Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f3b2609-5096-4d1b-84dc-42817b2c1bec.roa
File: 6f3b2609-5096-4d1b-84dc-42817b2c1bec.roa (raw, json)
Hash identifier: Lb4ISmi5BFTyQEjRJV4aMxVvYr3W4HwlWZJc9qxNy04=
Subject key identifier: BA:52:37:C7:EB:B9:75:7D:D4:5C:0A:92:A8:19:7F:0D:7B:C9:10:B8
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 1058E1542FE3B19A585AD1462957E949F6BA7CC3
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f3b2609-5096-4d1b-84dc-42817b2c1bec.roa
Signing time: Thu 17 Apr 2025 16:08:46 +0000
ROA not before: Thu 17 Apr 2025 16:08:46 +0000
ROA not after: Thu 22 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daee:7000::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 17 Apr 2025 20:09:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:58:e1:54:2f:e3:b1:9a:58:5a:d1:46:29:57:e9:49:f6:ba:7c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Apr 17 16:08:46 2025 GMT
Not After : May 22 23:59:59 2025 GMT
Subject: serialNumber=6674507da03fb3bedc7465a68846df0efcffb81b48237044871e113d022390b2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:60:1b:c5:91:43:4e:e9:ff:9a:64:33:9e:6b:
85:5b:f8:42:b5:d0:e5:0c:6d:c1:4e:4c:1e:b8:5c:
c9:9a:3a:d2:c0:da:be:7d:60:da:2f:b6:cb:1e:27:
53:f5:d9:cc:14:84:39:7c:44:64:b7:14:76:c6:65:
92:8d:5b:d8:ef:68:ab:3e:42:3d:a2:ce:1d:46:54:
f9:22:30:f6:65:a1:cb:5a:15:e9:cd:ba:19:89:99:
e6:2c:3a:37:d5:3d:57:be:1b:54:b0:d5:b1:15:f7:
ba:d2:20:6c:bc:5a:1c:40:92:33:76:51:9d:1c:e1:
32:38:50:53:6d:9b:05:35:bb:bd:f3:8c:17:fb:1b:
24:d3:15:9d:7e:2b:fc:51:ec:ab:ed:46:e6:ee:85:
ca:fe:ae:d3:01:ef:05:b3:c3:35:b3:8e:9e:85:ef:
7d:d1:d5:a7:ea:ba:ff:a5:52:1b:06:fd:7c:96:cc:
da:5e:58:62:04:54:0e:fd:29:45:a1:5e:9e:e6:cc:
2e:fb:50:c9:e8:81:70:bd:a5:96:7a:d9:1f:3b:3a:
84:a6:2b:85:89:01:6b:ba:f9:66:c6:aa:fe:4a:d0:
06:ed:64:c5:af:08:b3:a4:5b:5f:9a:5b:ff:a7:78:
ff:27:3d:fd:96:08:a3:73:56:9b:8d:b9:05:4b:94:
f0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:52:37:C7:EB:B9:75:7D:D4:5C:0A:92:A8:19:7F:0D:7B:C9:10:B8
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f3b2609-5096-4d1b-84dc-42817b2c1bec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daee:7000::/40
Signature Algorithm: sha256WithRSAEncryption
17:3b:25:ed:3c:42:a3:78:60:f3:f5:73:f7:aa:0a:65:dd:d8:
f9:e6:2c:83:ee:f6:ab:e1:3e:98:7a:91:45:0a:5d:61:0a:99:
a3:2c:42:b9:e7:46:d0:2d:ea:8b:e3:36:4b:b5:88:83:7e:91:
5d:9c:f5:79:07:60:b7:e7:24:6b:81:08:56:45:21:34:27:4a:
71:eb:40:a1:28:d5:65:f9:d2:b3:64:cb:ac:89:9c:e9:b2:ef:
ec:c8:6f:d3:fd:cf:8e:d3:f2:d4:2d:3d:e9:7c:6d:b0:7a:03:
fe:b3:dc:aa:81:f8:ab:c2:96:ef:ff:ce:d3:6b:6f:be:91:b3:
96:0d:c6:a3:c3:97:47:7d:0a:be:01:6f:dc:36:26:22:89:ad:
89:0e:8c:f5:09:33:ec:31:0e:0e:70:e2:c8:fe:1f:98:4c:57:
cc:2d:0e:d9:93:81:ea:82:37:9f:a6:48:5f:0b:fb:1b:c5:32:
c7:a1:b7:4d:16:c7:31:67:5a:ff:e2:d2:32:a1:91:14:55:13:
b3:8b:7e:ac:2f:eb:a5:fc:ee:90:39:13:70:59:02:7d:54:52:
d6:eb:b7:e1:ed:92:e5:ff:57:9a:6b:f5:90:22:3d:2a:1c:5b:
fe:7a:67:5f:4e:01:19:b0:79:1b:0e:d8:8e:4c:16:33:cd:53:
6f:f3:e3:fc
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUEFjhVC/jsZpYWtFGKVfpSfa6fMMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxNzE2MDg0NloX
DTI1MDUyMjIzNTk1OVowejFJMEcGA1UEBRNANjY3NDUwN2RhMDNmYjNiZWRjNzQ2
NWE2ODg0NmRmMGVmY2ZmYjgxYjQ4MjM3MDQ0ODcxZTExM2QwMjIzOTBiMjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WAbxZFDTun/mmQznmuFW/hCtdDl
DG3BTkweuFzJmjrSwNq+fWDaL7bLHidT9dnMFIQ5fERktxR2xmWSjVvY72irPkI9
os4dRlT5IjD2ZaHLWhXpzboZiZnmLDo31T1XvhtUsNWxFfe60iBsvFocQJIzdlGd
HOEyOFBTbZsFNbu984wX+xsk0xWdfiv8Ueyr7Ubm7oXK/q7TAe8Fs8M1s46ehe99
0dWn6rr/pVIbBv18lszaXlhiBFQO/SlFoV6e5swu+1DJ6IFwvaWWetkfOzqEpiuF
iQFruvlmxqr+StAG7WTFrwizpFtfmlv/p3j/Jz39lgijc1abjbkFS5Tw6wIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFLpSN8fruXV91FwKkqgZfw17yRC4MB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzZmM2IyNjA5LTUwOTYtNGQxYi04NGRjLTQyODE3YjJjMWJlYy5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba7nAwDQYJKoZIhvcNAQELBQADggEBABc7Je08QqN4YPP1c/eq
CmXd2PnmLIPu9qvhPph6kUUKXWEKmaMsQrnnRtAt6ovjNku1iIN+kV2c9XkHYLfn
JGuBCFZFITQnSnHrQKEo1WX50rNky6yJnOmy7+zIb9P9z47T8tQtPel8bbB6A/6z
3KqB+KvClu//ztNrb76Rs5YNxqPDl0d9Cr4Bb9w2JiKJrYkOjPUJM+wxDg5w4sj+
H5hMV8wtDtmTgeqCN5+mSF8L+xvFMseht00WxzFnWv/i0jKhkRRVE7OLfqwv66X8
7pA5E3BZAn1UUtbrt+HtkuX/V5pr9ZAiPSocW/56Z19OARmweRsO2I5MFjPNU2/z
4/w=
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:37:44 2025 by rpki-client