Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f566d19-ce73-40fd-941c-356b2337d320.roa
File: 4f566d19-ce73-40fd-941c-356b2337d320.roa (raw, json)
Hash identifier: j6M5U8NA2BGIcGsRK9pVYTv3PZ00sdn9J4/QdlfYno8=
Subject key identifier: 8C:84:83:DB:FC:D8:06:F6:A0:B6:93:AD:6D:82:0E:A6:CD:CC:B7:7B
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 48A1DCC8C87BE5AFE3FC19AFE5A726553A0E8572
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f566d19-ce73-40fd-941c-356b2337d320.roa
Signing time: Wed 14 May 2025 00:01:05 +0000
ROA not before: Wed 14 May 2025 00:01:05 +0000
ROA not after: Wed 18 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf4:8840::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 19:53:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:a1:dc:c8:c8:7b:e5:af:e3:fc:19:af:e5:a7:26:55:3a:0e:85:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 14 00:01:05 2025 GMT
Not After : Jun 18 23:59:59 2025 GMT
Subject: serialNumber=9572f3e4823017a24c229593816a5ff61a128284192bfb8dfa79dc27d75c01f8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:12:ca:14:05:83:11:81:08:a8:bb:c4:fe:
31:ff:6b:75:78:4b:7c:21:22:ed:d4:64:52:c8:2a:
b6:5a:ae:36:33:27:ad:5d:fe:94:3b:89:34:c1:6c:
1c:a8:1f:7b:49:b5:4c:ae:d0:8e:68:29:84:1f:35:
c1:97:62:e9:ed:57:1c:b8:d3:a4:5d:fb:6a:40:4c:
50:67:0a:dd:7a:f4:a9:68:03:26:ab:ca:89:f0:93:
52:ef:9e:6c:53:3a:77:23:7e:4d:a4:aa:13:8d:f0:
5d:b4:cc:21:59:6a:cc:d8:5a:ce:3a:1d:6e:89:f9:
05:df:bf:30:ef:84:55:ee:6e:c4:73:b5:42:58:14:
ad:f6:9c:af:41:a2:c3:89:a5:c4:66:14:ae:3b:c5:
6c:20:12:50:a7:ee:5d:cc:6a:fe:41:69:6c:db:f5:
47:10:2e:bf:4e:e1:76:37:50:ef:7a:53:5f:ac:d0:
71:87:e4:70:fb:10:e5:63:ed:31:ba:a9:74:2d:cb:
7f:66:2d:45:1f:9e:4a:4e:18:9f:bb:50:1e:43:58:
8a:15:9a:3d:58:c0:a1:96:8f:8e:5e:9b:9f:c3:08:
ab:a6:7e:14:ee:c7:25:18:b1:1d:d2:6c:e9:fc:40:
37:75:6f:3a:28:af:c0:06:9a:20:22:91:9d:e0:e6:
44:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:84:83:DB:FC:D8:06:F6:A0:B6:93:AD:6D:82:0E:A6:CD:CC:B7:7B
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f566d19-ce73-40fd-941c-356b2337d320.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf4:8840::/48
Signature Algorithm: sha256WithRSAEncryption
03:94:79:8d:1a:21:1d:f4:4a:0a:3a:40:e4:1c:65:21:08:d0:
cd:2c:a8:3f:c9:92:70:bb:1f:14:27:8f:6d:13:a4:a0:74:72:
bb:34:78:86:a6:aa:0e:23:5c:ec:be:bd:74:92:7f:5a:c4:c7:
ef:d8:ff:09:ec:da:40:f6:a8:48:7a:5c:14:d9:53:e3:8f:7f:
35:21:26:e1:f4:10:bb:b2:c8:ca:51:be:ec:4f:27:12:47:99:
8b:a7:b9:b2:72:ff:de:89:3b:de:88:71:db:79:e3:90:56:96:
1a:3b:05:0d:cf:74:e5:ad:ff:0f:8f:06:f0:fa:77:03:3d:cd:
2e:fd:f9:63:ba:74:46:63:ee:c8:6b:01:e0:d7:d1:cf:0c:b3:
29:a0:b1:55:7f:ad:a0:29:0e:57:0a:d0:e7:a8:bc:1c:7b:1d:
7d:30:85:92:ca:09:b6:52:98:19:a1:1a:8f:5d:af:13:a9:45:
b5:f7:be:b8:6e:68:48:da:69:25:a6:2c:fc:d3:9d:cd:c3:72:
1d:83:f8:5c:34:5c:83:6f:50:05:3c:d2:ca:6a:55:b0:5b:c7:
5a:64:a1:e4:2c:a7:ce:b7:4b:36:f6:90:43:0e:a2:11:ba:e7:
23:92:31:60:9b:c0:8a:8f:83:0e:af:53:02:ef:4e:46:87:0d:
17:16:5d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:31:59 2025 by rpki-client