
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56a3ec11-278f-484a-aee2-dc1f64294598.roa
File: 56a3ec11-278f-484a-aee2-dc1f64294598.roa (raw, json)
Hash identifier: T6q7OeqPf/PeNXPr9NE+DmC5eUWXQAyOtStNJ1arM+A=
Subject key identifier: B0:3A:88:E6:3A:DE:41:BD:27:73:8D:B8:84:C1:9F:72:75:4D:C5:4A
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 7B46994CE19E4C5CFC8A9ACF71A1AB53EC7B9BB6
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56a3ec11-278f-484a-aee2-dc1f64294598.roa
Signing time: Wed 30 Jul 2025 00:40:58 +0000
ROA not before: Wed 30 Jul 2025 00:40:58 +0000
ROA not after: Wed 03 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf7:4040::/46 maxlen: 48
Validation: Failed, certificate revoked on Wed 30 Jul 2025 18:08:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:46:99:4c:e1:9e:4c:5c:fc:8a:9a:cf:71:a1:ab:53:ec:7b:9b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jul 30 00:40:58 2025 GMT
Not After : Sep 3 23:59:59 2025 GMT
Subject: serialNumber=a6f1235d04c3a984bdcbef3abd12435ac5dd04d665a697fd6286d4faf98e9e35, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:81:dd:84:1e:09:ba:27:b0:7c:b4:20:aa:
ec:0a:4d:5a:0b:41:8a:a8:8c:d4:50:1e:eb:3a:aa:
51:3b:d4:fe:56:d9:b2:08:39:e5:58:02:cb:ca:60:
af:ea:dc:b2:48:01:83:8d:e6:f4:e3:2e:ce:cb:55:
c5:29:8d:61:f5:6d:ab:f4:64:cb:b8:61:46:13:4f:
4c:46:8a:ff:17:33:af:bd:f9:39:71:07:5f:92:eb:
0a:5b:ed:74:ff:19:03:6f:70:72:21:96:02:d9:a7:
45:49:95:0f:6b:46:0f:a3:db:a2:94:d1:b1:48:1f:
b5:34:da:0c:83:7a:07:59:77:67:3c:c1:21:2f:83:
c3:2f:57:48:ab:14:42:81:5a:8e:a2:cb:4c:4b:0c:
39:a2:6f:17:f9:43:1e:9f:e0:ae:8d:79:18:69:52:
2b:05:ec:ce:33:76:a2:bf:50:c0:87:40:60:0b:87:
5c:e2:c6:07:7e:73:a6:52:6c:09:25:64:56:b9:d3:
52:7d:0f:09:94:4a:d9:8a:2b:69:91:3b:d2:db:c8:
62:6f:66:27:56:62:d9:a0:e5:87:a0:c0:9c:f9:6a:
fa:5f:15:02:ab:78:a9:a2:4a:c5:a3:9d:ab:d4:59:
e4:31:7e:73:62:12:a2:50:6f:5e:8d:de:f1:43:d5:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3A:88:E6:3A:DE:41:BD:27:73:8D:B8:84:C1:9F:72:75:4D:C5:4A
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56a3ec11-278f-484a-aee2-dc1f64294598.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf7:4040::/46
Signature Algorithm: sha256WithRSAEncryption
55:68:99:74:f0:e6:d2:3f:bc:89:d9:11:cd:d9:77:57:8a:be:
2e:33:17:f8:36:2c:d7:82:4c:a8:33:76:ba:69:e9:19:20:48:
5d:da:06:61:b1:cd:37:93:da:43:4c:0d:d5:70:63:29:90:2d:
24:69:00:80:e6:a3:15:f6:4d:19:e5:94:a2:fe:79:a3:0f:de:
2c:4e:59:f6:96:19:3f:50:07:7d:39:cc:ee:26:20:5b:3c:c2:
ef:26:34:69:c3:8b:8c:d6:46:68:ac:ae:61:91:43:d2:6e:26:
b3:6c:ea:5e:0d:49:e2:2b:de:4b:cb:8b:ca:9f:c0:e2:f7:80:
86:ec:68:bf:66:c1:7f:62:97:9f:5f:1b:50:fd:c2:a9:5c:d3:
36:84:9e:f3:45:af:bd:4c:2f:4a:d7:53:f2:f2:fc:4e:33:3b:
1d:d0:62:85:78:2f:3d:bc:91:71:d4:88:0d:1b:cf:db:00:5f:
e4:ad:ae:53:c5:00:65:54:80:05:c1:44:77:c0:79:a2:b0:d6:
92:17:39:19:7c:7a:5a:a6:5b:4e:ec:2a:33:d3:95:c8:a1:4b:
be:37:12:a2:1a:19:4c:ba:b6:cd:34:33:74:a9:df:29:f6:97:
45:2f:8f:37:c1:36:f3:07:f6:fe:de:bb:2c:d6:7d:f5:90:0c:
7b:57:9a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 01:03:56 2025 by rpki-client