Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3c2fd284-a71c-43cc-a0ab-a26c0b64f475.roa
File: 3c2fd284-a71c-43cc-a0ab-a26c0b64f475.roa (raw, json)
Hash identifier: PlS+zbhs7Txqnlm6GwbeaFItI4ecjO5DR6HodPoZzOM=
Subject key identifier: E6:82:77:43:B7:39:33:C7:4F:AC:E9:B8:14:E0:3B:8F:85:42:EE:07
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 342715A22AEFE41C030EF4754C377FDC6B53B72A
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3c2fd284-a71c-43cc-a0ab-a26c0b64f475.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daff:8000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 16:51:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:27:15:a2:2a:ef:e4:1c:03:0e:f4:75:4c:37:7f:dc:6b:53:b7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:66:a8:eb:6d:69:95:4e:2e:25:d6:c8:e5:ed:
f1:96:ef:c9:f3:df:64:76:ab:44:87:62:ba:c2:28:
d5:6e:fe:79:b5:d9:38:bd:a8:17:04:d3:a8:77:47:
4f:ef:e4:1b:2a:be:70:9b:c2:ab:29:87:44:3f:e9:
fc:4d:a8:79:84:f9:26:80:8d:39:1a:31:fe:97:ca:
27:31:a1:4b:a6:75:d0:78:a7:25:51:cd:e8:30:c3:
dd:65:e2:e9:ef:5d:88:97:c9:fc:97:c6:2b:cb:ca:
b1:ac:39:5b:40:bd:54:23:c7:71:7d:34:63:e0:be:
db:b5:d8:fd:b6:f2:e3:49:67:19:74:7b:b7:43:48:
19:ba:87:22:55:fd:9c:04:ce:0c:c6:23:41:bb:d5:
07:e7:5f:19:cb:a9:c6:cb:ed:c2:63:8f:4f:5c:9e:
6b:99:d3:87:8b:82:49:e9:24:ff:61:be:c1:af:17:
ee:85:ff:c4:b3:32:54:4e:c6:93:6d:48:61:c2:18:
57:33:4f:31:fb:5a:e9:b0:a1:7e:b1:ed:cb:60:43:
41:9a:a4:5d:60:ea:c7:53:2b:c4:9c:c9:ba:67:f9:
23:f2:d6:2d:88:29:f9:c6:bd:ec:9d:fe:6b:13:07:
71:c1:79:ee:d6:6b:35:a9:16:ff:59:73:4a:b7:fe:
b5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:82:77:43:B7:39:33:C7:4F:AC:E9:B8:14:E0:3B:8F:85:42:EE:07
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3c2fd284-a71c-43cc-a0ab-a26c0b64f475.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daff:8000::/40
Signature Algorithm: sha256WithRSAEncryption
7d:ad:05:b7:6a:35:01:4d:74:36:76:dc:ca:d9:50:7f:83:06:
92:cb:2e:9b:c5:7d:a4:b3:49:23:4b:c2:0d:20:2a:1b:94:1d:
a8:2a:e4:f5:39:51:e7:48:1b:b9:74:9f:84:57:05:bd:c9:e2:
33:42:42:35:ca:a6:be:8b:2d:17:bf:c5:89:4b:2f:92:5c:fe:
95:40:bc:68:6f:0e:fd:a7:8c:e0:39:a9:55:18:ea:23:2d:55:
01:a7:ab:00:74:45:18:09:15:de:d0:31:10:fd:eb:85:3e:2a:
a1:0d:45:c5:0c:5c:ff:36:82:b0:4e:ab:22:c8:ab:8f:25:24:
5b:c6:06:18:94:ac:6c:56:07:d2:b9:a6:03:87:5d:fd:dc:ea:
a9:42:ca:0e:ba:09:0c:0f:b0:6a:9f:76:9d:64:6a:8d:af:0c:
e4:ac:52:e1:a7:bb:d2:a9:41:62:dd:6f:26:9a:7d:eb:45:e3:
2c:00:f5:bf:59:bc:7c:fe:29:0a:f2:46:76:bc:75:97:c4:bb:
a9:94:3e:5c:1d:6e:dc:45:f3:91:ab:a1:e6:c3:da:16:16:79:
43:f2:1c:dc:67:ae:19:40:da:c9:b5:4a:2e:5b:48:b5:25:73:
3d:26:e8:81:f3:d9:cc:81:18:aa:bb:95:71:46:5c:0d:49:3a:
ea:06:ce:10
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUNCcVoirv5BwDDvR1TDd/3GtTtyowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX
DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAMGUzNjI2ZTEyYjk5ZGJjODllYjQ2
NjZhNWQ4ZDI3Zjk5ZjljNmFkZjAwOTQ1Y2U4MGM4ZGI5YWQwNGI4MzdjNTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2ao621plU4uJdbI5e3xlu/J899k
dqtEh2K6wijVbv55tdk4vagXBNOod0dP7+QbKr5wm8KrKYdEP+n8Tah5hPkmgI05
GjH+l8onMaFLpnXQeKclUc3oMMPdZeLp712Il8n8l8Yry8qxrDlbQL1UI8dxfTRj
4L7btdj9tvLjSWcZdHu3Q0gZuociVf2cBM4MxiNBu9UH518Zy6nGy+3CY49PXJ5r
mdOHi4JJ6ST/Yb7Brxfuhf/EszJUTsaTbUhhwhhXM08x+1rpsKF+se3LYENBmqRd
YOrHUyvEnMm6Z/kj8tYtiCn5xr3snf5rEwdxwXnu1ms1qRb/WXNKt/61FQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFOaCd0O3OTPHT6zpuBTgO4+FQu4HMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzNjMmZkMjg0LWE3MWMtNDNjYy1hMGFiLWEyNmMwYjY0ZjQ3NS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba/4AwDQYJKoZIhvcNAQELBQADggEBAH2tBbdqNQFNdDZ23MrZ
UH+DBpLLLpvFfaSzSSNLwg0gKhuUHagq5PU5UedIG7l0n4RXBb3J4jNCQjXKpr6L
LRe/xYlLL5Jc/pVAvGhvDv2njOA5qVUY6iMtVQGnqwB0RRgJFd7QMRD964U+KqEN
RcUMXP82grBOqyLIq48lJFvGBhiUrGxWB9K5pgOHXf3c6qlCyg66CQwPsGqfdp1k
ao2vDOSsUuGnu9KpQWLdbyaafetF4ywA9b9ZvHz+KQryRna8dZfEu6mUPlwdbtxF
85GroebD2hYWeUPyHNxnrhlA2sm1Si5bSLUlcz0m6IHz2cyBGKq7lXFGXA1JOuoG
zhA=
-----END CERTIFICATE-----
Generated at Wed Feb 5 03:58:48 2025 by rpki-client