Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3be470fa-f903-4416-9c0c-3ad2cb584a8d.roa
File: 3be470fa-f903-4416-9c0c-3ad2cb584a8d.roa (raw, json)
Hash identifier: 3KwpSi48khGAQUy1azS+6TQWtyWNCIpQoOFI8CUUfro=
Subject key identifier: D7:A9:73:7D:2B:FA:16:AA:EA:C3:35:D9:7E:BC:83:BC:15:8C:4E:E8
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 4F34140B3072B16DA77D0FA9DDAAC1604170C131
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3be470fa-f903-4416-9c0c-3ad2cb584a8d.roa
Signing time: Tue 29 Jul 2025 00:50:03 +0000
ROA not before: Tue 29 Jul 2025 00:50:03 +0000
ROA not after: Tue 02 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf7:8080::/46 maxlen: 48
Validation: Failed, certificate revoked on Wed 30 Jul 2025 18:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:34:14:0b:30:72:b1:6d:a7:7d:0f:a9:dd:aa:c1:60:41:70:c1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jul 29 00:50:03 2025 GMT
Not After : Sep 2 23:59:59 2025 GMT
Subject: serialNumber=40bb58ce214db04ac09ae340878422c900fa45392de312643904d194772ff084, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:52:0c:e1:76:a7:0b:d5:9e:73:b4:7d:c7:0f:
13:13:a7:65:8a:57:78:29:19:11:19:7a:21:0b:bf:
ff:94:3a:51:23:39:c4:7e:69:23:b3:31:2a:96:5f:
cf:96:fa:84:c7:1d:55:f2:4d:d0:db:76:18:6b:96:
42:7c:98:6c:24:48:5d:cb:63:7c:5c:f9:83:67:2b:
c4:26:8e:d6:2a:1c:94:3f:29:1d:2d:13:8b:e2:6e:
8b:ce:89:52:d5:fb:95:26:8d:45:64:23:f4:ca:76:
51:5b:aa:ad:2b:f6:f9:72:b1:8a:42:cc:6e:2e:72:
e9:02:0b:a2:7c:ed:2b:f7:9c:71:c6:26:8b:62:84:
5c:2c:25:74:f4:11:2c:70:eb:6d:e7:30:8a:d0:42:
6f:86:7b:e9:ea:cd:f8:d5:02:1a:6a:ca:29:35:c5:
83:98:1f:40:cd:5e:c9:64:42:a4:77:09:75:3c:1b:
36:9f:77:46:3c:6d:8b:81:25:2c:32:b6:bf:69:2b:
88:f1:ba:f5:83:27:ca:ea:33:42:d2:25:59:08:41:
ed:0a:9c:3a:69:69:7b:2e:9e:6a:f0:c5:9a:e8:1b:
2a:82:62:96:7f:7d:e4:5e:9f:ca:06:92:4a:a5:20:
31:14:13:27:ee:e6:e6:02:03:a6:10:34:27:13:a6:
60:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A9:73:7D:2B:FA:16:AA:EA:C3:35:D9:7E:BC:83:BC:15:8C:4E:E8
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3be470fa-f903-4416-9c0c-3ad2cb584a8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf7:8080::/46
Signature Algorithm: sha256WithRSAEncryption
09:2a:5b:b4:e9:b3:7d:42:d0:4a:63:d9:ff:bd:cd:9c:19:1c:
b7:48:21:f7:09:b4:84:2d:64:bf:e1:74:47:61:58:f7:ab:b0:
3d:06:6d:ca:da:9a:07:84:d6:d0:d4:ad:6c:c4:fe:55:0e:ee:
17:dc:16:8a:01:ed:43:7d:f7:c7:77:85:96:a4:d4:d4:42:57:
98:cb:94:c2:4a:7f:80:4d:38:83:51:c1:43:76:8a:15:ea:70:
9f:5b:7f:f6:16:a8:2f:0e:36:30:91:44:e4:56:5e:ad:2a:dc:
9a:7a:0a:ea:2c:99:6b:18:7a:6d:06:83:53:7b:95:9e:0d:c9:
79:35:66:9b:a2:41:17:19:1b:07:23:dd:ab:f2:e7:bb:ff:c8:
46:e9:63:ce:bc:7d:b1:80:1f:9f:2b:92:75:f1:bd:da:14:ea:
f3:01:10:24:08:86:9e:a9:a3:ed:f8:a4:82:05:c9:41:86:1e:
6a:8e:5c:5d:75:0f:17:51:eb:d0:2d:ef:e8:31:0d:74:4b:00:
b9:04:b1:d3:5a:7f:77:b5:4a:2f:2b:46:21:77:0b:21:94:46:
e1:ed:88:5c:f1:27:52:69:4a:80:4b:9b:ca:6c:31:eb:87:96:
b4:c9:2d:88:27:2f:c5:28:8a:3e:35:97:6e:aa:e6:b0:b3:ba:
5d:f9:ea:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 00:58:25 2025 by rpki-client