Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a39fae4b-24b7-4085-9a0d-23a83f620b40.roa
File: a39fae4b-24b7-4085-9a0d-23a83f620b40.roa (raw, json)
Hash identifier: fyZMya5NzM7YOu73QK1/8iA2CwHGKAeTSAwN9z1icd4=
Subject key identifier: 37:C0:DA:D3:4F:64:14:DB:15:4C:B1:9F:2F:CC:FB:03:FD:1A:6E:04
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 2042590CC7253316AC07AD7F871840033BCCE06F
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a39fae4b-24b7-4085-9a0d-23a83f620b40.roa
Signing time: Thu 17 Apr 2025 16:08:45 +0000
ROA not before: Thu 17 Apr 2025 16:08:45 +0000
ROA not after: Thu 22 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daee:6000::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 17 Apr 2025 20:09:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:42:59:0c:c7:25:33:16:ac:07:ad:7f:87:18:40:03:3b:cc:e0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Apr 17 16:08:45 2025 GMT
Not After : May 22 23:59:59 2025 GMT
Subject: serialNumber=e836eb4d1f6d20a469d5fedff7c2804caeca979fb50698b281551cb26a108c59, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e7:ef:f4:3e:a5:1c:78:a3:2d:98:c8:4e:59:
98:95:a6:c3:0a:59:bf:b8:f4:6d:7a:86:35:32:28:
48:20:2b:29:4b:3c:53:25:18:f0:7f:f8:9f:89:3a:
26:41:2b:b0:f9:c5:7a:9f:6f:dc:80:0e:d0:25:6e:
10:52:c0:2b:5b:55:a0:23:7e:14:b1:79:e4:50:33:
4b:36:17:db:4b:56:9e:56:ce:84:e5:76:ce:db:b3:
a8:91:c6:4f:ec:b1:fc:a5:83:29:ab:57:81:c2:b3:
de:66:32:9b:40:0b:92:61:f4:a3:49:76:8a:4c:2e:
14:f5:1a:76:97:69:6c:49:92:9c:f0:f7:8e:d5:73:
aa:a3:75:39:e5:3a:6c:5f:16:c6:90:58:ae:46:8b:
e9:e2:be:4c:9c:db:89:53:d8:aa:5c:df:96:7a:e9:
d2:b6:52:04:63:fa:97:0e:fc:69:a4:d6:46:4c:7f:
59:c0:ba:f5:99:69:60:d3:d9:ed:3d:c9:e0:11:95:
39:ad:06:e9:22:be:9c:f0:de:9e:94:09:e4:39:f8:
49:ed:f2:8a:01:9c:0c:c3:74:54:a6:53:ff:34:70:
78:dd:5a:71:7c:86:76:d4:55:23:6f:c5:cb:94:13:
40:c6:3c:ff:19:d1:55:7d:b6:14:d1:8e:f1:5b:27:
d4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C0:DA:D3:4F:64:14:DB:15:4C:B1:9F:2F:CC:FB:03:FD:1A:6E:04
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a39fae4b-24b7-4085-9a0d-23a83f620b40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daee:6000::/40
Signature Algorithm: sha256WithRSAEncryption
c1:3b:cf:36:6b:b2:ae:b7:27:58:80:a0:63:af:65:75:fb:49:
a8:b3:0f:a7:d1:4a:19:38:9d:25:51:60:04:8c:bd:16:b8:c9:
ec:e1:13:00:5e:f8:c2:14:79:56:b1:ff:56:a2:2f:51:22:83:
0f:66:e3:1a:79:3f:66:ea:84:b5:b5:79:3b:8d:01:74:92:5f:
18:8b:33:42:80:99:cd:2a:5c:38:6f:6e:3e:cb:d1:79:1f:30:
be:53:73:dd:dd:79:0a:bf:3a:d4:ef:8a:2b:0b:d4:5b:5e:a3:
70:e9:aa:3c:38:3b:64:f7:91:98:4c:36:50:e2:8a:24:ec:8a:
53:84:50:9c:5d:af:19:c9:ff:e1:a0:8a:d9:89:5a:f2:3d:e6:
19:aa:fe:7e:b2:ef:0a:67:e1:bb:51:78:21:78:71:77:63:a6:
de:f3:fc:c1:e8:3a:1e:f6:98:fb:9d:80:23:42:50:b1:af:7d:
7c:c3:67:ca:2c:f8:ec:97:4d:dd:d7:55:9a:85:e8:c7:e2:b0:
dd:db:3b:42:ea:da:30:7a:e8:22:60:80:a5:92:9b:58:93:e8:
41:ab:8e:70:41:53:99:d9:06:c0:ec:7b:fd:76:c7:52:cd:b3:
9a:bf:6b:dd:60:c5:60:0b:5d:ff:45:1c:89:8f:03:d8:86:11:
87:1c:6c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:31:48 2025 by rpki-client