Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0689be28-3744-496b-bd5b-62402a65b913.roa
File: 0689be28-3744-496b-bd5b-62402a65b913.roa (raw, json)
Hash identifier: QkvnQqk+6SDz/58tpusPG/Vnr/YsaDOvZzAWd3UWWn4=
Subject key identifier: 1C:4B:32:EC:36:A6:EA:D3:A2:A5:09:4A:33:50:F0:62:98:24:D8:95
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 33BA4BFBEF6B7A42420ECF1C87566C39C031742D
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0689be28-3744-496b-bd5b-62402a65b913.roa
Signing time: Wed 30 Jul 2025 00:20:11 +0000
ROA not before: Wed 30 Jul 2025 00:20:11 +0000
ROA not after: Wed 03 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf7:a040::/46 maxlen: 48
Validation: Failed, certificate revoked on Wed 30 Jul 2025 18:24:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:ba:4b:fb:ef:6b:7a:42:42:0e:cf:1c:87:56:6c:39:c0:31:74:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jul 30 00:20:11 2025 GMT
Not After : Sep 3 23:59:59 2025 GMT
Subject: serialNumber=e924af39394fe7f08e1be76de8860654827171e12430ab0b3e61e2ed2d90b444, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3c:08:85:53:02:81:25:64:df:f3:6b:7b:70:
ea:37:51:35:fa:56:9f:d5:91:f9:f1:6d:5c:90:fd:
68:a6:c1:62:53:56:cb:c3:f9:71:9a:de:44:8b:6d:
8d:e6:f3:88:18:96:7b:be:7a:43:42:9b:23:d9:8c:
f2:b1:17:6e:21:21:d1:b3:b1:9a:9b:84:3f:71:24:
52:dc:17:25:0c:f0:a3:f0:37:bb:3b:28:79:3e:47:
93:37:f6:86:86:f7:e1:0d:9d:d7:2d:eb:32:a2:a6:
43:2c:2e:d2:d5:8a:10:43:01:44:ab:a9:fe:4a:c7:
96:66:3e:85:d1:e5:9a:64:b0:d7:9c:26:38:95:20:
f0:82:4b:e9:38:93:d5:e3:3c:5c:bd:74:dd:31:c9:
59:12:dc:35:00:cc:22:ec:8f:d3:5f:ea:a4:a1:8a:
24:cb:aa:da:fa:ca:b4:c0:52:41:da:49:bb:e4:32:
66:59:ac:e5:43:5f:15:f1:61:49:1b:77:7f:c1:91:
e3:3b:5c:54:e1:7a:6c:2b:24:0f:73:ae:2e:fa:12:
12:54:7b:a6:85:26:c2:d3:84:fb:f3:49:d5:02:80:
ae:37:fc:a1:ee:11:33:8e:8c:cd:7b:7f:e8:b7:0d:
ce:3a:6a:c2:37:3b:b7:13:c5:09:f2:51:24:51:1a:
d9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4B:32:EC:36:A6:EA:D3:A2:A5:09:4A:33:50:F0:62:98:24:D8:95
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0689be28-3744-496b-bd5b-62402a65b913.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf7:a040::/46
Signature Algorithm: sha256WithRSAEncryption
69:fc:68:09:90:3f:56:66:dd:f6:96:69:74:57:4e:d1:6f:1e:
1e:a1:26:e2:89:92:b9:7f:cd:0b:53:52:50:fe:64:e6:9e:86:
df:50:e6:c1:29:d8:70:f1:f5:85:6b:05:33:5d:a9:a9:33:5e:
d5:3f:72:6c:31:88:7b:3d:59:dd:71:6d:52:28:65:1b:b6:21:
b4:a9:0a:9e:bf:c6:ef:aa:ea:ed:63:53:ff:99:98:5e:8b:f1:
59:b8:ca:84:26:44:a2:67:99:8c:f5:4e:8b:a5:34:c3:6e:09:
b5:b0:b6:38:87:ed:fb:b6:3f:08:e4:97:44:9b:7d:83:82:f0:
7a:c6:4c:63:81:5f:74:a6:41:78:ae:ce:8a:eb:22:69:61:97:
b1:3b:38:42:4d:59:ba:4d:5b:d8:1f:cb:f7:e6:9b:fa:17:d0:
d4:98:14:f4:51:87:0f:7e:f6:c5:e9:9e:69:44:96:08:40:27:
5d:f8:2f:13:8c:df:58:7a:c2:af:af:76:01:f8:70:ca:f1:1f:
51:31:c4:13:77:6e:7e:c2:f4:a6:95:f6:81:64:6c:9f:9f:44:
a1:1e:1b:77:58:ff:63:90:89:3d:61:ee:43:0b:8b:cf:a0:35:
f9:8d:25:1a:de:a9:f3:4d:07:19:2f:0c:47:4a:da:c2:32:69:
17:5a:1d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 01:04:12 2025 by rpki-client