Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a886a6c-2239-4f2b-b527-519cf5a4bab5.roa
File: 2a886a6c-2239-4f2b-b527-519cf5a4bab5.roa (raw, json)
Hash identifier: 64q+TLY1Fhe3AOaa8d8h+narCmJAvn6PM9l/S9U9KAo=
Subject key identifier: 51:7A:A7:82:BA:EE:A9:8E:EF:2C:A3:25:CA:70:53:F0:75:6E:70:D7
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 74C5AFE138A621DFD33D39BFB0CDB94301937B52
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a886a6c-2239-4f2b-b527-519cf5a4bab5.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da69:4000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 18:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:c5:af:e1:38:a6:21:df:d3:3d:39:bf:b0:cd:b9:43:01:93:7b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2b:d7:e3:fc:a8:77:35:c1:c9:a6:9f:93:8f:
95:29:3b:32:d7:9c:12:38:d2:9c:ea:4e:b8:b6:64:
79:a7:10:19:39:f8:41:b9:6b:a0:c0:a7:30:c4:3d:
d1:45:16:4d:3d:f2:48:d9:0c:22:ab:f1:5d:fb:21:
a3:b6:73:8a:73:2f:ed:dc:fc:84:3d:e1:cf:1e:88:
af:88:9b:cb:19:cc:0c:20:80:a6:94:8b:cd:24:96:
dd:11:2c:54:6a:ce:f1:32:8b:fc:54:4a:6e:40:b2:
8f:b9:6f:fc:5d:f3:7a:82:8b:b7:0d:8a:ef:73:d4:
37:d3:fd:31:40:d8:ef:50:1a:5c:83:83:0a:7f:ca:
77:ec:cb:a5:97:de:71:91:bd:72:1a:ed:f6:a2:e0:
90:39:a3:14:cc:89:af:cd:af:12:f0:3a:0f:52:28:
7e:0d:a5:36:cc:e2:71:7f:c9:a0:99:12:67:e0:b1:
f1:29:d8:e8:d6:7e:2a:55:b1:21:4b:c5:89:12:3f:
da:20:b5:57:86:77:04:eb:eb:79:61:27:2b:54:79:
41:72:f8:0c:73:23:7b:27:08:6e:14:ca:23:d2:91:
6a:d9:8c:2a:76:e3:8e:27:1d:d5:54:8f:28:29:48:
d3:16:86:6c:ec:65:be:90:fe:5a:d9:f6:e3:33:38:
62:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7A:A7:82:BA:EE:A9:8E:EF:2C:A3:25:CA:70:53:F0:75:6E:70:D7
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a886a6c-2239-4f2b-b527-519cf5a4bab5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da69:4000::/40
Signature Algorithm: sha256WithRSAEncryption
07:8b:53:33:9b:e4:5e:1d:0e:0c:65:04:6a:7b:6b:5f:a2:ec:
db:86:fa:d1:af:91:41:01:55:82:b5:c7:a1:18:34:b3:24:55:
0c:f2:9b:b2:e1:26:4b:64:5c:27:72:e1:2c:bc:25:4c:af:d0:
64:ed:72:13:f8:11:ad:de:5b:9b:96:4a:3d:25:b3:bb:09:07:
05:d7:34:a8:a3:64:f0:d4:dc:66:58:f9:31:3f:df:b8:8c:68:
06:87:20:56:d0:9a:01:31:43:b5:75:b4:b7:b1:44:00:3c:0f:
4f:58:44:fb:0a:ff:b9:c2:b6:ab:23:82:67:74:9c:20:be:f8:
a6:4a:71:e7:28:02:8d:e8:94:89:a7:33:84:25:3f:bb:4c:97:
57:12:6e:e2:ca:5b:a7:69:6f:7b:4a:3b:79:e9:d0:66:df:a0:
a0:89:b5:74:69:f2:0f:1d:1c:f5:74:f1:ed:28:1d:2c:23:b7:
04:16:67:f5:bf:b6:26:c6:a0:18:14:86:0c:c8:b9:ec:cb:0c:
dc:63:61:dd:03:21:e5:13:99:81:91:9f:be:7e:a5:ca:a7:d2:
b6:60:f6:7d:4e:46:3b:fb:eb:52:a3:c7:e8:e9:06:4b:67:ce:
d8:0e:b9:51:43:7a:d2:e6:03:3c:ec:89:44:5a:ad:a4:b8:d0:
80:32:61:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 03:54:21 2025 by rpki-client