Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/19db8a97-3cb1-4f37-8e44-2a7ef101c6ee.roa
File: 19db8a97-3cb1-4f37-8e44-2a7ef101c6ee.roa (raw, json)
Hash identifier: wQcnuEZo56i57DJfyPQdbh716JQV9Mm/3ee3bBq1J3w=
Subject key identifier: 67:08:67:3D:52:54:D1:A6:9C:47:82:6F:81:2A:62:7A:54:24:33:E6
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5ADC5C4C278209FCC390E5F0382DF256FFFC401E
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/19db8a97-3cb1-4f37-8e44-2a7ef101c6ee.roa
Signing time: Wed 14 May 2025 00:00:56 +0000
ROA not before: Wed 14 May 2025 00:00:56 +0000
ROA not after: Wed 18 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf4:28c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 19:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:dc:5c:4c:27:82:09:fc:c3:90:e5:f0:38:2d:f2:56:ff:fc:40:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 14 00:00:56 2025 GMT
Not After : Jun 18 23:59:59 2025 GMT
Subject: serialNumber=3b4afb518e4fa6f3608b38f5b2b98812a81e4d2a6999b1373944c93828b93175, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:62:a4:b5:04:fc:b5:b6:bb:70:30:1b:97:24:
91:6d:60:59:50:09:4e:01:1c:46:d0:94:09:c4:b6:
eb:72:7b:25:04:4e:b7:d4:3b:0f:53:b9:f3:10:26:
a2:b6:86:8e:96:72:e2:d2:a9:73:f4:0d:b1:ff:48:
59:c1:4e:fe:e9:db:4c:23:8c:fe:96:80:a4:e7:08:
aa:1a:9b:da:ab:59:b5:48:4f:5c:1c:3b:94:5a:3f:
19:c2:4b:15:5b:a0:5f:58:fd:31:ef:ac:08:b1:ca:
b6:a3:c1:13:83:dc:fa:4f:1d:37:fe:b3:bf:d8:ce:
07:d7:66:68:23:64:18:d3:dd:8f:d9:b1:9d:53:0e:
0c:f1:42:55:c0:5f:6c:d8:44:6c:4d:d5:c0:66:4c:
97:cb:ce:48:bd:d9:8e:af:e9:01:74:9d:1b:db:5c:
0f:a6:58:9f:4a:f9:0b:94:ae:59:4a:86:d4:17:5c:
49:a1:82:1f:62:4e:39:85:07:04:ea:fc:e1:81:da:
ee:a9:19:7c:27:62:7f:11:ed:7e:bf:77:da:96:ee:
3b:98:db:f4:6d:9a:b6:58:33:1e:1a:89:86:ac:7f:
bd:c9:e7:e8:23:9d:d8:d3:58:24:73:6b:ef:ab:58:
d0:62:62:8a:c8:90:13:15:02:1c:39:43:64:55:98:
7a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:08:67:3D:52:54:D1:A6:9C:47:82:6F:81:2A:62:7A:54:24:33:E6
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/19db8a97-3cb1-4f37-8e44-2a7ef101c6ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf4:28c0::/48
Signature Algorithm: sha256WithRSAEncryption
80:ba:25:fe:fe:2e:0c:8b:2c:2e:9a:9a:6e:f8:ea:4f:aa:66:
32:65:c4:81:6e:e3:5d:a9:11:a0:2a:91:e4:15:cd:a7:70:94:
a1:ac:53:80:5e:dd:1e:e5:66:cd:84:1b:19:79:66:a2:89:53:
7b:1f:19:59:37:2a:02:f1:cd:4c:17:3d:e3:c6:8b:eb:ce:27:
f7:34:af:bd:de:57:00:e0:e2:25:b1:3c:f1:51:dd:8a:c3:8d:
df:c9:ce:d7:db:d6:c2:54:0b:31:f5:94:9d:4a:88:3e:f5:d1:
7e:cd:ba:8f:88:34:44:ed:2e:15:aa:e2:f5:82:5e:13:37:3e:
98:8c:a5:c0:53:68:9d:f8:c3:b7:aa:54:cc:1e:97:f5:6f:81:
ef:f5:8a:85:65:d3:85:fa:da:b6:ef:f5:ee:1d:d0:38:a9:3d:
ad:a2:c1:81:a5:9a:ce:f9:c8:b3:7b:87:1c:04:b8:d8:d4:8f:
36:69:a5:50:74:23:e9:34:25:f9:4a:06:25:7d:fb:57:b1:a3:
5e:44:86:77:91:94:dc:92:63:43:bf:56:c8:d0:88:ae:cf:a7:
1c:a1:e0:ef:7d:96:06:ea:cc:c1:eb:9c:a4:51:ef:23:ac:22:
0c:19:4c:07:dc:c6:b0:57:73:1d:e1:23:12:77:0a:90:19:0b:
39:e7:74:a6
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUWtxcTCeCCfzDkOXwOC3yVv/8QB4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNDAwMDA1NloX
DTI1MDYxODIzNTk1OVowejFJMEcGA1UEBRNAM2I0YWZiNTE4ZTRmYTZmMzYwOGIz
OGY1YjJiOTg4MTJhODFlNGQyYTY5OTliMTM3Mzk0NGM5MzgyOGI5MzE3NTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GKktQT8tba7cDAblySRbWBZUAlO
ARxG0JQJxLbrcnslBE631DsPU7nzECaitoaOlnLi0qlz9A2x/0hZwU7+6dtMI4z+
loCk5wiqGpvaq1m1SE9cHDuUWj8ZwksVW6BfWP0x76wIscq2o8ETg9z6Tx03/rO/
2M4H12ZoI2QY092P2bGdUw4M8UJVwF9s2ERsTdXAZkyXy85IvdmOr+kBdJ0b21wP
plifSvkLlK5ZSobUF1xJoYIfYk45hQcE6vzhgdruqRl8J2J/Ee1+v3falu47mNv0
bZq2WDMeGomGrH+9yefoI53Y01gkc2vvq1jQYmKKyJATFQIcOUNkVZh6qwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFGcIZz1SVNGmnEeCb4EqYnpUJDPmMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzE5ZGI4YTk3LTNjYjEtNGYzNy04ZTQ0LTJhN2VmMTAxYzZlZS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAba9CjAMA0GCSqGSIb3DQEBCwUAA4IBAQCAuiX+/i4Miywumppu
+OpPqmYyZcSBbuNdqRGgKpHkFc2ncJShrFOAXt0e5WbNhBsZeWaiiVN7HxlZNyoC
8c1MFz3jxovrzif3NK+93lcA4OIlsTzxUd2Kw43fyc7X29bCVAsx9ZSdSog+9dF+
zbqPiDRE7S4VquL1gl4TNz6YjKXAU2id+MO3qlTMHpf1b4Hv9YqFZdOF+tq27/Xu
HdA4qT2tosGBpZrO+cize4ccBLjY1I82aaVQdCPpNCX5SgYlfftXsaNeRIZ3kZTc
kmNDv1bI0Iiuz6ccoeDvfZYG6szB65ykUe8jrCIMGUwH3MawV3Md4SMSdwqQGQs5
53Sm
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:29:01 2025 by rpki-client