Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4caf3aa8-d8f1-46af-aa25-c6ebf86293c7.roa
File: 4caf3aa8-d8f1-46af-aa25-c6ebf86293c7.roa (raw, json)
Hash identifier: NnD+vdCUSXHY5QM10r6aHUhADYcOdneuqmYIFYrxuZc=
Subject key identifier: DF:B0:50:84:6B:38:14:9F:A3:59:36:73:DD:6B:AE:77:02:1C:D8:5C
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5CA8FF8E101A9A7EF5F14F01DD51A9990E0ABF15
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4caf3aa8-d8f1-46af-aa25-c6ebf86293c7.roa
Signing time: Wed 30 Jul 2025 00:51:12 +0000
ROA not before: Wed 30 Jul 2025 00:51:12 +0000
ROA not after: Wed 03 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da69:6000::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 30 Jul 2025 17:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:a8:ff:8e:10:1a:9a:7e:f5:f1:4f:01:dd:51:a9:99:0e:0a:bf:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jul 30 00:51:12 2025 GMT
Not After : Sep 3 23:59:59 2025 GMT
Subject: serialNumber=7550a074dfa26d131db916c329ada0684fbff4c857b84d6e239ff46920d62b67, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:f1:a9:4e:c8:93:94:b7:9b:31:2c:0d:9f:
10:43:81:f4:62:40:cb:2f:a7:07:f1:6f:61:dc:9b:
3f:d7:20:31:ec:7b:f5:0c:31:d3:c0:83:a0:84:d9:
55:9e:88:60:df:11:8e:8b:2e:ad:ab:86:27:7b:d7:
f1:ac:24:f0:57:a5:2f:f6:a2:12:85:3b:d4:98:36:
af:98:ec:d2:cf:a3:74:c4:0f:dc:6e:cd:f5:78:38:
b7:f1:22:a5:8a:55:ad:11:96:a2:af:7d:cc:79:79:
26:fb:4e:26:d9:32:6f:6d:fb:52:d1:3f:d4:bc:d1:
b2:79:eb:0d:02:d6:59:b5:35:8f:fd:42:bb:86:c4:
cf:be:d8:1c:f1:de:1c:f1:a4:44:4d:ed:8d:c6:3b:
d0:7e:23:79:f9:ef:0a:1b:b2:ca:f0:21:2c:55:40:
fd:cd:b1:ce:1a:05:5b:28:9f:74:38:cd:9c:cb:15:
ea:de:8b:72:44:ea:6c:25:64:56:90:1a:6b:55:47:
61:c4:b4:de:c4:ee:3a:54:6e:e5:5c:a9:17:3e:e1:
e2:fe:3d:89:d9:9a:d1:15:69:f0:b3:8e:78:92:c7:
71:09:e4:a1:7f:81:34:d7:91:aa:19:19:ac:c8:0e:
cb:f5:88:6b:41:b3:91:17:a1:8c:94:a7:90:a5:a6:
ec:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B0:50:84:6B:38:14:9F:A3:59:36:73:DD:6B:AE:77:02:1C:D8:5C
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4caf3aa8-d8f1-46af-aa25-c6ebf86293c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da69:6000::/40
Signature Algorithm: sha256WithRSAEncryption
06:67:a3:f8:ba:4d:12:ef:cf:5f:60:23:4a:88:60:24:85:15:
f2:66:2e:d4:0e:c2:b9:31:78:27:cd:c3:10:d0:64:52:5e:cd:
9b:11:8a:6d:0c:52:cc:70:3f:e5:9e:39:8a:8c:5c:48:b6:7b:
be:62:66:37:ca:d5:69:7f:ca:ad:bc:5d:15:52:75:e8:d6:37:
fd:a5:8b:fe:76:71:05:d7:46:c2:da:97:8b:54:81:a2:f6:e4:
11:a6:b1:56:b7:be:ea:b6:13:3d:a8:ba:86:13:2c:a5:b2:f0:
de:a7:d3:6d:4f:4c:af:62:44:1c:00:3d:6a:6c:51:c3:e5:6d:
2a:49:1f:c4:d0:d1:df:a2:21:ab:96:91:85:24:9c:27:25:ac:
4e:e0:1d:08:ae:45:b3:80:58:20:33:d3:61:c1:d6:3e:70:61:
6f:1c:31:5b:d8:1e:61:38:a7:e4:44:04:10:41:f0:03:ee:b6:
2b:3f:29:d8:c9:48:4c:7d:31:cc:f3:93:d3:0a:a8:e4:02:99:
47:62:14:40:c4:2e:02:d4:db:63:39:ed:0b:bb:d0:f6:dc:97:
8a:a5:67:a4:89:5b:c3:2b:57:83:9a:60:3c:bb:59:4f:4f:34:
19:a1:41:de:a2:1a:54:a8:8b:aa:24:ef:35:f1:f1:5c:96:cf:
e8:67:cf:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 01:02:17 2025 by rpki-client