Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/44659a2f-b700-46f9-96cd-a4f62edfbf44.roa
File: 44659a2f-b700-46f9-96cd-a4f62edfbf44.roa (raw, json)
Hash identifier: OiGIvvpR7kPHV59BivV/7EWLCQrWGdr88NWhplqKKbs=
Subject key identifier: 1C:FE:DC:9C:AB:28:91:9C:C4:B9:CC:81:43:7A:AB:D6:B2:57:45:68
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 1153928B896F0C9012EE6AB544206DF6EF73BB8D
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/44659a2f-b700-46f9-96cd-a4f62edfbf44.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daff:4000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 15:50:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:53:92:8b:89:6f:0c:90:12:ee:6a:b5:44:20:6d:f6:ef:73:bb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:45:47:2a:e7:4e:f8:46:b9:8d:f8:69:69:69:
74:8e:81:b7:e6:a5:9c:14:c1:f7:8d:f4:d2:16:4d:
28:d9:ad:1b:63:b9:a6:0b:16:19:56:fb:36:fd:73:
6a:19:89:13:fb:8c:5f:3c:08:8d:f9:0d:45:e3:d1:
6e:88:f8:1b:25:29:db:64:9b:c3:cc:7b:e0:9b:5f:
2e:8e:12:6c:01:fd:1f:1d:ec:37:6d:16:ce:a4:9d:
22:af:2a:06:bc:e6:25:0a:d6:bc:43:70:f5:34:90:
64:a9:e3:fa:71:a1:8d:88:72:a0:b2:fb:ab:33:da:
8f:fa:c2:52:7b:04:c2:27:44:42:36:7b:cf:57:10:
37:69:03:80:b3:79:c2:09:33:81:1b:24:ce:55:be:
c7:b8:b7:b8:43:a5:53:f2:61:64:ac:32:5b:6e:ee:
ae:1c:a2:9c:1a:c9:e5:60:36:0a:96:2b:06:34:1d:
90:d1:b7:ba:57:84:d4:b2:9e:73:b8:26:07:4e:24:
7f:fc:eb:08:59:4d:7e:29:42:bf:9d:b7:f9:0e:35:
67:82:5d:39:88:77:1d:85:9a:88:3e:cf:1c:47:da:
91:eb:95:d3:50:e9:a9:00:c1:0a:da:75:80:f3:6a:
ef:1d:08:4c:fb:14:ae:e3:94:95:74:fd:9d:7f:84:
2b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FE:DC:9C:AB:28:91:9C:C4:B9:CC:81:43:7A:AB:D6:B2:57:45:68
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/44659a2f-b700-46f9-96cd-a4f62edfbf44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daff:4000::/40
Signature Algorithm: sha256WithRSAEncryption
74:22:68:6d:7d:30:b6:a9:ad:3f:56:f6:a2:5f:2a:1c:f2:01:
61:86:4a:eb:37:47:57:16:a6:c2:62:b5:ff:35:41:95:98:f0:
56:51:fb:aa:85:32:2a:40:cf:ef:ca:a7:13:96:fc:cd:c3:17:
05:08:0a:65:35:94:f9:1a:46:f2:f5:8b:d9:24:94:db:63:25:
30:b0:5a:33:71:28:6d:50:1b:39:70:4a:c8:49:a7:cd:f2:7b:
0d:86:81:24:e3:14:32:62:2d:65:99:18:80:18:1a:ed:71:d8:
99:58:d3:51:d0:ec:fe:d7:08:79:a6:b9:37:d0:0b:9f:46:9a:
6d:c8:6c:21:10:65:b7:d4:20:1a:62:b6:d1:dc:54:7a:7d:38:
ae:a8:a5:b1:3d:99:1c:75:0b:ed:e0:3c:64:80:bc:41:1c:2e:
a5:aa:ad:4b:06:36:d8:48:32:a5:64:00:31:e1:a3:da:27:19:
91:b3:23:e9:fb:85:28:6b:ed:e6:6f:8c:29:16:25:a6:0d:a2:
59:31:45:b5:66:32:4a:0b:a0:f8:25:30:22:07:13:bb:df:32:
35:7e:f4:50:9b:da:2e:77:b9:71:68:6a:25:6d:9f:63:e5:4e:
fd:b5:7a:94:af:03:58:e3:8f:fc:54:20:42:fd:42:ed:97:24:
70:21:1f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:10:01 2025 by rpki-client