Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10683b0b-95dd-4486-a7c6-e2e7d85f328e.roa
File: 10683b0b-95dd-4486-a7c6-e2e7d85f328e.roa (raw, json)
Hash identifier: X7jsYOFqRysm2Ox1aV9bP8bjegWJybgxPu4f4fH/C3E=
Subject key identifier: C6:26:1C:77:75:61:A1:A2:6B:32:59:8F:BF:FE:C1:4A:74:59:FC:7B
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 7A3D2EA46BC50DCBBE1CB76F2C146466415E6971
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10683b0b-95dd-4486-a7c6-e2e7d85f328e.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daff:e000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 16:40:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:3d:2e:a4:6b:c5:0d:cb:be:1c:b7:6f:2c:14:64:66:41:5e:69:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:8e:64:05:95:64:a6:a3:42:18:bd:71:1e:
11:f3:c9:68:97:24:30:f7:0c:7d:90:fa:0d:1a:27:
50:7a:11:b9:ff:47:68:72:29:83:dd:6d:a3:b5:55:
1d:33:3a:ec:1b:e8:58:6b:7a:64:84:37:6d:35:03:
17:a8:d2:5d:6d:90:85:25:19:b6:e4:c2:22:99:34:
64:80:8e:6c:eb:d1:66:7b:d1:31:f5:02:d2:b1:df:
12:ee:17:8b:49:a0:e0:1c:8f:b3:60:49:e5:fe:73:
c2:73:24:2d:f3:f3:b1:36:98:c0:89:7b:30:62:6f:
bb:2b:0d:30:16:85:d6:b8:6a:9e:41:21:da:de:be:
a8:cf:b5:32:02:ed:2c:b6:c6:e2:a4:7f:d3:3e:e5:
f4:26:5e:d5:88:76:71:70:8a:98:65:bd:66:79:7a:
f6:3b:42:c2:18:d6:40:31:5c:88:92:6c:66:d6:a8:
f2:36:03:e5:9f:85:cd:a3:fe:1d:32:8a:31:a1:38:
ff:4a:9b:55:ef:54:ba:7f:a8:45:41:25:ce:87:a3:
e9:7e:8d:2f:e8:03:4a:1f:a9:cb:aa:e8:b6:e8:50:
5f:46:90:4d:b4:b3:1a:29:c7:67:46:80:d8:77:f4:
70:bd:82:3f:60:55:3a:ad:c2:ea:3c:b3:b3:da:82:
c6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:26:1C:77:75:61:A1:A2:6B:32:59:8F:BF:FE:C1:4A:74:59:FC:7B
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10683b0b-95dd-4486-a7c6-e2e7d85f328e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daff:e000::/40
Signature Algorithm: sha256WithRSAEncryption
b2:ed:e0:e3:06:bd:e1:4b:54:fe:4f:05:db:83:23:a8:dc:87:
c8:e2:c6:81:19:b3:a0:33:c5:65:44:ae:f3:cc:9c:c2:ba:91:
09:6b:b0:31:a7:51:02:bc:e1:89:da:3a:55:f7:bb:9a:32:21:
2d:06:53:9d:6e:ac:a6:72:40:37:72:dd:05:dd:26:a9:94:8a:
52:c6:83:bd:24:c4:d0:cb:b7:cc:5f:ad:67:c9:f8:dd:df:ea:
da:11:2e:61:ac:76:f3:e0:ac:da:b5:78:ca:18:20:d2:84:5b:
f9:27:09:a2:ef:6d:da:bc:34:7e:f9:b5:69:7c:41:61:bd:a5:
1f:a7:2c:f6:08:41:98:56:f1:84:d4:76:9e:46:37:f3:e4:22:
3e:a8:5b:e0:0a:ee:56:e5:e4:50:72:31:98:39:44:21:76:8a:
a9:43:5e:5c:4a:19:4a:2a:92:b8:f0:0c:98:d8:33:9b:61:bf:
ad:d6:af:68:2d:28:06:fc:3f:7b:b2:f5:a7:19:50:36:22:22:
08:0e:0b:61:9b:06:dd:8d:12:bd:ed:15:e7:eb:ba:dc:d3:a2:
0d:87:19:d9:b5:37:d8:3e:8c:79:8f:80:2f:f2:7f:d2:e2:e2:
16:2e:b5:ee:08:79:49:05:36:d8:09:4a:6d:dc:ae:16:62:dd:
b6:02:a4:06
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUej0upGvFDcu+HLdvLBRkZkFeaXEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX
DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNANWFhNTgwZjk5OGE1ZTQxODhkYmNm
M2M0OTY1MjM1ZWE0MDlkODUxNmRkZWU0ZTFkYjg2ZmNkMzk4NWNkMzg3OTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfqOZAWVZKajQhi9cR4R88lolyQw
9wx9kPoNGidQehG5/0docimD3W2jtVUdMzrsG+hYa3pkhDdtNQMXqNJdbZCFJRm2
5MIimTRkgI5s69Fme9Ex9QLSsd8S7heLSaDgHI+zYEnl/nPCcyQt8/OxNpjAiXsw
Ym+7Kw0wFoXWuGqeQSHa3r6oz7UyAu0stsbipH/TPuX0Jl7ViHZxcIqYZb1meXr2
O0LCGNZAMVyIkmxm1qjyNgPln4XNo/4dMooxoTj/SptV71S6f6hFQSXOh6Ppfo0v
6ANKH6nLqui26FBfRpBNtLMaKcdnRoDYd/RwvYI/YFU6rcLqPLOz2oLGkQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFMYmHHd1YaGiazJZj7/+wUp0Wfx7MB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzEwNjgzYjBiLTk1ZGQtNDQ4Ni1hN2M2LWUyZTdkODVmMzI4ZS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba/+AwDQYJKoZIhvcNAQELBQADggEBALLt4OMGveFLVP5PBduD
I6jch8jixoEZs6AzxWVErvPMnMK6kQlrsDGnUQK84YnaOlX3u5oyIS0GU51urKZy
QDdy3QXdJqmUilLGg70kxNDLt8xfrWfJ+N3f6toRLmGsdvPgrNq1eMoYINKEW/kn
CaLvbdq8NH75tWl8QWG9pR+nLPYIQZhW8YTUdp5GN/PkIj6oW+AK7lbl5FByMZg5
RCF2iqlDXlxKGUoqkrjwDJjYM5thv63Wr2gtKAb8P3uy9acZUDYiIggOC2GbBt2N
Er3tFefrutzTog2HGdm1N9g+jHmPgC/yf9Li4hYute4IeUkFNtgJSm3crhZi3bYC
pAY=
-----END CERTIFICATE-----
Generated at Wed Feb 5 04:03:49 2025 by rpki-client