Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e32eff57-7d1f-4153-9080-7652ae1a9bd3.roa
File: e32eff57-7d1f-4153-9080-7652ae1a9bd3.roa (raw, json)
Hash identifier: SR9h1jwWUt2LgQaCNtLLnZYG7TJMoAFhh8Q5fhHIe2k=
Subject key identifier: B8:14:18:B9:AD:E9:B9:46:A1:73:9C:F3:BE:9D:03:F3:2F:51:72:A5
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 4CC6005720162A111D3E882930AD96D2868206E0
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e32eff57-7d1f-4153-9080-7652ae1a9bd3.roa
Signing time: Thu 22 May 2025 00:36:59 +0000
ROA not before: Thu 22 May 2025 00:36:59 +0000
ROA not after: Thu 26 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dab9:2880::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 19:38:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:c6:00:57:20:16:2a:11:1d:3e:88:29:30:ad:96:d2:86:82:06:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 22 00:36:59 2025 GMT
Not After : Jun 26 23:59:59 2025 GMT
Subject: serialNumber=f47cd69958a04db5dd09e19c7b3a92e59113a3d923cab835d908b166bb0dd995, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:03:ca:74:a4:6c:77:29:fe:26:11:c7:1f:7d:
1c:be:a3:e6:d0:79:49:a9:e1:a6:82:c0:ce:eb:4e:
8b:8f:41:44:00:c0:2f:71:47:2b:d8:1e:3e:6e:46:
d4:8c:d6:d5:20:a4:0a:82:24:3f:66:d7:a9:c0:42:
c5:4e:1f:74:cd:85:17:30:71:3a:b7:e4:64:71:54:
6e:d1:5c:72:2f:86:b7:e6:da:fb:0c:7b:8b:72:ad:
e8:4a:aa:28:a9:dc:41:7d:be:68:b9:56:8a:d5:f4:
40:1d:41:a6:51:fb:b5:91:bd:a6:28:d9:6e:d1:14:
dd:8f:7a:98:cf:ac:4d:97:fa:ad:ea:a0:f2:21:65:
ce:0f:6b:7f:e2:4b:77:72:b9:72:4c:b2:8b:f5:7f:
0b:77:5c:a8:04:7f:6e:82:68:a3:81:31:1f:84:71:
7d:d5:dc:28:2f:12:78:dc:c9:a7:e5:01:7b:b1:27:
9b:9d:c1:0d:9b:70:40:86:82:04:2c:7b:8f:73:55:
0d:9c:50:41:5a:2c:5b:ed:e6:5d:e6:be:94:c8:4c:
a0:44:78:57:7e:bc:cb:9c:96:a6:c4:1a:75:a3:ad:
a9:5c:0c:c5:e9:c4:24:fe:16:e8:bb:78:74:03:12:
dc:de:a9:49:fe:e6:ef:78:f0:0a:0f:e7:7a:99:df:
f9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:14:18:B9:AD:E9:B9:46:A1:73:9C:F3:BE:9D:03:F3:2F:51:72:A5
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e32eff57-7d1f-4153-9080-7652ae1a9bd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dab9:2880::/48
Signature Algorithm: sha256WithRSAEncryption
2c:47:92:ef:c6:b6:90:2f:d8:f1:1d:de:5e:4f:5d:48:89:68:
e0:2c:8f:e5:68:0a:ce:db:bf:9b:d8:9a:22:c3:4c:1d:a0:3e:
d7:73:4a:2c:e2:82:f8:32:f9:f8:60:cb:f1:32:7b:66:86:48:
e6:e2:d0:ad:aa:4a:4b:85:87:44:b4:b8:e8:08:16:66:8b:7b:
45:7f:8a:4e:e3:03:70:3b:03:0e:18:85:b2:45:b1:a4:d6:e0:
72:13:6b:30:2d:93:a6:49:35:51:54:22:51:5a:5f:80:8e:d6:
2d:b5:24:f7:67:22:ce:1d:59:8e:21:13:d5:5e:ad:4c:0c:1e:
54:cb:e0:7e:a4:17:e7:4a:b0:57:71:ff:51:a9:95:5f:2f:51:
c6:90:67:e2:20:3f:01:1f:9e:9c:a3:41:78:8f:d9:16:80:9e:
38:57:e0:77:b7:4d:8b:d4:1e:97:45:22:a8:a1:80:3c:a2:ca:
e4:7e:cc:0c:b1:e6:a4:82:ff:3a:bf:d4:37:9a:db:4e:38:d3:
a8:c3:d6:e1:42:4b:e4:16:33:a5:d8:1d:3f:0f:69:f5:59:c1:
0a:f7:d8:0c:50:e7:1b:fa:45:2a:9d:7c:5e:6e:e4:27:e1:8a:
36:e1:01:81:4d:c7:77:b3:9b:15:6a:83:0f:69:ac:28:31:b1:
d6:e2:6a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:18:34 2025 by rpki-client