Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e573a93-0df9-4209-b0ce-0c793b0859d9.roa
File: 7e573a93-0df9-4209-b0ce-0c793b0859d9.roa (raw, json)
Hash identifier: gZVFwL5jTxTDBFG99UKV4fEoAOlSH8uLw6MjgamRCL4=
Subject key identifier: A6:08:CD:7F:24:23:34:8E:22:56:53:70:1D:12:06:D6:EA:02:52:B3
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 4E8EB3636C3018C93484BBE8151661BCF594F114
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e573a93-0df9-4209-b0ce-0c793b0859d9.roa
Signing time: Tue 25 Mar 2025 00:31:08 +0000
ROA not before: Tue 25 Mar 2025 00:31:08 +0000
ROA not after: Tue 29 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf4:a000::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 16 Apr 2025 18:53:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:8e:b3:63:6c:30:18:c9:34:84:bb:e8:15:16:61:bc:f5:94:f1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Mar 25 00:31:08 2025 GMT
Not After : Apr 29 23:59:59 2025 GMT
Subject: serialNumber=24a759cafc50ef7ae128fc54a97c477dad0813bf175bbc3bb84ce3467bf95ebf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:12:62:15:e0:fe:55:e9:15:9e:33:c7:88:14:
c7:48:d2:d4:b5:c9:3c:0c:61:84:73:a6:a0:92:12:
54:2d:a5:ac:e5:2c:7e:7c:9a:0f:58:74:47:c9:6e:
51:66:92:13:94:53:21:18:75:8c:73:07:45:60:2c:
ad:e9:75:93:e8:de:24:56:54:59:e6:84:c9:02:67:
ff:8d:56:0d:88:2a:2b:e9:04:eb:03:51:a9:cd:fa:
61:c0:c7:5c:a2:77:9c:ce:ec:fc:8f:e9:86:ef:a8:
f0:2d:36:ce:71:70:4a:c2:67:e9:88:26:08:ec:20:
fb:9f:45:62:95:8c:70:87:95:39:3b:ba:3d:ca:b1:
e8:0c:6e:bc:10:65:93:86:c9:0d:f2:f2:d4:45:35:
e8:84:1e:26:c8:87:30:34:36:eb:5f:d2:20:e7:e9:
a9:7f:7d:5b:f4:05:bf:11:db:b8:b1:17:51:fc:86:
c7:f9:84:c1:1a:37:ac:b3:96:0e:bc:64:e7:7d:98:
29:a0:5e:0f:e4:50:da:2a:56:6c:e5:77:62:b6:85:
b2:87:29:6e:a0:d6:55:01:73:f1:a2:2c:cf:86:a4:
36:64:ce:df:3d:a0:50:f1:bb:17:4d:bc:24:22:75:
c0:be:ca:45:0d:5a:c6:ae:bb:eb:70:43:31:a3:0c:
44:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:08:CD:7F:24:23:34:8E:22:56:53:70:1D:12:06:D6:EA:02:52:B3
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e573a93-0df9-4209-b0ce-0c793b0859d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf4:a000::/40
Signature Algorithm: sha256WithRSAEncryption
59:d6:42:9c:68:8f:ac:ca:23:d6:79:ba:ad:2f:0b:b1:c0:01:
91:67:aa:e1:73:c0:72:3a:74:67:0e:6d:76:da:30:f1:84:a2:
79:d5:23:c9:fb:ba:fa:2d:9c:22:cd:a0:b3:31:b3:b1:b7:ee:
6b:02:55:0b:ca:01:7a:fb:77:d3:ff:c0:7d:9a:8d:d3:2f:87:
80:eb:81:72:07:19:d0:19:93:f6:97:8e:14:a3:42:44:f6:36:
73:9e:86:2f:85:22:80:be:ad:67:54:8a:69:8a:79:60:c1:6b:
85:53:0c:2f:fb:b2:e4:47:26:66:5e:e9:27:ac:91:09:df:5e:
dd:67:30:a7:11:00:c7:74:89:df:75:bd:03:03:0b:7a:30:00:
30:56:4a:1b:a1:85:6b:cf:7b:49:69:8c:ad:d8:08:3d:1a:7a:
a1:5a:0b:4f:3c:ee:cd:76:12:d0:8e:ce:89:b0:1e:02:95:d4:
03:17:e8:03:ce:f3:6e:d2:4c:8c:3a:98:30:d3:fe:28:6a:dc:
d3:a6:5b:90:7d:7b:40:b5:af:2c:47:d5:4a:d4:46:37:cd:79:
5e:16:d8:f8:ab:14:c4:f5:dc:32:f9:f5:b2:01:4a:ce:32:f9:
d8:84:37:8b:64:d0:a5:d1:d2:52:b9:2f:d4:10:45:91:2f:ac:
05:14:d7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:04:52 2025 by rpki-client