Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/430cac0c-3eb0-4c69-9431-be6f4090336e.roa
File: 430cac0c-3eb0-4c69-9431-be6f4090336e.roa (raw, json)
Hash identifier: jfYbPKHSDK3X8czbIO6vTtH9zpngBZwsz2wZlc4ALyA=
Subject key identifier: 3D:24:35:68:D0:88:DC:38:19:95:6D:C6:69:11:DC:01:2E:29:56:34
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 141D87CB0533A78D7C652DA4EA2392BA807B509B
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/430cac0c-3eb0-4c69-9431-be6f4090336e.roa
Signing time: Mon 12 May 2025 15:10:47 +0000
ROA not before: Mon 12 May 2025 15:10:47 +0000
ROA not after: Mon 16 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daee:a000::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 20:08:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:1d:87:cb:05:33:a7:8d:7c:65:2d:a4:ea:23:92:ba:80:7b:50:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 12 15:10:47 2025 GMT
Not After : Jun 16 23:59:59 2025 GMT
Subject: serialNumber=aaabc784f2d6963993181aa659051529dc97ad18b5b90433ac70025b2b5b3ef6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:b3:5f:97:bd:ad:a9:3e:ba:11:74:34:dc:
5c:2b:30:61:29:86:13:d7:70:f9:f2:2a:7d:42:c3:
56:d4:d1:3f:6c:f2:d7:29:6c:98:df:31:7b:38:39:
e2:68:03:be:48:7f:84:8f:ff:f2:42:50:f8:11:d5:
2b:a2:fe:29:25:36:90:e4:96:5e:d2:d4:39:96:4a:
64:1e:be:e4:b3:5e:68:e3:32:06:0a:b7:eb:23:90:
85:7c:90:52:84:ad:90:8d:7f:0c:13:da:20:92:d7:
48:b6:ab:6c:d9:13:2c:dc:bf:90:ad:94:b1:58:38:
d0:59:05:e6:32:61:08:57:7d:17:6f:f1:4b:21:4d:
ce:db:8d:2c:05:7b:9e:37:b7:19:17:55:fb:85:ca:
28:b7:f1:ee:58:98:ff:31:3e:f7:61:39:ce:6f:d9:
a1:b4:ed:42:05:50:95:da:97:07:03:35:eb:87:a1:
a5:0c:dd:d7:e7:09:7e:1d:9d:06:6b:a4:cd:55:60:
77:d5:50:7b:64:16:ae:2e:41:34:d9:3e:88:c7:22:
bc:e7:c6:6e:46:b7:03:bb:0d:d1:fd:65:0a:8e:c8:
bb:a0:52:8b:81:9c:6c:c6:36:c0:f9:58:13:63:ab:
9b:2e:6e:60:ed:0d:67:25:ec:25:d5:7c:55:de:82:
b9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:24:35:68:D0:88:DC:38:19:95:6D:C6:69:11:DC:01:2E:29:56:34
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/430cac0c-3eb0-4c69-9431-be6f4090336e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daee:a000::/40
Signature Algorithm: sha256WithRSAEncryption
01:34:2c:9b:8e:53:0b:c1:c1:8e:ef:82:8f:c8:3e:57:4d:8a:
a3:0c:e5:13:41:97:73:98:b9:3d:1a:36:4b:fe:b4:2c:78:ac:
84:23:61:f7:5a:40:36:57:5b:05:cb:d9:c4:ca:bc:9a:27:74:
9a:a3:ee:19:72:9f:ff:8b:e8:77:4f:5a:8e:69:d8:29:3d:87:
3e:7f:d9:f0:e9:c0:5e:32:9b:35:6f:7f:94:3a:b4:31:d1:49:
89:c8:5c:b8:70:8c:6b:36:e7:52:df:c3:69:45:b8:81:a0:6d:
91:5d:c0:2d:55:83:1c:50:4a:dc:e1:45:ad:e0:37:37:c3:2f:
f3:61:2a:b1:2e:d6:4c:2c:51:a7:66:23:dc:73:6f:0c:97:7a:
06:4e:89:65:9b:40:d2:dd:50:01:d5:9c:5a:92:5d:29:81:5d:
30:b4:06:c9:8c:43:5f:c8:98:43:9d:98:a3:30:6b:6f:96:17:
be:d3:bd:3f:28:4b:e1:d2:5c:8e:4d:34:9b:c7:f8:f0:fb:ea:
d7:f7:ae:1d:18:58:54:a6:aa:f6:d6:1b:9b:22:85:45:23:f6:
0e:c1:21:bb:27:0d:79:05:01:7a:29:41:37:dc:a7:d7:6c:c7:
08:b2:10:2d:a5:ee:ce:f0:41:b4:45:fe:d6:a9:7b:7d:37:be:
c7:f1:cb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:20:37 2025 by rpki-client