Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3070e2cc-7e12-41c7-a980-989a4b17aa7f.roa
File: 3070e2cc-7e12-41c7-a980-989a4b17aa7f.roa (raw, json)
Hash identifier: rUO2JgIO4vQ/sFyslitQksor/0xBcMy3PRL+XD7IIPM=
Subject key identifier: CF:9B:C8:32:53:65:BD:FD:74:4C:F4:1E:70:5D:53:81:DB:87:05:24
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 0A9A5699286C1981F46D283D6C34BE762FC3DE3F
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3070e2cc-7e12-41c7-a980-989a4b17aa7f.roa
Signing time: Wed 30 Jul 2025 00:20:56 +0000
ROA not before: Wed 30 Jul 2025 00:20:56 +0000
ROA not after: Wed 03 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf7:a0c0::/46 maxlen: 48
Validation: Failed, certificate revoked on Wed 30 Jul 2025 18:24:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:9a:56:99:28:6c:19:81:f4:6d:28:3d:6c:34:be:76:2f:c3:de:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jul 30 00:20:56 2025 GMT
Not After : Sep 3 23:59:59 2025 GMT
Subject: serialNumber=7eff5a45db8165e8f23aa66cb81378ebf4eb9c623b428de22605cd1fa5882ecb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c9:dc:e7:70:1d:e7:a8:dd:f0:89:18:6b:45:
29:b3:ef:80:45:92:c5:e3:f4:a6:32:9a:b7:6d:63:
2c:70:d7:e8:ef:a9:e8:45:9a:f2:fa:5a:fe:b9:50:
2b:b7:d2:dc:63:28:c0:5e:8f:51:fd:3b:aa:08:2d:
94:76:23:a2:fb:64:7f:cd:bc:67:c5:33:75:0c:8f:
84:0a:93:3e:56:eb:11:60:42:84:fc:82:2e:70:f0:
b3:ac:a8:47:c2:32:fe:c5:7f:ab:98:34:8b:d5:0f:
28:0a:ae:47:d9:cf:bb:46:ce:74:09:38:a0:e4:92:
64:72:c4:11:5c:d3:57:64:49:2a:5b:13:09:fc:21:
cd:5f:89:24:2f:c6:36:91:07:d5:54:c2:10:00:d0:
b1:3a:8d:9c:91:4d:31:ce:4a:16:2f:27:ba:3f:b3:
23:e7:af:78:39:42:e7:a0:bb:43:7c:9b:f6:33:08:
a6:4b:6d:03:31:51:69:98:78:8c:d3:79:bb:82:95:
d2:71:26:28:d6:14:cf:d7:ad:d3:90:d3:c4:15:a8:
a9:14:be:ba:07:ec:be:15:d3:0d:02:83:4b:df:3e:
2a:94:78:84:2c:78:3d:1c:50:4f:6b:50:33:b9:e1:
12:05:48:6f:2a:eb:42:21:42:00:40:87:59:48:59:
4e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9B:C8:32:53:65:BD:FD:74:4C:F4:1E:70:5D:53:81:DB:87:05:24
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3070e2cc-7e12-41c7-a980-989a4b17aa7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf7:a0c0::/46
Signature Algorithm: sha256WithRSAEncryption
54:eb:1a:68:24:bc:1e:f0:49:24:b5:f0:12:3e:db:94:29:d9:
a6:57:23:c7:cf:be:43:09:56:a3:3d:78:6e:c0:3c:36:d0:74:
fe:a9:73:91:85:17:08:46:18:cd:28:f0:6b:f7:5c:65:3e:f2:
24:67:96:cf:96:50:fc:08:fb:a2:2b:a5:e8:88:c8:e0:19:c6:
a6:04:2f:50:0f:70:62:69:18:3a:7b:59:47:c3:c1:5f:be:d9:
09:0d:0a:21:4d:1e:79:42:01:74:a6:05:eb:86:56:a7:6b:5f:
63:61:f8:9e:94:70:b2:97:ac:b5:6d:43:a5:1f:54:85:f1:a8:
31:98:03:bd:25:15:f3:bc:03:55:0b:ca:12:92:f4:61:61:a6:
bb:86:7e:f9:3d:be:5c:fd:ad:e3:e3:c9:03:1c:cb:27:1e:45:
25:df:f8:c1:e9:20:d2:70:a2:46:8b:70:81:bc:56:02:db:96:
46:61:bc:44:91:2d:f6:9b:d8:35:1b:92:3c:90:57:70:52:8d:
f8:cf:7d:9e:dc:bb:fe:71:0c:c2:af:6b:5b:22:34:fd:56:67:
56:52:38:34:21:75:7e:7c:f6:cc:30:1b:65:00:24:24:73:db:
e0:e8:40:a2:c0:ac:13:36:18:b7:66:b6:25:bb:79:98:4c:d6:
ec:1f:96:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 00:58:47 2025 by rpki-client