Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1509f01e-b648-4803-a4b4-64336a38ac47.roa
File: 1509f01e-b648-4803-a4b4-64336a38ac47.roa (raw, json)
Hash identifier: cEazPNAqYJKw/HvKuK8HWeO5pwwsY4q+todI9KyVxLg=
Subject key identifier: E2:42:A9:32:2E:C6:A0:4A:3B:3A:BF:77:B6:4B:30:0F:E8:8B:87:03
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 13D1BC6ACF085ABCF4AF888CDB4A770E500715F2
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1509f01e-b648-4803-a4b4-64336a38ac47.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf9:7000::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 28 Jan 2025 19:37:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:d1:bc:6a:cf:08:5a:bc:f4:af:88:8c:db:4a:77:0e:50:07:15:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:80:ef:61:22:31:b0:03:95:bb:ca:55:c9:
45:10:a7:10:f4:10:6c:6b:e7:51:45:b6:1f:4c:3e:
d5:fc:95:02:14:da:38:d2:b4:47:c5:40:a7:05:07:
31:1d:9c:dc:b4:c7:f7:ee:61:d5:36:ad:08:a2:3a:
41:8c:90:43:8d:94:64:d3:97:c0:1a:59:1b:7f:ce:
34:57:e4:21:e7:ac:7c:60:e2:58:34:1f:8c:7d:d7:
a6:65:85:a9:ad:76:f7:7d:fe:d8:50:35:61:dc:25:
bd:67:4d:8c:25:5e:ab:91:15:dd:c9:da:29:41:60:
a3:77:45:e2:fe:7a:cb:83:6f:a6:e4:c3:77:93:ab:
06:d2:19:a1:8f:80:0f:93:a0:51:41:dc:1d:c4:33:
86:e0:f2:7c:7b:bb:45:91:6a:0b:a9:7a:79:a4:7a:
10:ba:e8:d9:7c:ce:79:02:18:6f:45:01:e2:21:df:
0f:6d:62:9a:d4:e1:bd:ec:a6:26:69:7f:18:ba:de:
5b:56:d5:f9:1f:b4:18:e0:dc:b2:ed:6c:ee:92:b8:
82:e7:d7:93:57:e2:1e:fb:cd:57:12:3a:89:72:03:
7c:b0:ec:70:07:cf:f6:ae:b3:02:23:f0:dd:4d:a9:
2c:96:ba:62:4b:c2:86:06:26:49:e1:8c:49:9a:3f:
1e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:42:A9:32:2E:C6:A0:4A:3B:3A:BF:77:B6:4B:30:0F:E8:8B:87:03
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1509f01e-b648-4803-a4b4-64336a38ac47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf9:7000::/40
Signature Algorithm: sha256WithRSAEncryption
b7:2c:8f:56:b2:fa:d3:38:f4:11:f9:2a:a9:ba:f0:04:bb:9d:
99:97:85:7f:22:87:51:da:3e:77:82:b1:9c:1b:de:56:87:45:
59:fb:4a:ff:64:da:a3:d8:6d:f2:fa:f1:57:c3:54:36:7e:9f:
29:d7:91:22:38:68:3b:7a:fc:8b:8b:e5:01:25:67:8c:c4:0a:
a3:f4:46:0c:17:8b:29:b8:6b:06:fb:ee:11:4d:98:e8:1e:10:
68:1d:b9:dc:68:e4:a7:9c:c2:9f:f4:8c:aa:e1:06:70:f9:f3:
2a:34:97:3d:5d:e1:20:79:64:25:fd:de:3c:1a:e3:75:9a:86:
ab:4f:81:02:74:9c:83:d6:3f:ac:ba:27:01:a4:6a:55:28:98:
27:bd:17:73:b6:7d:2c:83:15:ca:eb:86:4a:b9:8d:d9:40:a6:
54:65:f9:9f:8e:b1:69:c3:b4:62:4b:4d:62:f3:a0:23:fa:c2:
d5:83:9e:51:66:a6:ab:10:ff:8e:b3:6e:0a:5e:78:16:22:ec:
f4:19:33:a3:dc:fd:16:10:a7:3f:97:b4:ca:c4:e9:a2:23:65:
6a:d1:ed:66:d6:8c:a3:f5:32:eb:c5:21:0b:7c:1f:84:a7:25:
15:74:16:ee:7d:ef:49:bf:d3:b6:e5:55:12:a2:ad:21:5a:0f:
e4:04:18:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:35 2025 by rpki-client