Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cbc61353-f2ad-46af-90cb-49c0a23063ed.roa
File: cbc61353-f2ad-46af-90cb-49c0a23063ed.roa (raw, json)
Hash identifier: 7M6K6+/ERqTWNxXBTZXX/UIvbvwwhmceBuNP2Thz9as=
Subject key identifier: D8:F3:02:3F:8B:F3:37:D5:49:6B:0C:E0:2E:E3:DF:A0:BE:43:3C:8C
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 25CEE5CC5D20169AA394A4BECAF92C193D84B874
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cbc61353-f2ad-46af-90cb-49c0a23063ed.roa
Signing time: Mon 12 May 2025 15:10:50 +0000
ROA not before: Mon 12 May 2025 15:10:50 +0000
ROA not after: Mon 16 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daee:b000::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 20:08:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ce:e5:cc:5d:20:16:9a:a3:94:a4:be:ca:f9:2c:19:3d:84:b8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 12 15:10:50 2025 GMT
Not After : Jun 16 23:59:59 2025 GMT
Subject: serialNumber=fd11b22a1bb5abe9bbc122b32f8eca16cd6f8fc31e760fdb5cfda033c63e011b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:f5:cc:ea:f6:73:35:c8:b8:3e:78:f2:17:
ae:ca:4c:f9:d0:54:5d:e6:38:79:82:79:6c:02:53:
2a:e2:0b:4d:b4:f5:6e:26:d7:c9:bd:d5:b3:18:9f:
66:f7:b8:17:9d:9d:fa:36:1b:ef:6a:df:00:aa:ad:
ba:25:2f:0e:d3:bc:f4:b6:f5:14:a6:6a:6b:73:57:
a4:d0:5e:fc:7b:3e:a1:62:9b:8b:ef:de:88:5c:73:
ac:59:32:8a:2b:9a:59:47:c7:c7:6b:db:79:01:1d:
a6:9b:93:26:e2:06:dd:49:83:44:35:d0:dd:7a:bd:
14:3d:75:4f:77:2f:20:b4:dd:64:2e:b4:ac:2c:f0:
a7:51:16:86:b3:31:b7:42:5b:6a:52:b6:02:93:bf:
94:33:27:1c:f2:95:89:3a:b7:6e:5a:ea:b8:25:9c:
4b:1b:a7:eb:16:20:01:75:eb:6a:9a:64:52:80:12:
49:f9:3a:60:e1:0f:29:9d:6c:29:f1:3b:35:dd:01:
55:d0:04:19:a8:75:c5:86:1d:d1:4f:da:22:0a:86:
5d:55:10:55:f7:d9:43:2e:9e:1d:00:77:d2:71:89:
a6:32:d3:55:0f:77:63:74:13:63:2f:df:95:dc:1e:
0d:75:89:4e:ef:b8:31:24:aa:41:38:a5:73:ea:5d:
bf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F3:02:3F:8B:F3:37:D5:49:6B:0C:E0:2E:E3:DF:A0:BE:43:3C:8C
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cbc61353-f2ad-46af-90cb-49c0a23063ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daee:b000::/40
Signature Algorithm: sha256WithRSAEncryption
88:5c:11:32:7f:7e:57:a8:dc:b6:2e:a2:f0:2d:77:01:f5:5a:
54:9b:1d:be:f2:56:2d:5d:e6:ea:39:e2:23:97:13:d6:b0:32:
bf:af:06:34:7c:a7:ac:67:d3:b0:a7:e7:f9:c2:b9:c1:86:7d:
7d:66:6c:34:f9:b4:cf:91:34:31:a0:cd:12:f9:bb:12:0b:75:
72:bd:75:4c:33:03:b5:17:3a:a0:47:ab:47:70:66:b8:1c:ac:
db:df:6e:c1:ee:cc:6c:38:5a:f8:f8:4f:17:3a:d9:d2:03:cf:
6a:3c:e8:39:dd:ab:85:22:07:78:24:72:07:40:be:b3:99:c7:
c5:16:b0:36:54:fa:29:41:aa:2c:fa:2f:42:6c:c5:40:d0:5a:
cc:2f:69:3f:45:19:58:22:af:89:c2:96:00:1f:b5:e4:1b:21:
12:e5:43:83:9d:45:ea:8a:c3:e0:ef:51:03:a1:99:23:d3:96:
1c:7b:e3:79:c6:09:88:90:1a:5f:f0:cc:e4:61:53:9e:7c:ff:
90:30:89:48:1d:b4:d3:ce:b5:67:40:82:e4:0e:b5:7c:51:e4:
c5:71:d2:35:11:ae:2a:56:03:1e:62:fa:e9:31:4e:97:3e:ad:
be:44:71:fb:45:eb:2a:87:bf:03:12:f3:18:53:77:03:7e:40:
81:21:b6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:04:11 2025 by rpki-client