Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2c1be7b5-102b-44bf-a4b3-b4ec5d03bbf5.roa
File: 2c1be7b5-102b-44bf-a4b3-b4ec5d03bbf5.roa (raw, json)
Hash identifier: YDlSo7jAdZEFaEfBk2Lfc8A/mIwLEfvAdKob5R5wHno=
Subject key identifier: 8B:CA:98:07:FC:5E:1F:E5:29:44:18:BE:6C:71:E9:EA:7F:F5:DB:3B
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 7F104102755ED79FA0858D236C4EEEED66DDE613
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2c1be7b5-102b-44bf-a4b3-b4ec5d03bbf5.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf7:8000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 17:50:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:10:41:02:75:5e:d7:9f:a0:85:8d:23:6c:4e:ee:ed:66:dd:e6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fc:a2:39:76:fa:2e:8b:f6:ef:5a:43:80:63:
24:8b:c3:a3:31:4e:b8:f7:6f:bb:03:62:7f:c7:8f:
73:47:64:05:bf:b6:3e:06:63:8e:8f:4a:c3:ca:a9:
f9:08:20:51:b9:c2:bc:76:c6:03:e6:a8:32:39:5d:
fe:2c:31:af:7f:1e:c7:c3:51:00:42:fe:d8:a5:91:
48:d6:13:38:14:63:69:0d:ec:24:e8:72:34:5e:41:
11:ec:b4:3e:25:01:4d:c9:fc:ac:dd:69:25:df:77:
d3:61:61:f3:32:44:26:a1:1d:24:02:b5:c0:8d:70:
a9:53:31:14:4f:cc:19:b7:56:af:c9:1c:7a:3b:5a:
90:9c:2f:c9:4f:39:30:f4:a1:37:50:7b:42:fc:f1:
9f:4a:87:2e:48:69:44:db:bd:5d:4e:e0:29:d0:5b:
c4:fd:f1:2e:fc:5b:2d:96:06:01:d3:b7:97:21:d0:
63:8c:f2:f9:a8:76:f8:53:c9:54:b0:31:fe:2a:7e:
a1:46:f9:50:8c:6d:08:29:2f:43:61:76:9f:0d:a4:
2c:04:71:35:43:5a:f8:da:3d:10:39:06:44:1e:d7:
70:f3:c3:42:9f:83:40:59:4e:4c:81:78:e4:4a:26:
53:74:c5:5a:66:8e:62:7e:92:12:56:f4:ba:28:0d:
8b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CA:98:07:FC:5E:1F:E5:29:44:18:BE:6C:71:E9:EA:7F:F5:DB:3B
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2c1be7b5-102b-44bf-a4b3-b4ec5d03bbf5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf7:8000::/40
Signature Algorithm: sha256WithRSAEncryption
4a:06:b9:b5:e9:0c:da:fc:74:b1:59:52:e1:17:29:fb:96:e3:
be:c2:a2:ab:cc:d6:fe:d7:d3:9f:36:ae:32:a3:e4:e2:a6:86:
93:06:e7:d0:6d:39:22:0e:45:d8:33:0f:80:78:77:9f:d7:50:
71:19:fe:98:b2:71:c6:8d:a8:70:87:a0:f1:7d:20:da:b6:65:
7b:60:87:ef:65:74:f5:db:35:6b:4a:69:4b:b8:3e:40:4f:b4:
c6:5b:64:df:69:79:fd:44:24:0f:98:14:1d:86:a9:6c:50:fc:
00:95:6b:d6:5e:6f:e5:92:ed:2a:00:ae:e2:65:b9:f2:1e:48:
42:9b:ba:fb:39:ab:37:2f:ed:e7:44:ba:75:43:d6:a1:e0:b4:
93:71:4b:9f:e7:db:4c:76:e4:af:ca:f7:a0:15:3a:80:59:83:
4f:56:c2:c1:f1:34:77:9b:da:0d:13:9f:ba:46:98:16:65:f9:
c6:19:40:a0:2d:a5:37:67:d8:5c:10:f8:5a:9b:c1:a0:54:fe:
b6:35:ad:00:71:44:a2:fa:1c:d9:2f:7b:ba:14:1a:02:e4:7d:
8e:eb:0e:83:2a:50:49:a3:1d:3d:6e:e3:cd:71:7f:31:d8:a3:
82:d5:3b:18:74:83:eb:4a:41:d5:ea:88:a0:62:f1:fa:0d:dd:
1b:9a:97:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:01:30 2025 by rpki-client