Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/76eed1e3-5eb3-471b-b296-c0c318840e21.roa
File: 76eed1e3-5eb3-471b-b296-c0c318840e21.roa (raw, json)
Hash identifier: W0henZJHpP1JXtF5QYaSnMXjgsRYEfqi/xxNVRWaBqM=
Subject key identifier: E3:36:D3:46:AA:58:C0:24:5C:74:1A:B4:55:5A:5A:F9:75:DC:ED:6B
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 7DC3C8A12A4D5BD6947FCD5BCCAA6EFE661B04AF
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/76eed1e3-5eb3-471b-b296-c0c318840e21.roa
Signing time: Thu 17 Apr 2025 16:08:55 +0000
ROA not before: Thu 17 Apr 2025 16:08:55 +0000
ROA not after: Thu 22 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daee:e000::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 17 Apr 2025 20:22:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:c3:c8:a1:2a:4d:5b:d6:94:7f:cd:5b:cc:aa:6e:fe:66:1b:04:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Apr 17 16:08:55 2025 GMT
Not After : May 22 23:59:59 2025 GMT
Subject: serialNumber=c3841daefbffa6e18eedebbf3f18ac73ed99ab516f803df1c7472ebccf4c4425, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:39:bd:5f:d6:c7:44:00:9b:d0:0e:ba:a8:0d:
c3:4c:eb:60:3a:f0:62:9a:0a:ad:0e:c3:98:06:3c:
5f:b0:2d:77:03:36:f4:ac:f8:74:04:2a:79:15:4c:
5b:01:37:1a:73:7b:9f:8f:28:0b:31:b7:e0:4a:9d:
51:45:d6:71:bd:e0:35:4a:fd:76:06:5d:98:bd:a5:
3b:0a:28:ab:21:97:35:dd:a1:ee:aa:fa:b3:be:94:
15:d1:65:7b:65:b8:34:bc:a4:6b:73:07:a7:08:01:
40:75:13:7d:ed:d0:7d:8f:85:08:b1:f6:54:c6:2d:
8e:48:42:31:a6:a8:d7:a9:43:20:c3:af:77:b9:5c:
f8:d3:68:c1:da:49:49:f4:c4:6d:bb:a7:f2:f0:c3:
02:2a:40:9e:80:38:9c:fd:be:08:24:c8:64:1b:34:
f6:c8:4b:b8:07:29:59:9b:b3:1f:2a:8a:f2:e0:af:
f0:68:78:b9:72:8b:ee:c7:d5:85:24:28:e8:24:c3:
f1:61:dd:ea:b1:46:27:60:57:07:8c:49:80:b4:9d:
25:74:d7:ba:cd:ed:3e:6d:92:33:cd:21:b8:d7:41:
9d:2e:8d:ea:c9:d4:d4:fc:68:fb:a0:27:7c:9d:a7:
7b:34:12:1c:78:f8:ab:9e:26:35:b3:1d:df:05:75:
f1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:36:D3:46:AA:58:C0:24:5C:74:1A:B4:55:5A:5A:F9:75:DC:ED:6B
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/76eed1e3-5eb3-471b-b296-c0c318840e21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daee:e000::/40
Signature Algorithm: sha256WithRSAEncryption
c1:fb:7a:c7:bd:19:5d:fc:46:3d:01:4b:23:07:61:30:0e:fb:
49:7e:1f:2b:53:ba:6c:c1:06:43:45:28:94:ec:cf:37:1f:ee:
13:af:b0:a3:f9:a0:fe:e1:c2:7f:3a:c2:3e:1d:47:6e:3d:51:
7e:aa:0d:49:d1:fb:8e:f8:3c:28:6e:20:2f:de:b3:96:29:3f:
89:4b:4a:7c:fd:70:77:fb:11:4e:f7:8f:f8:2d:20:be:d1:03:
d4:e0:aa:aa:f5:9d:7c:41:77:dc:be:23:4c:88:12:33:05:3e:
58:45:a8:42:b2:55:fb:57:40:fc:d8:d7:41:51:e0:b7:80:a7:
90:e8:2b:3b:ee:b3:a0:3b:d7:30:1a:78:8f:80:73:16:20:29:
90:30:06:c3:23:5f:f7:6e:ce:f6:b5:c3:47:7c:ec:d1:b8:f9:
f1:0f:22:a6:91:0e:8f:74:91:8a:45:d4:90:9d:91:cb:c5:fb:
e7:5b:a4:87:b6:5e:51:4c:87:71:15:2d:d3:ce:17:0a:d9:b0:
5e:df:33:af:94:62:3b:aa:18:5b:50:14:43:f9:f4:f6:30:6e:
55:68:e3:34:db:aa:a1:a1:b9:41:ec:7b:49:5f:29:ad:81:27:
b4:75:9a:d0:06:d4:c5:a4:c8:88:55:3b:92:7a:e4:4b:84:82:
cb:88:ce:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:35:59 2025 by rpki-client