
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3bab15d0-0790-4926-9ad7-aeff0d400b50.roa
File: 3bab15d0-0790-4926-9ad7-aeff0d400b50.roa (raw, json)
Hash identifier: h1W5oLGagQV4KIIVc7p34ASDNsTod6R/k4R/SuX6ZZg=
Subject key identifier: 35:08:FF:D8:73:54:E4:65:58:EA:D8:42:A5:A0:A8:3E:C5:50:0C:62
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 3E074D1505613034CA44852B9C20E01B1ABC273B
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3bab15d0-0790-4926-9ad7-aeff0d400b50.roa
Signing time: Wed 30 Jul 2025 00:50:19 +0000
ROA not before: Wed 30 Jul 2025 00:50:19 +0000
ROA not after: Wed 03 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da69:b000::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 30 Jul 2025 17:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:07:4d:15:05:61:30:34:ca:44:85:2b:9c:20:e0:1b:1a:bc:27:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jul 30 00:50:19 2025 GMT
Not After : Sep 3 23:59:59 2025 GMT
Subject: serialNumber=6aae6c251deeca77d7a9272d26b02b6b95cbc4135a9303ad073d6d9eb09246f0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:8c:ab:62:0c:bb:f6:9e:2f:56:25:c8:39:
80:76:71:4d:6c:8e:83:da:12:1a:1f:38:c1:a4:7f:
60:d5:3c:fa:63:c3:e0:2c:c9:6a:65:ff:c2:8c:85:
d5:40:0c:f4:0d:ad:06:c3:d9:c0:4c:32:b9:64:b2:
ad:42:9b:85:8a:69:6d:e0:35:e2:33:60:c6:ca:23:
b3:28:ab:d0:9d:c5:81:52:d1:a7:f6:87:9b:37:88:
4e:0e:92:23:6b:da:09:a4:d1:4e:87:9c:d2:78:c2:
92:ab:0e:bf:0b:9f:c6:da:87:96:58:2a:9b:d6:d2:
a6:ad:b5:9f:13:a7:60:0a:83:2d:00:54:8c:c5:53:
ef:80:e9:fd:28:05:3a:53:23:dc:47:16:d7:9a:f8:
54:91:36:26:68:fc:a2:ff:3b:00:74:42:f6:1a:46:
ae:ff:98:65:c0:84:f2:71:4f:a5:59:84:b1:a5:7a:
13:89:0c:66:89:a6:ef:e4:d8:db:31:93:19:60:71:
5d:f5:28:65:14:d5:8b:5c:8e:49:89:58:f3:99:ed:
0a:96:b1:27:44:6e:62:06:4b:b7:5e:49:37:ca:d5:
52:1c:8d:85:97:77:57:58:af:e1:8e:00:c8:7d:69:
cb:f4:2a:0b:bc:62:1d:1b:42:e8:e0:e0:b4:13:2c:
6b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:08:FF:D8:73:54:E4:65:58:EA:D8:42:A5:A0:A8:3E:C5:50:0C:62
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3bab15d0-0790-4926-9ad7-aeff0d400b50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da69:b000::/40
Signature Algorithm: sha256WithRSAEncryption
48:c3:75:95:5d:38:2c:e4:7c:52:ab:99:9c:09:f6:19:8f:64:
f4:56:8f:be:b6:3d:ab:e0:34:1a:e0:bc:9e:ab:fb:56:5f:55:
ba:6f:d1:fd:45:5d:b6:dc:44:65:fa:b4:7c:e6:ab:25:9a:30:
95:db:c3:3f:fd:49:92:c9:3a:5d:0a:9b:e7:a3:54:91:e7:fb:
31:4a:2b:d9:26:64:3f:0a:e8:f2:f3:ab:a2:31:d3:2c:e0:28:
61:ff:8b:ae:cb:38:5d:a5:ff:e9:52:a1:0e:e9:fb:e0:3b:3d:
de:bb:5b:f6:ca:32:f3:db:20:13:d8:52:d1:33:d9:79:0e:73:
6d:b5:66:54:78:03:3f:83:1e:ac:03:09:5d:ea:66:7b:a5:35:
fc:36:a1:36:fa:fd:5a:ad:e6:e8:45:66:fc:95:02:1e:ca:af:
c2:a3:9f:85:86:9c:1d:e4:cf:8b:4b:98:47:97:d6:fd:20:f6:
a6:ad:7c:86:1c:2d:36:f7:65:2d:6e:2a:bc:df:a8:a1:e6:72:
a3:c4:95:46:ac:e8:53:14:bd:e9:94:c6:f5:19:60:df:48:4b:
5d:24:f3:12:0e:c4:76:c2:1a:ca:3f:cc:81:bf:b8:6a:5b:28:
01:74:72:00:3d:77:7f:26:82:ab:8e:51:e9:f1:1e:41:38:c5:
0c:22:c0:3e
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUPgdNFQVhMDTKRIUrnCDgGxq8JzswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDczMDAwNTAxOVoX
DTI1MDkwMzIzNTk1OVowejFJMEcGA1UEBRNANmFhZTZjMjUxZGVlY2E3N2Q3YTky
NzJkMjZiMDJiNmI5NWNiYzQxMzVhOTMwM2FkMDczZDZkOWViMDkyNDZmMDEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI6Mq2IMu/aeL1YlyDmAdnFNbI6D
2hIaHzjBpH9g1Tz6Y8PgLMlqZf/CjIXVQAz0Da0Gw9nATDK5ZLKtQpuFimlt4DXi
M2DGyiOzKKvQncWBUtGn9oebN4hODpIja9oJpNFOh5zSeMKSqw6/C5/G2oeWWCqb
1tKmrbWfE6dgCoMtAFSMxVPvgOn9KAU6UyPcRxbXmvhUkTYmaPyi/zsAdEL2Gkau
/5hlwITycU+lWYSxpXoTiQxmiabv5NjbMZMZYHFd9ShlFNWLXI5JiVjzme0KlrEn
RG5iBku3Xkk3ytVSHI2Fl3dXWK/hjgDIfWnL9CoLvGIdG0Lo4OC0EyxrnwIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFDUI/9hzVORlWOrYQqWgqD7FUAxiMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzNiYWIxNWQwLTA3OTAtNDkyNi05YWQ3LWFlZmYwZDQwMGI1MC5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAbaabAwDQYJKoZIhvcNAQELBQADggEBAEjDdZVdOCzkfFKrmZwJ
9hmPZPRWj762PavgNBrgvJ6r+1ZfVbpv0f1FXbbcRGX6tHzmqyWaMJXbwz/9SZLJ
Ol0Km+ejVJHn+zFKK9kmZD8K6PLzq6Ix0yzgKGH/i67LOF2l/+lSoQ7p++A7Pd67
W/bKMvPbIBPYUtEz2XkOc221ZlR4Az+DHqwDCV3qZnulNfw2oTb6/Vqt5uhFZvyV
Ah7Kr8Kjn4WGnB3kz4tLmEeX1v0g9qatfIYcLTb3ZS1uKrzfqKHmcqPElUas6FMU
vemUxvUZYN9IS10k8xIOxHbCGso/zIG/uGpbKAF0cgA9d38mgquOUenxHkE4xQwi
wD4=
-----END CERTIFICATE-----
Generated at Thu Jul 31 01:03:59 2025 by rpki-client