Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ec50bc85-6528-4684-9e3c-8ba5cfa3f830.roa
File: ec50bc85-6528-4684-9e3c-8ba5cfa3f830.roa (raw, json)
Hash identifier: wsjOrQC7QkGRTmQprhyYP/f/kqGlOYD4Fnyl+GGL74g=
Subject key identifier: 1B:A5:FE:F3:E5:43:AF:90:78:5E:19:27:BB:DF:52:12:9A:72:D0:A5
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 41BB3F338F551C9B09824063370E25DF254E904C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ec50bc85-6528-4684-9e3c-8ba5cfa3f830.roa
Signing time: Mon 24 Mar 2025 15:00:43 +0000
ROA not before: Mon 24 Mar 2025 15:00:43 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf4:2020::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 16 Apr 2025 18:53:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:bb:3f:33:8f:55:1c:9b:09:82:40:63:37:0e:25:df:25:4e:90:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Mar 24 15:00:43 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: serialNumber=25bece0ddd8a10dc426f529e46cff29361ae83d8291303f748f7f25a75b92469, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:57:c1:fb:9b:2b:b7:62:c2:21:56:56:88:74:
19:18:93:0b:36:75:b8:90:96:83:3d:43:64:5a:97:
a2:a9:85:41:52:84:ff:d5:e3:3d:90:15:bf:cc:9f:
81:63:2c:3b:d9:cf:57:65:bc:79:4b:f7:40:5a:1c:
5c:32:d7:61:00:7e:81:0f:40:43:db:5c:37:ba:5f:
46:cd:08:85:17:c1:80:c0:b7:2f:e9:86:1d:bd:30:
c0:3c:7f:29:90:a2:8e:9f:ef:c7:a5:d5:a1:87:be:
23:46:d6:0c:94:95:a9:4c:23:ff:43:0c:d5:3f:ee:
25:32:06:b6:35:bd:37:32:eb:fd:1c:ad:9d:64:9a:
41:14:41:82:71:5a:8e:31:45:4f:75:9c:1e:cc:b5:
8a:50:6d:db:0f:5a:9b:99:3a:d2:3b:c7:a7:cc:c8:
02:64:fe:6b:5d:fa:bd:75:56:1b:c1:74:c6:ed:a8:
87:97:bf:77:24:80:34:2e:9c:ce:12:fa:5e:38:35:
98:3a:af:e2:14:55:95:d6:0e:e7:ac:f5:f2:62:0d:
7f:fc:cb:91:d2:6f:9c:94:43:55:2e:67:8d:07:67:
c7:e8:58:fe:2c:63:38:f7:5b:6f:c7:18:9c:77:f1:
f6:94:09:d9:ff:f3:92:24:e3:88:5d:13:a6:ea:09:
72:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A5:FE:F3:E5:43:AF:90:78:5E:19:27:BB:DF:52:12:9A:72:D0:A5
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ec50bc85-6528-4684-9e3c-8ba5cfa3f830.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf4:2020::/48
Signature Algorithm: sha256WithRSAEncryption
8f:80:4e:f5:b8:28:22:7d:f8:cf:eb:f8:16:48:9f:ee:92:99:
42:b1:7e:2c:93:4f:f6:7b:c7:b4:35:fb:bd:2c:e8:b7:68:2d:
e6:92:7a:e4:ac:da:64:be:5d:4d:d5:94:b8:ea:c0:91:70:e6:
bb:da:2d:5f:ab:79:ba:04:91:b6:77:c1:b0:aa:16:14:e0:91:
d6:1f:91:07:c5:1d:24:6a:95:f9:93:35:19:71:cb:8a:36:0c:
ee:22:b5:9f:e8:03:8b:5d:67:0f:f5:94:a7:7b:3c:39:c8:5d:
d5:8f:8f:a6:05:fc:d7:d2:23:52:58:73:f7:23:d0:cc:40:70:
bf:c3:e0:64:87:a9:85:ba:29:ce:43:22:c1:16:08:98:e1:16:
53:31:0c:15:32:cb:5b:f6:f8:90:6b:17:c8:13:4a:b0:a5:95:
83:55:d5:02:6b:e4:03:ab:e3:bc:b4:0c:ab:70:09:24:7b:22:
a3:d3:4d:10:7f:ab:e4:73:fa:2e:7d:94:a8:37:f6:e1:df:87:
ff:c6:de:6c:27:24:17:5f:ae:34:d8:e8:7f:4f:df:d4:bd:07:
94:45:8e:28:38:00:65:9b:d5:3f:1a:58:90:18:ea:ff:4b:b7:
f6:cd:a7:94:61:4b:b7:4d:60:75:f2:57:a2:70:0d:43:b9:4f:
4b:01:de:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:35:59 2025 by rpki-client