Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c465144c-4c11-4296-8391-5d2f683f5025.roa
File: c465144c-4c11-4296-8391-5d2f683f5025.roa (raw, json)
Hash identifier: 2n2iv487Kwp/0PXquGbtRLT848l2/S8xhuFeGh9pSrk=
Subject key identifier: 67:C4:2D:E3:2E:BE:C3:54:43:2E:02:6D:76:F7:93:98:9A:30:ED:5E
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 430DD83B21E826C0E902DB70CF757CD68A56E3BD
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c465144c-4c11-4296-8391-5d2f683f5025.roa
Signing time: Mon 12 May 2025 15:10:44 +0000
ROA not before: Mon 12 May 2025 15:10:44 +0000
ROA not after: Mon 16 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daee:9000::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 20:08:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:0d:d8:3b:21:e8:26:c0:e9:02:db:70:cf:75:7c:d6:8a:56:e3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 12 15:10:44 2025 GMT
Not After : Jun 16 23:59:59 2025 GMT
Subject: serialNumber=b286b8bc7145af325339ff345aef3abdb498415b941edfb9e71319711f5d59ec, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a4:69:5f:62:23:35:af:cd:b9:bd:17:09:4b:
44:35:3e:9c:4c:8a:06:c3:d5:9e:ec:74:a2:89:cb:
83:82:b1:cd:31:d5:c9:39:6d:68:43:a7:68:e4:34:
fd:89:dd:72:f0:8a:31:4d:9c:25:91:c8:82:b1:16:
78:a2:a3:e6:38:16:80:ca:06:53:d3:50:a8:1c:cd:
93:3c:95:be:8b:9a:75:a8:c5:92:60:0b:49:72:bd:
ce:65:ab:5f:10:54:ae:f4:c0:22:9d:71:19:c1:f3:
b4:c2:b9:01:b6:84:00:a2:5d:ef:36:c0:ac:cd:48:
67:f0:98:80:d5:67:ba:a8:4c:b6:85:e0:db:57:29:
e8:f7:11:e8:83:7d:c3:6a:c1:bd:9c:1d:5f:e1:1f:
81:12:64:97:dc:21:e5:de:83:87:7f:73:7c:dc:18:
88:95:24:37:00:67:d2:4d:88:ac:4f:ec:45:db:ef:
9f:b3:23:ff:23:7a:f4:70:b8:96:d2:f2:f5:7d:42:
06:80:71:c4:38:b3:e0:bc:10:30:a5:82:64:0c:90:
d6:3c:71:df:9e:85:81:9c:48:9e:4f:56:7e:34:7c:
5a:60:73:49:2c:ee:9a:20:4c:17:b7:f3:d7:3b:e4:
03:05:cf:2f:47:07:07:2f:6a:97:3f:f4:54:9b:3a:
ec:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C4:2D:E3:2E:BE:C3:54:43:2E:02:6D:76:F7:93:98:9A:30:ED:5E
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c465144c-4c11-4296-8391-5d2f683f5025.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daee:9000::/40
Signature Algorithm: sha256WithRSAEncryption
7c:bd:be:16:35:18:d2:41:af:00:04:e7:e1:ec:a8:10:e5:e2:
64:47:26:d3:db:da:6a:57:45:6f:8d:0b:36:84:ba:91:d3:51:
d2:94:a5:f9:db:22:1f:55:e8:b8:9d:f7:5a:00:4f:59:37:d5:
7d:6a:ac:60:8e:3f:9d:af:64:11:b2:57:1a:c4:08:b9:ac:2e:
1a:9d:cc:8b:46:36:ee:29:52:2a:60:c8:cc:13:09:e7:a8:a7:
5e:57:69:86:92:c9:5b:bd:47:f4:04:2d:c4:3e:ce:63:50:43:
e9:99:b8:95:bc:18:76:c9:7a:f3:b9:6d:bd:3e:6d:f8:bb:e3:
2f:dc:de:97:12:7a:31:b9:36:97:8c:07:50:07:a4:ff:ff:b6:
73:00:ce:68:15:40:d5:5b:aa:16:ae:72:05:e2:26:5f:b5:4a:
8c:61:94:c7:e9:02:c1:c9:59:db:b4:32:c1:11:34:7c:fd:ed:
e9:83:68:eb:ce:60:a4:f8:bc:b5:08:cd:df:9b:9b:cb:3d:dc:
c2:37:7d:79:74:55:4d:a4:ba:3e:72:37:80:89:4b:bd:10:54:
cb:68:a7:4e:45:ec:8e:05:52:20:80:27:4f:7f:f4:e2:20:5e:
08:9f:c6:07:99:46:52:55:de:77:2e:6b:fa:e5:ce:96:fe:11:
99:73:ba:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:06:39 2025 by rpki-client