Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b5ea3b5-d1e1-4482-9795-44899d6c1b41.roa
File: 5b5ea3b5-d1e1-4482-9795-44899d6c1b41.roa (raw, json)
Hash identifier: 45WBrYs39ohG4CFudEngWYtxzDPvpGf+3Zn1kAhd3y0=
Subject key identifier: 3D:DA:D0:30:84:64:54:5D:00:84:F8:A2:CD:A7:FA:63:B8:B4:25:97
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 19530D659559AD0428BEFC636938915C0CCD0418
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b5ea3b5-d1e1-4482-9795-44899d6c1b41.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da61:7000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 15:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:53:0d:65:95:59:ad:04:28:be:fc:63:69:38:91:5c:0c:cd:04:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c1:f3:a8:26:34:5c:e1:d4:4f:f0:e9:49:82:
12:10:14:f5:01:3a:c1:9d:eb:86:38:69:45:94:72:
6a:03:9f:67:b5:0b:a3:c7:f1:68:03:48:0e:dd:f3:
f9:ce:55:91:3c:71:ab:3f:4b:ba:53:72:0b:30:ec:
45:70:03:60:b7:d7:23:f2:e5:fb:bc:3f:83:7f:f1:
1f:aa:22:c8:19:98:a1:27:54:e3:18:95:3e:69:3b:
0a:30:49:52:4d:11:fa:74:70:27:9d:93:48:f8:9f:
37:c5:0c:34:10:34:6d:c0:9e:ae:91:c4:f5:45:6e:
d4:56:ab:0f:96:30:8c:e7:b9:ae:08:91:39:bb:24:
53:87:5b:12:16:55:99:e0:62:86:10:48:e0:78:0c:
e6:d5:1b:9a:f9:03:9c:f9:db:7c:35:80:28:53:f4:
64:94:b0:cf:da:e5:ad:68:a6:ac:71:e7:26:ad:1f:
4a:77:b4:e3:2f:2d:e0:cd:7e:7c:54:44:3f:69:b2:
4d:2c:4a:26:97:94:1b:38:a4:64:75:f0:93:41:f6:
63:8c:d8:35:e9:9f:0b:c3:aa:e5:77:35:1d:df:97:
0f:38:4f:12:ea:84:95:a8:21:af:0a:6a:7e:80:90:
57:c0:ee:99:29:a5:15:e8:99:5f:eb:04:2a:dd:bb:
86:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DA:D0:30:84:64:54:5D:00:84:F8:A2:CD:A7:FA:63:B8:B4:25:97
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b5ea3b5-d1e1-4482-9795-44899d6c1b41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da61:7000::/40
Signature Algorithm: sha256WithRSAEncryption
1a:7d:bf:44:40:a6:1f:92:aa:37:05:ae:0e:74:9e:9a:a3:2d:
9b:6d:f9:f4:29:76:ec:d6:a0:39:51:20:fa:f4:b1:db:49:52:
9f:90:40:70:02:c8:dd:60:50:0e:a0:cb:3e:19:ba:bb:eb:07:
ac:14:59:e0:24:36:1e:37:fc:20:e3:64:44:66:e7:1a:0a:4e:
44:94:de:57:8f:ad:b0:b2:34:c8:69:00:b2:ca:00:11:87:00:
9e:22:b8:7d:7c:46:c3:46:04:82:aa:b8:65:aa:e6:11:f4:6e:
5a:71:9f:16:67:e7:f6:ec:c1:d8:27:f9:ef:ab:f9:d6:ba:29:
c5:b9:c4:e4:ec:ce:d0:ca:f6:1a:0d:7e:f5:a7:f9:2d:e0:3e:
f8:28:e6:38:34:a0:43:4a:da:39:a9:6f:ed:d2:28:63:bc:8a:
20:90:7e:d6:a4:9c:c5:48:bd:84:0e:68:f0:da:2d:1e:fa:20:
71:22:2c:49:93:87:12:7d:88:82:e4:4e:30:87:46:ca:a7:df:
77:4e:a4:a0:bd:ff:67:bf:51:fa:8f:94:02:c3:12:84:ee:73:
bd:bc:89:e7:77:50:02:17:60:90:fe:db:ca:25:50:c7:bb:9e:
2f:0d:fc:51:aa:27:d3:0f:9b:90:64:16:68:8f:31:dc:4b:f1:
95:39:2d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 03:52:48 2025 by rpki-client