Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/250aee42-8373-4f7b-a0b1-07e5f25f04f5.roa
File: 250aee42-8373-4f7b-a0b1-07e5f25f04f5.roa (raw, json)
Hash identifier: U9rVre6iy/beYkB9ukA5NUITXn5Y9uLYhfybfCRY3aM=
Subject key identifier: 58:A9:EA:19:5C:0C:95:6A:75:D2:9C:0F:7A:7E:6D:74:55:08:65:C7
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5A54D2C3662E232675C88649B64C7F42AEA749CE
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/250aee42-8373-4f7b-a0b1-07e5f25f04f5.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf2:8000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 17:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:54:d2:c3:66:2e:23:26:75:c8:86:49:b6:4c:7f:42:ae:a7:49:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ab:70:2c:95:b1:0f:9a:1d:e2:e7:2b:1a:1a:
62:2d:1a:a2:70:47:e2:2c:8f:39:07:b1:fe:99:f0:
5d:e5:28:ce:ba:1d:25:02:01:6e:fc:9d:e1:97:2c:
18:f2:cf:39:fe:de:90:91:70:f2:da:a6:3e:1d:5c:
f2:b8:f4:15:21:80:d5:5a:db:24:a6:e2:46:75:56:
d4:da:10:ef:fb:af:cf:15:f7:3d:61:7f:59:29:f3:
2f:e3:7b:37:16:cd:db:d4:58:6a:83:75:65:d6:c3:
b5:4c:21:e0:9b:f3:4b:29:86:25:2d:4f:0f:86:a2:
93:71:85:1a:aa:c2:af:6f:36:21:c5:e7:a6:54:6b:
9c:bc:ec:5d:83:c0:4e:a6:df:a9:69:7c:6b:f2:2c:
cf:95:b1:b0:01:b4:3a:d9:de:f1:2c:95:d7:48:1c:
7c:a0:86:1e:68:89:99:af:41:52:b3:04:ae:63:7c:
8e:d7:a7:7a:18:95:63:d4:96:16:27:78:5b:3a:75:
9d:d4:cf:da:1f:cc:b5:23:53:13:88:7e:00:5f:78:
db:62:c1:55:49:88:bf:2c:9e:b9:a4:fb:d1:2b:a0:
c2:50:f2:75:70:92:9d:0e:26:11:5f:41:c2:9c:89:
36:9e:a1:ab:cf:c3:db:3c:76:e0:44:07:5e:13:16:
ce:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A9:EA:19:5C:0C:95:6A:75:D2:9C:0F:7A:7E:6D:74:55:08:65:C7
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/250aee42-8373-4f7b-a0b1-07e5f25f04f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf2:8000::/40
Signature Algorithm: sha256WithRSAEncryption
20:d9:f1:8c:ba:25:3a:cb:99:e1:f7:31:e5:75:76:41:96:7e:
b8:35:b5:b8:0e:79:a0:e1:1c:7a:74:23:d0:c6:b1:c1:7a:e9:
f0:07:5d:9d:09:08:52:2a:19:ed:28:68:a2:23:7c:18:d5:4e:
50:1a:75:8a:3e:70:be:b9:62:ae:2a:81:46:c3:29:2c:b6:6f:
43:77:9b:fa:95:c4:9d:2b:80:8d:1e:51:76:2f:ad:c1:c7:3f:
9a:68:18:33:c7:6d:62:36:c4:00:e6:0f:8c:9f:9f:f8:4e:e9:
89:c3:b0:ab:5d:dd:38:81:50:93:67:36:5f:c8:11:71:06:85:
8b:1a:bb:72:f3:1b:2c:3c:d0:3a:81:b7:a3:06:99:80:47:55:
3c:dc:14:53:74:6d:9a:29:c7:fb:9b:21:c0:b2:f1:d8:66:9f:
d9:17:e2:ee:04:bf:d8:39:8c:5c:71:eb:29:c9:ef:49:54:ed:
a0:1c:f8:08:77:5b:6e:74:99:e9:93:ad:36:5b:52:36:ef:c4:
e4:25:63:09:80:b3:ba:81:15:90:1c:ce:39:45:2d:a7:dc:77:
b9:1f:f1:8b:bc:57:d2:e0:88:db:b0:8e:eb:fc:ce:9b:8f:6c:
55:f1:20:e3:18:d0:9d:7a:dd:38:0e:26:fe:10:1d:a7:cf:1f:
ca:dc:9b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:00:44 2025 by rpki-client