Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bfce63b8-442d-44cb-a2b7-1b70800b70cf.roa
File: bfce63b8-442d-44cb-a2b7-1b70800b70cf.roa (raw, json)
Hash identifier: NXBnQZG6D8cFvLQg6FF/V6ue0SOI3hY5QwzFV228E3s=
Subject key identifier: 38:FF:AA:B8:2C:07:D0:70:84:EA:8C:32:B6:9B:89:13:14:EB:0B:25
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 1668C6712F8312C14F720A5A1B7B97465B138053
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bfce63b8-442d-44cb-a2b7-1b70800b70cf.roa
Signing time: Fri 16 May 2025 15:01:06 +0000
ROA not before: Fri 16 May 2025 15:01:06 +0000
ROA not after: Fri 20 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dab9:2800::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 May 2025 00:52:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:68:c6:71:2f:83:12:c1:4f:72:0a:5a:1b:7b:97:46:5b:13:80:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 16 15:01:06 2025 GMT
Not After : Jun 20 23:59:59 2025 GMT
Subject: serialNumber=eedc19594365dec5b651f8bc86d566dd6e95684ef9082809d2aeaf8a51372759, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:ff:e9:2e:48:5d:8f:ab:ad:74:52:d6:d9:
f8:7f:6a:02:4b:49:1a:78:16:1d:39:a5:29:4c:38:
a4:24:c3:da:43:98:63:2b:e9:30:f7:f5:d3:10:f9:
4f:7c:b2:17:31:eb:13:e3:42:2b:86:07:c3:ee:ff:
1f:ca:44:72:3e:04:74:a9:43:c0:76:57:2f:b0:0f:
a2:45:7a:3d:b9:e9:1b:5c:39:05:ca:e2:7d:c5:fb:
fb:e7:47:2c:36:04:6b:ea:47:21:07:96:ef:76:10:
6e:5a:62:34:31:d4:6c:c9:f1:61:85:0c:7f:a5:14:
f0:5a:18:d9:0e:23:35:29:88:1a:36:dc:82:65:5c:
88:b9:d0:19:12:93:11:72:d5:0b:a5:9e:0a:f2:63:
a7:ca:1e:8f:35:cd:e5:65:ec:70:0d:96:27:d9:0b:
03:65:cf:0b:82:64:6e:93:14:d7:a8:b0:44:92:36:
7f:1a:c0:10:8d:a1:0e:11:57:9a:76:13:3f:6a:ba:
a5:fd:ba:08:98:40:44:f1:d9:02:b4:99:b8:d0:a6:
4e:33:a0:dd:85:40:cd:99:b0:ca:5f:9a:3b:78:49:
be:7f:ac:59:25:9e:a4:dd:20:47:57:b8:1f:d4:df:
f6:35:6a:e9:ad:80:0e:63:1e:f3:43:44:f4:d7:af:
2e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FF:AA:B8:2C:07:D0:70:84:EA:8C:32:B6:9B:89:13:14:EB:0B:25
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bfce63b8-442d-44cb-a2b7-1b70800b70cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dab9:2800::/40
Signature Algorithm: sha256WithRSAEncryption
09:f0:35:a6:59:d0:f7:06:c0:dc:98:98:9b:7c:14:31:da:26:
81:f3:de:34:9a:ed:6b:6a:eb:86:b0:7d:4e:37:ed:14:4d:bb:
ed:f9:cc:f5:4e:47:f0:4c:c5:56:0f:35:86:85:62:0b:11:d0:
2d:cb:27:97:a8:51:51:a7:be:8b:79:c1:d2:e7:5a:fe:8e:4b:
ba:e2:18:ab:7a:10:3b:3b:71:cf:16:87:d2:b4:59:d9:40:01:
fe:77:50:73:3d:93:9c:28:41:21:2c:2b:ee:e4:df:b1:67:1c:
f8:99:2c:43:33:27:4b:6b:06:4e:df:e3:0e:19:be:ae:62:7d:
2f:8d:df:e3:2d:cd:10:45:13:0e:79:7c:2e:68:64:93:a4:53:
e2:59:cf:b3:6f:23:6d:ea:63:4c:f5:ba:46:15:0e:ed:61:67:
87:b9:a7:d6:c3:fc:4c:69:31:a6:be:44:7b:22:f7:2e:8a:eb:
14:73:62:cb:9e:8e:c4:ff:3a:b3:e7:d3:c3:c2:8b:0c:ad:20:
02:6d:b0:5c:b4:db:29:0d:37:7b:41:06:71:0b:da:2f:6a:11:
0e:d7:04:29:2a:a9:ae:ea:fc:43:4b:f7:1a:45:45:8e:4c:d4:
0c:6c:69:f1:82:04:90:98:a2:86:a6:28:b6:a4:5b:16:7a:2c:
20:32:d2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:06:12 2025 by rpki-client