Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32ec7e70-fe89-4ce7-af86-a7f5b19f50c3.roa
File: 32ec7e70-fe89-4ce7-af86-a7f5b19f50c3.roa (raw, json)
Hash identifier: T3K1193cSBIoCDltN7zknSLa/wleNHWXz8a86P/tpSw=
Subject key identifier: 47:BE:13:A9:E6:E8:8E:05:25:A6:C4:B0:79:EF:1A:7F:F1:5F:F8:25
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 319CF3E11CAA9C0DC645CEB56BAEDBA503051F08
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32ec7e70-fe89-4ce7-af86-a7f5b19f50c3.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dafb:c000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 18:50:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:9c:f3:e1:1c:aa:9c:0d:c6:45:ce:b5:6b:ae:db:a5:03:05:1f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a0:45:e6:49:a8:34:a4:0a:84:cb:b8:16:bf:
62:b9:ff:ec:c9:95:d3:de:21:e3:94:fe:20:bd:49:
23:99:15:46:63:a1:f4:3c:b4:99:21:ae:ad:b4:1f:
72:b7:0e:97:2c:6d:2a:72:eb:53:d2:11:fe:8a:71:
7b:8f:c8:72:b9:6d:62:fe:de:3d:ce:50:15:41:be:
15:f3:f5:32:e2:22:57:12:57:9e:c0:42:b8:2c:a7:
03:dc:7e:21:ee:9d:af:60:2a:cc:3e:3c:8b:ae:64:
c8:86:f2:52:49:bf:14:18:9c:08:a9:7a:8a:1b:ce:
0a:6c:ed:83:8e:0f:64:8e:1b:d3:70:39:45:f8:95:
30:a9:81:4b:0a:2c:d7:c4:c3:0d:9d:3a:72:2c:9c:
60:99:9a:f9:94:1d:03:56:cb:d3:45:6f:fe:db:cf:
1e:9d:36:ef:b5:fc:a9:c1:76:89:02:bc:05:25:f6:
8e:32:52:76:b3:28:82:63:1a:ba:e8:14:e3:c9:8a:
9b:49:c4:d9:b6:54:d5:c1:d1:fd:6d:7c:8b:91:86:
b5:d6:13:ee:e7:28:51:d7:94:26:34:42:fd:d9:65:
3a:a3:9e:7b:8b:c1:80:68:d6:a4:41:1d:2d:fb:22:
90:af:6d:30:e7:35:51:c7:80:41:5b:69:bd:b2:88:
37:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BE:13:A9:E6:E8:8E:05:25:A6:C4:B0:79:EF:1A:7F:F1:5F:F8:25
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32ec7e70-fe89-4ce7-af86-a7f5b19f50c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dafb:c000::/40
Signature Algorithm: sha256WithRSAEncryption
26:60:14:e6:e3:a0:12:04:64:b1:13:1e:7c:73:ed:9e:93:df:
36:fc:57:41:bd:16:e3:fa:02:21:ed:f2:49:a7:de:47:7b:b2:
f2:9a:0a:4e:99:31:18:f5:bb:61:c7:bc:57:e0:39:8e:1c:45:
f1:e9:05:d9:e8:60:d9:18:e6:5f:56:36:b6:93:73:08:17:b1:
87:81:67:64:7a:09:cd:01:ec:c8:c7:1e:28:fe:0e:58:01:64:
b4:32:fb:a7:2b:5d:03:db:d1:34:21:30:40:8d:ec:78:52:86:
a3:27:aa:3d:33:41:17:f7:59:6d:49:2a:80:63:58:c2:31:b0:
42:8f:55:0e:ca:d8:33:f7:7e:e3:db:d7:3b:61:3f:7a:1c:f6:
ad:6a:e0:4f:a4:3a:7c:d3:5a:f4:b1:02:1d:6f:78:0c:4b:35:
55:27:b4:87:17:3c:14:2d:1c:82:a3:48:07:fe:83:b3:23:f1:
24:04:9c:c6:b1:0b:05:a7:3a:ff:68:a6:29:28:3d:1f:87:b7:
59:d8:a4:a8:4e:b3:e2:46:a5:c4:0d:c5:33:84:ef:aa:45:d2:
6a:b4:04:0c:00:81:c1:90:c7:e7:35:3d:08:65:9b:fd:c9:31:
8b:13:e1:c8:3f:54:43:f0:b8:70:bf:84:51:ff:a6:40:68:bb:
95:a1:dc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:09:38 2025 by rpki-client