22 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dabb:7000::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 17 Apr 2025 20:09:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:21:d1:93:9c:c7:08:a5:88:4d:b2:33:e3:14:c5:2e:fc:85:44:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Apr 17 16:07:14 2025 GMT
Not After : May 22 23:59:59 2025 GMT
Subject: serialNumber=e192c576ed21cf768adb4b5233fdcdfefb54e21faf3cf262b2bf3ffd2f1acebf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8a:5f:3b:e4:c6:31:ba:a5:23:a5:89:49:f3:
63:2d:26:40:2c:09:f4:23:f2:8f:1f:06:be:1d:38:
e4:3f:65:59:a3:25:7f:87:5c:2f:82:49:5c:11:75:
af:5e:5f:16:c4:85:40:e2:1a:96:02:1b:7f:ae:61:
82:2c:10:17:b7:3f:36:31:ca:c7:7f:99:53:38:40:
b5:fd:87:89:a7:7b:66:51:2d:df:ad:ad:aa:ef:ef:
a8:71:75:bc:b3:a0:aa:41:71:34:f5:a1:43:81:a3:
45:15:6a:8d:6a:8f:55:d9:3c:fe:2d:26:51:b9:15:
cd:cd:b3:00:f5:dd:ab:9a:02:66:d7:35:44:2b:2e:
b5:b7:7e:76:76:19:82:7e:eb:fa:a3:8e:d1:71:25:
46:b2:e5:84:55:1b:5f:de:0b:1e:d5:fd:0f:51:2d:
5f:49:8a:56:c1:35:33:bb:df:73:c9:ea:5b:4e:65:
e5:c8:59:b9:a9:7f:da:1b:b3:2c:2c:98:9f:35:b3:
fd:95:ea:27:ca:8d:be:80:27:75:63:50:b8:6f:c3:
f4:93:fe:67:72:ec:ad:cf:c2:16:7c:2b:0e:d1:b8:
8f:96:10:7b:af:fa:0e:6a:80:e9:a2:e2:fd:fb:22:
a3:17:ea:50:df:4a:1a:6a:21:22:f2:2f:41:84:53:
22:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:02:FA:87:5E:F3:82:3C:50:D5:36:F6:AF:2E:D3:8B:97:25:CD:58
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63ba5dc3-2832-4e3e-a466-ceae264e78f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dabb:7000::/40
Signature Algorithm: sha256WithRSAEncryption
94:a3:ac:bf:67:52:bc:06:ab:ae:dd:ac:b7:53:31:c6:e8:52:
f8:29:07:fc:83:f4:fb:08:a7:8b:ed:13:9e:af:dd:9e:81:a4:
de:f1:77:06:fa:9f:20:9c:83:68:90:72:bb:17:5f:e9:07:84:
5d:70:a4:1a:18:56:16:3a:e4:a1:77:54:3d:1e:40:e7:28:4a:
5b:92:3f:65:b0:09:b0:35:40:69:eb:ab:02:6f:8e:82:9f:45:
c9:3d:96:93:86:fb:1b:39:e6:54:ae:76:23:31:ad:56:f9:58:
9a:48:9e:b3:7d:b4:de:03:fb:1a:a9:eb:b9:5a:dc:c9:01:26:
e1:28:cd:ae:6b:c4:35:9e:b0:5a:fc:a0:be:68:46:74:a1:cc:
ea:ad:46:d1:8a:cc:e4:21:83:3b:59:ef:b1:86:ae:41:bb:05:
a7:ad:fa:b7:7d:c8:69:66:ca:a9:d8:0f:da:fe:04:9f:4b:93:
83:af:35:01:87:b4:3f:2c:e9:67:8a:31:28:11:35:03:32:ab:
73:3a:f1:b5:33:1a:e0:11:45:d1:ca:5e:17:22:67:e1:5d:7c:
b5:63:4b:ed:19:c3:12:d0:70:88:c2:a1:22:84:da:f8:7e:6a:
35:65:e8:8a:1a:13:61:7f:18:f4:a4:26:0a:3c:2b:73:e5:3d:
65:3a:c2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:33:45 2025 by rpki-client