
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/481fbcde-76c6-49f7-8633-8b13537bb9b4.roa
File: 481fbcde-76c6-49f7-8633-8b13537bb9b4.roa (raw, json)
Hash identifier: hK3LL6prOXLHe4libM3aWaZAz3+qFhgQVJ6YYCHoIcE=
Subject key identifier: 55:FB:97:09:4B:A9:FC:F5:BA:DF:68:EE:0D:ED:70:ED:E1:46:6C:3C
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 42584F3336E632383B4066E491BA7AE632FD4D67
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/481fbcde-76c6-49f7-8633-8b13537bb9b4.roa
Signing time: Wed 30 Jul 2025 00:41:36 +0000
ROA not before: Wed 30 Jul 2025 00:41:36 +0000
ROA not after: Wed 03 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da69:4040::/46 maxlen: 48
Validation: Failed, certificate revoked on Wed 30 Jul 2025 17:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:58:4f:33:36:e6:32:38:3b:40:66:e4:91:ba:7a:e6:32:fd:4d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jul 30 00:41:36 2025 GMT
Not After : Sep 3 23:59:59 2025 GMT
Subject: serialNumber=4fc1a5532581e3bb7da09865da9eb130ede7dd21b58b3be9d3b544b8557fcbc1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:f9:ff:e3:83:33:ce:77:8e:de:20:8e:8a:
45:c3:32:8b:f6:13:c2:37:27:49:16:d6:84:74:b8:
60:33:b4:cd:8a:9b:cd:04:3e:f5:a5:be:08:46:74:
b3:87:1d:3b:ec:29:d8:51:a5:df:b2:ee:f8:e4:c3:
f5:a8:fc:e0:30:ec:19:73:9f:fa:33:bb:5d:61:cc:
c4:1a:55:f6:07:86:be:8a:87:b0:1e:52:b9:d4:40:
e7:75:3b:77:c6:81:c4:23:f1:b4:76:78:d4:68:40:
04:60:c9:aa:4a:50:62:41:fc:e3:9a:ad:49:52:da:
e6:5e:ca:ec:19:f1:77:e8:9e:83:2b:74:70:88:89:
60:4d:0f:c2:c5:d6:78:bf:9c:ca:8d:9d:fa:fd:6c:
8c:ab:96:a3:87:e5:9a:94:3a:a5:ed:e0:b4:08:99:
ab:78:00:cf:e1:a9:30:87:5d:78:00:bb:17:7a:7b:
f1:13:e5:b6:71:8c:60:3e:17:07:1b:56:41:4c:e5:
f7:5b:78:e7:f4:7e:3a:32:1d:33:10:db:e4:16:25:
0e:53:7a:ca:43:5b:5e:e1:1a:29:5c:c8:21:ee:68:
21:f0:7a:2d:3d:48:ca:38:bf:46:d0:93:fc:6c:ae:
ac:12:a2:65:9e:a0:a6:2c:fe:32:7d:0f:31:50:6d:
8a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FB:97:09:4B:A9:FC:F5:BA:DF:68:EE:0D:ED:70:ED:E1:46:6C:3C
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/481fbcde-76c6-49f7-8633-8b13537bb9b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da69:4040::/46
Signature Algorithm: sha256WithRSAEncryption
25:d1:58:dd:10:d2:41:f4:f4:ec:39:30:9e:1a:a4:60:25:45:
a7:43:33:32:ca:a3:60:e0:f3:e6:9e:07:29:a1:f8:94:0f:9e:
ec:c0:22:e7:a6:03:b2:ac:fc:83:22:bf:45:b9:ed:0a:c2:25:
a9:90:22:d0:66:92:45:17:b7:e7:fe:51:e1:1a:e5:40:70:f3:
5d:41:7c:02:d9:e9:99:fa:ad:26:82:34:99:7f:9a:65:81:a5:
99:4c:77:ed:16:e0:a1:f3:c9:5b:d1:a7:f9:b2:d7:2d:78:d6:
de:a4:9b:ae:de:3f:c8:aa:62:61:c7:f7:ad:89:71:3f:33:cf:
6a:c0:57:60:01:a7:77:73:7d:73:10:5c:c4:f9:82:c3:b8:cd:
10:9a:0f:4e:36:6f:31:cd:e4:49:a7:89:ea:6d:d7:d0:b1:54:
08:10:56:6c:55:c8:5c:18:b4:c7:96:a8:1e:80:02:df:c7:5c:
f3:f8:cb:cb:80:5b:4f:b0:db:62:08:f2:72:a3:19:34:fc:60:
d6:ed:0b:84:a0:37:74:40:07:63:bc:57:0c:00:98:91:38:65:
44:c9:32:c1:76:41:34:2c:de:e0:24:a8:4d:84:ac:1e:e1:41:
57:02:d9:3e:29:c3:4b:e1:16:7d:d7:02:36:94:fa:f6:cf:06:
76:e1:79:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 01:03:53 2025 by rpki-client