Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0363aa03-ef91-4e35-9c6b-41ca88ffcb05.roa
File: 0363aa03-ef91-4e35-9c6b-41ca88ffcb05.roa (raw, json)
Hash identifier: MnAa15FTTEbn9TB7an/FLgpPqRxWsYf8tFUAQkJ85Mg=
Subject key identifier: 9B:6D:4B:62:DA:5B:E8:53:33:13:C9:C8:1C:A4:01:4F:30:0B:A7:36
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: EDD881025D2C00D8813676842D935F5F64EE13
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0363aa03-ef91-4e35-9c6b-41ca88ffcb05.roa
Signing time: Thu 22 May 2025 00:52:06 +0000
ROA not before: Thu 22 May 2025 00:52:06 +0000
ROA not after: Thu 26 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dab9:8800::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 03 Jun 2025 19:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ed:d8:81:02:5d:2c:00:d8:81:36:76:84:2d:93:5f:5f:64:ee:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 22 00:52:06 2025 GMT
Not After : Jun 26 23:59:59 2025 GMT
Subject: serialNumber=b9c4478b05086b05bbdab91219027f61dd35c7d9fe5207dc8744c665ce18a3d2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:e6:16:dc:75:6c:05:2d:aa:d8:a4:ce:b3:
95:d7:65:c9:ed:03:c3:0c:10:0e:61:32:8b:bf:fb:
f6:1d:6f:ac:49:0b:b1:f6:d4:28:ef:51:ea:8c:45:
1c:3c:7e:cc:1f:53:8d:d9:1b:0e:e3:3c:47:92:4f:
14:18:19:5b:da:39:06:0a:45:62:9b:de:6a:26:85:
64:86:51:0b:84:85:d7:f6:f4:22:31:6a:97:35:0d:
a3:bb:d4:63:2d:bd:b1:7c:c3:6a:c3:47:f6:e9:31:
40:87:0c:b3:2f:a9:9a:35:b9:c6:a2:65:9e:fa:0d:
4a:85:09:46:70:5c:93:f4:1a:53:bf:e1:14:e4:12:
81:78:69:3d:aa:21:78:a2:b4:61:22:f6:4f:71:2c:
8c:f7:49:f4:31:32:b3:b9:23:5c:44:d3:de:11:33:
c3:70:94:17:a8:22:66:04:0a:ab:88:95:b8:0c:38:
50:90:cc:44:f7:e2:db:5b:02:5f:9a:ce:60:e4:10:
b9:ff:e7:e0:10:de:43:83:a4:2e:31:e5:b7:a3:06:
19:31:48:dd:bf:15:24:66:0e:0a:21:2d:42:18:e5:
6b:bf:f0:57:ba:a8:ae:14:b4:0f:b6:c2:20:2f:d3:
13:7e:30:cc:27:d5:cb:0d:88:d4:20:a0:cb:a5:75:
93:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6D:4B:62:DA:5B:E8:53:33:13:C9:C8:1C:A4:01:4F:30:0B:A7:36
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0363aa03-ef91-4e35-9c6b-41ca88ffcb05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dab9:8800::/40
Signature Algorithm: sha256WithRSAEncryption
1f:5b:f4:84:49:49:29:c8:3d:c7:46:7b:12:85:0b:b9:31:58:
9c:f4:2a:ce:1a:88:96:a6:4c:28:a0:8a:8a:85:15:b5:24:77:
71:de:b4:a6:e4:d9:97:17:3a:75:3b:2f:c3:a6:7c:fd:6a:7c:
5a:a6:72:5f:16:1f:69:04:26:77:bb:0e:43:d4:4f:fd:2d:3c:
2d:cd:d8:c3:16:91:7f:d9:b3:78:2e:d3:9a:ca:49:6d:35:86:
25:d6:6c:8a:b7:b0:e8:06:41:ec:73:f8:ab:81:85:ce:57:1f:
20:f6:5b:ab:b4:35:e6:5e:15:c0:54:24:15:9f:d9:33:e0:b3:
8f:66:98:e7:90:28:30:74:27:09:03:c4:7c:e1:44:1c:a5:69:
cd:02:88:e1:43:11:a8:8d:91:64:3d:5f:cf:ee:5d:de:65:8b:
7f:c9:de:f8:18:ae:2c:56:c8:70:e1:4a:49:67:93:93:75:f3:
3a:30:db:3e:9b:ed:86:d1:c4:2d:f8:46:d3:78:a5:eb:73:a1:
3a:d4:fb:ad:0f:c6:1c:6c:ff:a1:87:c2:19:e9:3e:8e:fe:cb:
48:24:72:a0:15:4d:23:2b:f1:97:31:b7:a7:82:42:9a:b1:38:
e9:85:10:6c:ed:f4:22:8a:73:9e:e5:20:66:21:e3:f3:5b:b8:
f4:d2:44:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:38:44 2025 by rpki-client