Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/35c40aab-f83d-41b2-947a-e29a7ed6818f.roa
File: 35c40aab-f83d-41b2-947a-e29a7ed6818f.roa (raw, json)
Hash identifier: KHnuhkZvhHvLq2wFqHfDLSeFtn7OR8IIUejtwIXHc+0=
Subject key identifier: DA:86:FF:8A:28:5D:E6:F7:A0:5B:1C:AC:E9:78:96:64:B0:5B:0A:53
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 14EE3F9D99518A7ECD677C6E9B7C37C9D52BA2AF
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/35c40aab-f83d-41b2-947a-e29a7ed6818f.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dab8::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 03 Feb 2025 19:51:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:ee:3f:9d:99:51:8a:7e:cd:67:7c:6e:9b:7c:37:c9:d5:2b:a2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:dd:18:83:f2:63:4d:6f:8c:55:89:47:4b:41:
74:f5:60:5a:f6:d0:35:6b:d7:58:7c:a5:65:4f:46:
34:78:c6:b1:6f:62:c7:8c:be:5e:25:da:6c:33:26:
55:03:07:1b:79:95:a4:06:91:38:13:31:3d:dc:95:
2c:25:e4:98:13:31:4e:3a:21:8a:6d:e0:c1:89:ec:
4c:bb:15:7b:18:22:b1:a7:9f:87:f0:92:5a:ac:88:
f6:99:6e:d2:b5:8e:6e:29:55:59:c8:c3:2b:42:91:
4b:47:dd:87:6d:41:54:b9:82:d8:ff:a2:bd:ff:1c:
8f:17:ee:e4:a3:2c:3b:39:82:ed:85:05:3b:36:c1:
4f:d2:7a:28:08:72:c3:4f:bf:0f:8c:21:c5:6a:de:
de:16:42:61:2b:51:2b:0d:f3:63:8f:30:98:ce:e0:
11:8a:e4:2a:7b:da:2b:40:50:a9:7a:8a:fe:ab:0c:
f4:66:13:8b:df:39:66:70:82:8d:05:7f:cf:9d:b7:
9a:4c:ca:f4:b2:cd:2e:2a:e3:a8:18:12:1d:6d:52:
3e:f7:5a:e6:91:f3:33:a5:bf:3d:b0:d0:4e:81:4c:
e3:7b:ea:de:ca:75:d9:b7:09:93:60:e2:05:4c:c4:
b1:76:fd:c6:69:e0:2d:dd:67:39:46:41:a1:50:7d:
0e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:86:FF:8A:28:5D:E6:F7:A0:5B:1C:AC:E9:78:96:64:B0:5B:0A:53
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/35c40aab-f83d-41b2-947a-e29a7ed6818f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dab8::/32
Signature Algorithm: sha256WithRSAEncryption
1e:06:c0:8b:3b:5d:01:72:3b:e6:59:2e:24:a7:42:38:a2:dc:
0e:2e:58:a5:4f:8c:fa:24:6e:dc:f4:c6:a8:19:4c:cb:a6:cf:
9a:bc:88:dd:3b:63:84:da:ac:fb:ac:37:ae:fb:d1:14:76:f2:
ec:84:21:c1:f3:cd:e1:52:f8:6b:5f:76:9f:98:bf:8b:86:e5:
e1:bb:4d:11:bd:5c:8e:2d:0b:ac:c0:98:90:90:9c:94:b5:da:
68:c9:52:d0:b5:1b:0f:6c:a5:bf:96:53:3f:3b:91:5c:a4:c7:
b0:e6:65:b4:72:94:1f:b7:80:19:8e:81:26:ab:5b:63:6f:5b:
f3:4b:63:a7:e0:3f:d8:86:b1:c7:6b:3b:42:eb:8a:47:6a:c8:
13:3b:79:cb:56:ea:1b:0a:8d:d6:bd:4c:72:bf:92:61:57:c2:
1a:2c:fc:aa:8f:08:8a:2d:43:ba:0b:6b:6f:a3:02:48:b4:5c:
3d:f7:14:3c:64:bd:59:86:b0:cf:75:52:89:02:23:3f:11:10:
63:58:cf:a8:b2:7c:f1:8f:7e:22:aa:15:ae:da:5c:ed:c8:0a:
31:4c:29:42:aa:4e:7d:bc:a3:66:6d:ef:8a:5d:7b:53:b7:7d:
42:92:19:53:ea:40:85:a7:e7:d0:7d:41:65:6d:01:a0:05:41:
ce:32:90:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 03:59:13 2025 by rpki-client