Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0db776f4-2540-4b6f-997d-ca0a5392335b.roa
File: 0db776f4-2540-4b6f-997d-ca0a5392335b.roa (raw, json)
Hash identifier: AnBPW+Z5IwOh9K03/9wZdQU+qG9kM3C1j8fZazhf8nY=
Subject key identifier: 17:72:11:CD:74:3B:19:4F:D3:F1:27:19:A7:2A:21:54:80:52:2E:E4
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5FEEB336B8AF62D11306872320B19BB793C4FFAB
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0db776f4-2540-4b6f-997d-ca0a5392335b.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da16::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 03 Feb 2025 20:50:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:ee:b3:36:b8:af:62:d1:13:06:87:23:20:b1:9b:b7:93:c4:ff:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:79:36:f9:b0:ab:87:47:9f:7c:aa:bc:55:
ef:49:db:fa:65:b7:a6:3d:ed:80:f9:0f:70:42:25:
d9:a1:c4:f2:42:af:ae:45:01:11:c5:2d:9e:47:35:
65:58:33:d0:d4:65:63:ff:ee:2d:22:78:40:53:69:
ee:cd:12:cc:2d:26:76:f1:ef:78:79:ca:cc:00:4f:
2e:60:54:89:d4:78:91:bc:24:13:c7:50:d9:bd:b5:
9a:74:b7:67:28:48:96:45:f6:b0:af:d7:46:4e:d5:
0a:2b:28:9c:03:12:7b:6a:53:fd:8d:87:2f:c1:f2:
54:2a:e6:5d:7c:09:eb:7c:13:5d:72:3e:99:bd:ce:
cb:b5:95:15:b4:09:32:54:eb:d9:4b:a4:e1:4e:e3:
fc:e1:05:05:d9:71:bb:d4:e2:c7:e4:50:2d:82:a2:
a9:b5:da:d2:54:4b:b8:f4:a1:72:b6:0b:9f:20:ff:
81:6e:71:fc:7e:c8:7e:6f:b9:80:77:d2:ee:59:9a:
45:99:83:27:36:ba:d0:8d:55:07:2c:e9:6f:11:80:
3e:83:e3:cb:39:a0:c1:6f:fb:ff:08:01:6e:8d:2f:
9f:b9:9d:28:af:ae:b3:8f:3d:b8:45:10:42:84:e3:
f3:ad:dd:a1:a5:98:f3:d6:60:e4:d4:09:63:b5:af:
09:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:72:11:CD:74:3B:19:4F:D3:F1:27:19:A7:2A:21:54:80:52:2E:E4
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0db776f4-2540-4b6f-997d-ca0a5392335b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da16::/36
Signature Algorithm: sha256WithRSAEncryption
c8:95:ab:c8:61:c8:46:dc:c2:62:4f:07:54:78:3a:8f:15:44:
a0:31:15:5f:63:32:dc:ef:83:8c:05:49:7c:98:c2:86:2f:d8:
a8:90:b7:39:b4:3e:b9:67:01:e5:87:9c:a3:f5:03:8f:69:dd:
1d:64:29:18:54:c1:21:25:21:84:a0:d0:43:5e:7c:9d:9a:98:
76:41:87:23:57:44:aa:7c:7d:3e:e2:97:6b:a5:00:1f:3d:e0:
00:7e:ec:aa:c7:bb:04:d2:ed:0e:dc:95:0f:dd:d0:4b:33:ed:
84:42:b4:d4:9c:af:ef:11:16:06:7e:64:36:12:d3:ad:8e:8d:
f4:e9:72:72:79:82:85:2c:a6:15:ef:39:50:26:57:f5:ec:d9:
62:7f:7d:7b:86:bc:24:67:ec:e5:73:b2:4d:61:24:d7:17:a5:
4f:5b:1b:e1:1b:b1:98:c6:12:b8:c3:44:d7:55:1d:a9:63:c3:
dc:3c:51:06:97:6f:a5:a8:26:14:2a:8a:89:78:25:28:0d:d2:
3c:af:fc:2c:4e:30:8c:c7:31:23:19:33:00:53:e8:0e:28:d9:
8e:b3:18:1b:3f:8f:b8:52:3a:ea:72:6f:a4:e4:fc:d4:50:a5:
47:e2:0a:b7:ca:b6:02:1f:a8:de:09:7f:fd:ca:eb:49:cb:15:
b7:19:d6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:03:58 2025 by rpki-client