Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3ae9323a-2f10-49ff-b208-486ce6ee50dd.roa
File: 3ae9323a-2f10-49ff-b208-486ce6ee50dd.roa (raw, json)
Hash identifier: 9FhDPuqNCcqhnVEoqdltsWmq8h5LL3kOWaTQpFDwfis=
Subject key identifier: 45:BB:1B:22:F7:62:7F:1E:18:B5:BD:64:CD:49:14:B6:E0:8A:14:24
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5623D8C3E234A096882D6FADEBCE1567CC3577C0
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3ae9323a-2f10-49ff-b208-486ce6ee50dd.roa
Signing time: Wed 30 Jul 2025 00:30:10 +0000
ROA not before: Wed 30 Jul 2025 00:30:10 +0000
ROA not after: Wed 03 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dafb:1000::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 30 Jul 2025 17:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:23:d8:c3:e2:34:a0:96:88:2d:6f:ad:eb:ce:15:67:cc:35:77:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jul 30 00:30:10 2025 GMT
Not After : Sep 3 23:59:59 2025 GMT
Subject: serialNumber=0ec503cc5da7cf87af95a0acac58934103f11695b239df4486c435c56647aa10, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d7:a4:76:69:b9:d1:08:e9:f0:97:df:0e:3d:
f6:88:c8:c8:a0:a9:cf:c2:50:34:d9:50:81:07:90:
39:b0:8b:7d:ba:14:bf:8b:5d:39:62:c7:63:2d:87:
09:e1:f9:98:f0:49:5f:67:37:cb:14:89:38:a3:26:
72:ee:42:04:88:2a:83:fe:6f:91:7a:ce:89:aa:65:
18:0c:23:78:f6:4f:3b:52:38:38:bf:55:4e:e2:7e:
00:89:b3:fb:b3:99:7c:e7:48:bd:6d:81:38:b6:85:
a3:1f:fc:b6:79:29:e9:7a:c6:e1:dd:15:e9:ef:b7:
ee:03:84:76:af:cb:76:a1:6d:89:f0:3a:e5:a7:a4:
9e:9b:58:dc:42:ca:15:85:b9:c2:b5:bd:50:ad:a9:
e4:9a:0e:b1:fc:55:8c:31:99:72:10:3a:56:3a:c4:
91:8c:3b:48:ce:26:b4:c8:01:2a:e5:d5:25:41:a6:
e1:91:b0:10:78:49:7a:23:af:d1:1e:7d:23:93:26:
f6:a4:a8:8d:77:71:1f:8d:3d:77:87:bb:52:17:ef:
46:90:6f:93:ae:45:45:ff:9b:eb:c5:92:83:28:61:
0e:b5:f2:37:9d:62:dc:56:f4:4e:44:ca:53:ff:e5:
2d:3d:6c:5f:b2:96:15:bc:7b:e1:8e:47:4c:6a:2c:
ff:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BB:1B:22:F7:62:7F:1E:18:B5:BD:64:CD:49:14:B6:E0:8A:14:24
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3ae9323a-2f10-49ff-b208-486ce6ee50dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dafb:1000::/40
Signature Algorithm: sha256WithRSAEncryption
4e:53:d4:d3:92:7f:bc:59:f3:9d:2f:fe:ce:b4:4b:0b:22:8b:
7c:bf:c9:95:0f:a4:16:44:fd:c3:22:ca:f3:0a:1e:fe:51:b0:
f2:b5:b6:05:35:4f:2b:9a:26:b9:ce:88:2e:15:fe:71:2e:ae:
74:a4:6b:b9:0b:cb:55:e2:59:9e:ee:ce:7e:40:c7:21:3c:2b:
09:43:98:1d:c9:5e:d9:ab:ea:2b:0b:d9:13:05:22:87:19:c8:
e9:09:5e:ac:4d:aa:4d:fe:28:7a:a5:24:89:50:5b:99:f8:e0:
dd:5d:a2:78:5d:36:29:fd:d1:52:f6:b0:fb:57:c6:ac:3f:15:
84:c7:24:04:03:0a:2e:24:34:06:09:3b:0a:5c:a3:07:f9:d5:
17:5f:68:b5:5c:30:13:8c:80:00:62:e0:d3:16:df:d9:f7:64:
51:2e:c5:94:0d:6e:03:ab:cc:02:35:d7:48:3e:26:ce:e9:b6:
a6:ae:c8:36:78:43:61:4c:03:8a:cb:98:45:d2:39:9c:63:d3:
1e:e2:a7:24:dc:b2:fc:d2:f7:f7:8a:85:af:c3:65:6d:f9:9e:
2b:a1:63:6b:1c:b1:3a:82:84:a7:8a:3c:7f:59:f1:0c:90:8d:
23:60:2e:eb:10:9e:bb:77:d9:5d:cc:78:1b:45:50:8a:72:35:
6b:ca:c9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 01:02:17 2025 by rpki-client