Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c128af6-aa93-4ed4-841d-e0cffeffdd04.roa
File: 5c128af6-aa93-4ed4-841d-e0cffeffdd04.roa (raw, json)
Hash identifier: o7b2/yQwIL5wGnFo5poCBjSXaAjg4DdUcQlhIkitIYs=
Subject key identifier: 54:EF:AA:5D:0F:EB:54:B1:21:D9:85:85:7F:64:E9:A6:DB:19:7F:03
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 316114D89FA9EB3962E966D4003B28007EC7BA46
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c128af6-aa93-4ed4-841d-e0cffeffdd04.roa
Signing time: Mon 12 May 2025 15:01:06 +0000
ROA not before: Mon 12 May 2025 15:01:06 +0000
ROA not after: Mon 16 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daee:7000::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 20:08:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:61:14:d8:9f:a9:eb:39:62:e9:66:d4:00:3b:28:00:7e:c7:ba:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 12 15:01:06 2025 GMT
Not After : Jun 16 23:59:59 2025 GMT
Subject: serialNumber=bd16069720efdb314de148fa54962f932e0a16965eb325c8e97e1bdeb35977c7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:24:f7:97:af:da:ca:82:43:6e:76:42:d7:ec:
26:71:fa:6b:db:83:77:62:86:c0:18:12:a7:7f:94:
d2:b8:3d:ba:f5:e0:fe:97:da:b4:af:0d:9c:b1:fa:
05:9c:44:8a:a1:26:32:00:be:f3:03:33:d8:7e:cf:
f2:f3:63:70:9d:86:e7:12:8d:61:38:4b:03:d8:96:
99:0b:b6:83:24:70:13:48:b7:9d:ab:8c:9e:9e:17:
09:77:4e:a9:0d:47:6d:c1:25:74:07:70:0f:d7:e8:
53:bf:97:7a:8f:66:4a:d8:73:21:74:30:6c:a0:8d:
f2:19:17:dc:f4:bd:af:06:6e:05:a7:b1:17:63:74:
de:c2:0f:4b:7b:e0:33:be:7e:c2:e7:78:e2:e3:6d:
5d:46:f2:be:d8:61:cf:ba:63:ea:04:36:9d:5a:fe:
f1:c0:7e:cd:7d:fc:02:1e:54:c5:97:3c:9f:83:44:
00:d1:cc:90:c6:ae:92:cc:2a:f2:4b:88:66:8b:3f:
c4:e8:6e:c6:6a:15:6a:3c:31:b9:84:7e:11:d2:75:
48:c6:f7:f4:16:35:21:28:11:8d:e5:3a:7c:29:71:
52:db:cd:9b:55:a4:6f:27:b0:d4:58:2c:94:0b:15:
fe:b6:12:2d:53:6f:80:cb:76:f7:28:a7:a0:81:66:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EF:AA:5D:0F:EB:54:B1:21:D9:85:85:7F:64:E9:A6:DB:19:7F:03
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c128af6-aa93-4ed4-841d-e0cffeffdd04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daee:7000::/40
Signature Algorithm: sha256WithRSAEncryption
bc:fb:94:70:ba:10:84:82:5f:73:55:b5:19:57:b2:63:5c:17:
d8:db:e8:c0:a3:cc:cb:6a:fe:73:36:d6:21:29:f8:83:38:70:
64:d9:6f:79:47:05:3a:8b:40:0f:63:dc:13:58:71:03:9c:39:
2d:c5:fb:e6:08:81:e5:14:a0:53:97:f7:6d:fe:44:fb:d0:c1:
6f:cb:42:6f:8e:64:37:4a:5f:5f:46:b5:8a:ad:0e:02:06:cf:
43:88:0c:91:1d:9f:4c:78:f4:23:b9:b5:94:8e:c0:5d:4a:b8:
8e:b1:50:8b:d2:cd:d5:7a:a4:c0:37:e2:00:f1:2c:38:71:85:
a2:fc:ab:d3:6c:9c:aa:30:27:fa:10:3f:db:7a:e3:b6:0d:01:
7e:ba:e4:bf:31:79:3d:77:61:81:e2:24:d1:1b:cb:e8:8a:48:
a0:f1:3d:2c:9c:e3:b9:30:4a:86:f4:35:78:37:e2:92:ac:41:
d3:71:27:89:35:f8:27:df:c2:30:84:2f:df:31:a7:dc:5a:16:
19:a1:84:a3:1c:ab:da:82:1b:3f:3b:8d:97:68:fe:fd:52:7d:
e0:89:2e:4e:7b:2e:8b:ea:8d:b7:73:06:51:f2:17:62:f4:f1:
07:1d:65:8a:2e:e8:0c:64:1c:4e:6c:d4:47:46:97:2c:47:e5:
a3:3f:10:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:33:29 2025 by rpki-client