Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/42ad6457-9831-48b3-bc79-de5f9459d461.roa
File: 42ad6457-9831-48b3-bc79-de5f9459d461.roa (raw, json)
Hash identifier: R0eLEqhDwLhYuX2yRbNarDhRkIr2UUKaJnkviFbjOAs=
Subject key identifier: 15:F6:1F:F5:E8:87:9D:57:1B:DA:E0:2C:D7:E0:D2:AE:F0:F0:88:18
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 4FC160E56736027971F31CEA73B9A37D4D51B862
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/42ad6457-9831-48b3-bc79-de5f9459d461.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da12:8000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 03 Feb 2025 20:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:c1:60:e5:67:36:02:79:71:f3:1c:ea:73:b9:a3:7d:4d:51:b8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:31:f0:75:0e:b3:ae:53:54:c2:b3:a9:ef:c6:
91:97:d6:34:6e:af:d8:05:b4:54:f2:c9:b0:ab:04:
5a:0b:5a:8c:f2:c6:84:24:b0:c6:29:ea:34:f5:44:
df:a5:85:8c:e5:1e:27:a4:fe:d8:80:d1:8a:c4:1b:
59:59:fe:ab:e8:f2:38:84:3e:7b:4b:9f:a4:1b:28:
07:96:3f:40:98:91:f5:ab:86:f4:2d:ee:b3:1e:e4:
5b:c5:25:37:ee:27:8c:41:d0:e7:c0:91:e0:de:79:
37:3f:bf:a1:24:fd:45:10:34:18:06:4f:99:fe:03:
37:f2:ce:65:1d:dd:ac:f6:18:11:d7:97:10:cb:bd:
2c:c3:6c:12:5f:30:35:40:de:eb:ff:81:f0:5a:52:
06:6e:2c:31:07:6a:68:0a:a2:ed:f8:7b:26:bb:ba:
69:07:49:27:9d:af:73:e6:dc:f2:7b:25:5a:c4:8b:
60:1f:83:0f:70:f1:5f:cc:a0:c0:72:02:f0:99:02:
36:6f:33:67:a5:b7:99:68:0e:67:d8:ce:5a:cd:5b:
80:85:62:16:97:44:4f:8f:26:0f:95:0f:90:34:c8:
59:6e:03:27:9e:ef:74:07:04:87:c2:77:f6:ee:66:
fd:91:e4:0c:ab:81:3a:73:df:e9:79:5b:c5:36:7d:
b0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F6:1F:F5:E8:87:9D:57:1B:DA:E0:2C:D7:E0:D2:AE:F0:F0:88:18
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/42ad6457-9831-48b3-bc79-de5f9459d461.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da12:8000::/36
Signature Algorithm: sha256WithRSAEncryption
ae:c4:09:a6:98:0c:ab:c9:f5:1a:24:31:1c:6b:16:38:71:1a:
c6:22:30:37:57:04:6b:af:c0:91:31:a1:17:11:12:18:a1:be:
a5:f6:d8:7f:26:8b:32:0d:8f:30:00:e0:c5:98:30:ec:1b:ab:
3a:5f:6a:56:8d:27:f0:9b:ee:01:1a:ef:e2:a8:24:0f:d3:2c:
3b:f0:37:c9:be:e9:5a:fb:8e:b1:3f:71:df:39:9a:de:4b:a3:
7c:20:64:ce:19:65:e6:f6:6b:37:78:f9:4f:c1:81:de:14:49:
94:4f:c7:3e:60:c5:67:6d:af:54:2d:70:9f:7e:11:83:9f:26:
6b:31:e3:c2:4c:38:48:ea:3a:db:94:90:4f:f4:24:76:ad:62:
03:38:11:f0:62:9b:b8:ed:17:95:7a:a8:c9:c7:e5:9e:12:74:
ec:58:41:25:53:95:6d:ef:87:eb:f9:a6:cc:27:0e:00:4e:8e:
e9:78:b1:7c:7f:85:18:f2:3a:31:03:32:b7:22:93:81:85:3c:
fc:04:85:1b:c8:49:11:9a:68:68:d1:f4:48:86:5b:0a:79:68:
f6:08:3a:58:f9:2d:5a:58:fc:83:a7:d6:da:27:9b:b1:6b:7e:
43:5f:8c:6e:9d:11:49:98:da:2d:4e:48:cf:29:4f:0d:6a:bc:
8a:87:a9:5c
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUT8Fg5Wc2Anlx8xzqc7mjfU1RuGIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX
DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAMTliNWQwN2VjYjRhNzEzNzJmN2Jk
YjAzMjE3ZWI5ZmM4YzllODM0OGExYzE2ZTQzZmY1Y2UwZDQ5MTQyOGQ0NDEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1THwdQ6zrlNUwrOp78aRl9Y0bq/Y
BbRU8smwqwRaC1qM8saEJLDGKeo09UTfpYWM5R4npP7YgNGKxBtZWf6r6PI4hD57
S5+kGygHlj9AmJH1q4b0Le6zHuRbxSU37ieMQdDnwJHg3nk3P7+hJP1FEDQYBk+Z
/gM38s5lHd2s9hgR15cQy70sw2wSXzA1QN7r/4HwWlIGbiwxB2poCqLt+Hsmu7pp
B0knna9z5tzyeyVaxItgH4MPcPFfzKDAcgLwmQI2bzNnpbeZaA5n2M5azVuAhWIW
l0RPjyYPlQ+QNMhZbgMnnu90BwSHwnf27mb9keQMq4E6c9/peVvFNn2wOQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFBX2H/Xoh51XG9rgLNfg0q7w8IgYMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzQyYWQ2NDU3LTk4MzEtNDhiMy1iYzc5LWRlNWY5NDU5ZDQ2MS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYEJAbaEoAwDQYJKoZIhvcNAQELBQADggEBAK7ECaaYDKvJ9RokMRxr
FjhxGsYiMDdXBGuvwJExoRcREhihvqX22H8mizINjzAA4MWYMOwbqzpfalaNJ/Cb
7gEa7+KoJA/TLDvwN8m+6Vr7jrE/cd85mt5Lo3wgZM4ZZeb2azd4+U/Bgd4USZRP
xz5gxWdtr1QtcJ9+EYOfJmsx48JMOEjqOtuUkE/0JHatYgM4EfBim7jtF5V6qMnH
5Z4SdOxYQSVTlW3vh+v5pswnDgBOjul4sXx/hRjyOjEDMrcik4GFPPwEhRvISRGa
aGjR9EiGWwp5aPYIOlj5LVpY/IOn1tonm7FrfkNfjG6dEUmY2i1OSM8pTw1qvIqH
qVw=
-----END CERTIFICATE-----
Generated at Wed Feb 5 03:57:12 2025 by rpki-client