Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f02c5e6-ffee-4777-b0fd-d0651418af2b.roa
File: 5f02c5e6-ffee-4777-b0fd-d0651418af2b.roa (raw, json)
Hash identifier: HlMIuUJpNYsNEmk1MgKWUDeqeIa9E9khFlbFXGKsPbs=
Subject key identifier: 40:A5:61:21:5C:27:E2:95:AE:4E:A6:92:58:FA:11:C8:16:26:F3:64
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 6463BD37AE6955C221848AA1040A528756DFEE78
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f02c5e6-ffee-4777-b0fd-d0651418af2b.roa
Signing time: Wed 30 Jul 2025 00:50:46 +0000
ROA not before: Wed 30 Jul 2025 00:50:46 +0000
ROA not after: Wed 03 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dafb:2020::/46 maxlen: 48
Validation: Failed, certificate revoked on Wed 30 Jul 2025 18:37:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:63:bd:37:ae:69:55:c2:21:84:8a:a1:04:0a:52:87:56:df:ee:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jul 30 00:50:46 2025 GMT
Not After : Sep 3 23:59:59 2025 GMT
Subject: serialNumber=5405edb94e3e08d866fc2fe2eb951167164cf9873167fab6e66d6bbb78376f18, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3d:8a:20:5e:12:1d:85:4b:d8:cf:4c:81:88:
38:8d:8c:64:57:69:b9:68:94:a7:af:cb:87:20:f0:
37:58:ce:32:3e:ac:dd:73:32:28:aa:b6:72:0c:1c:
c8:95:08:19:75:3e:c9:ce:93:1e:e7:aa:e4:b7:81:
b2:d8:4b:a4:dc:ee:f7:d8:4a:b9:7c:cb:43:42:81:
e7:5c:63:40:84:f3:2a:17:81:6c:37:e6:29:77:17:
da:15:10:51:27:4d:3a:2f:88:3a:ef:0c:72:80:ea:
cf:ab:b8:f5:fd:c4:49:3c:85:26:9e:01:ca:11:d7:
74:35:02:7b:b6:10:25:df:9a:0f:a1:18:08:a3:c6:
3e:38:cb:af:45:e8:ce:28:0c:e1:17:82:13:18:4f:
1a:ec:14:42:03:51:36:9f:9a:e3:c1:4c:84:52:82:
80:2d:b0:be:42:55:af:32:0f:3f:08:8d:fb:c6:dd:
9c:f6:1c:75:bc:53:ef:9a:b4:10:02:7d:79:dc:47:
4c:38:75:a6:9b:45:35:f3:81:16:89:db:a9:2e:29:
b8:aa:c0:c2:ab:a2:2c:97:45:c4:24:cd:0f:21:a4:
b9:25:8d:c1:0c:2a:41:0c:c1:04:aa:7e:6c:67:a8:
34:c4:01:f1:5e:2b:6c:3c:c3:78:3b:01:3e:dc:0f:
87:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A5:61:21:5C:27:E2:95:AE:4E:A6:92:58:FA:11:C8:16:26:F3:64
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f02c5e6-ffee-4777-b0fd-d0651418af2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dafb:2020::/46
Signature Algorithm: sha256WithRSAEncryption
13:2f:0c:20:ae:81:59:c9:ba:b1:fd:eb:04:10:1b:34:1d:9c:
98:37:4e:69:16:cb:1d:1b:9e:12:0c:ba:b0:b5:9f:c7:af:58:
14:c8:f6:c9:32:82:dc:96:01:72:b8:30:a4:c0:6a:67:f7:c4:
97:01:13:6b:b7:b6:26:d3:2d:55:42:56:25:41:99:33:4c:b2:
f7:1f:3e:49:6a:08:1c:ad:68:49:42:52:20:ee:17:4d:55:7d:
9a:0a:a4:aa:5b:22:40:0b:b3:48:ee:2c:4d:65:6e:93:4d:e7:
cb:00:da:fa:b3:99:50:93:17:f7:04:a0:d5:a2:c3:85:dd:d7:
d5:91:ee:be:df:96:15:6d:d7:f0:61:3a:55:36:fc:06:32:04:
e1:d3:0d:f4:5f:76:fc:09:44:cb:02:88:d3:05:1d:0d:58:e0:
46:29:57:a7:a9:48:21:2d:af:3b:f5:e8:29:ff:04:b4:c7:48:
46:fa:3b:79:38:11:7c:90:d3:f6:89:e5:24:82:f4:8e:17:c8:
f9:4d:d7:69:f3:a7:a6:a1:3c:b3:e4:1a:84:2f:45:67:fb:fb:
e7:e2:4a:63:07:c9:e9:65:6a:63:be:2d:0a:22:0a:57:c3:23:
ab:11:0b:32:81:aa:f2:0f:30:82:86:11:e4:bf:03:38:52:7c:
bc:70:d6:02
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUZGO9N65pVcIhhIqhBApSh1bf7ngwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDczMDAwNTA0NloX
DTI1MDkwMzIzNTk1OVowejFJMEcGA1UEBRNANTQwNWVkYjk0ZTNlMDhkODY2ZmMy
ZmUyZWI5NTExNjcxNjRjZjk4NzMxNjdmYWI2ZTY2ZDZiYmI3ODM3NmYxODEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz2KIF4SHYVL2M9MgYg4jYxkV2m5
aJSnr8uHIPA3WM4yPqzdczIoqrZyDBzIlQgZdT7JzpMe56rkt4Gy2Euk3O732Eq5
fMtDQoHnXGNAhPMqF4FsN+YpdxfaFRBRJ006L4g67wxygOrPq7j1/cRJPIUmngHK
Edd0NQJ7thAl35oPoRgIo8Y+OMuvRejOKAzhF4ITGE8a7BRCA1E2n5rjwUyEUoKA
LbC+QlWvMg8/CI37xt2c9hx1vFPvmrQQAn153EdMOHWmm0U184EWidupLim4qsDC
q6Isl0XEJM0PIaS5JY3BDCpBDMEEqn5sZ6g0xAHxXitsPMN4OwE+3A+HnQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFEClYSFcJ+KVrk6mklj6EcgWJvNkMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzVmMDJjNWU2LWZmZWUtNDc3Ny1iMGZkLWQwNjUxNDE4YWYyYi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcCJAba+yAgMA0GCSqGSIb3DQEBCwUAA4IBAQATLwwgroFZybqx/esE
EBs0HZyYN05pFssdG54SDLqwtZ/Hr1gUyPbJMoLclgFyuDCkwGpn98SXARNrt7Ym
0y1VQlYlQZkzTLL3Hz5JaggcrWhJQlIg7hdNVX2aCqSqWyJAC7NI7ixNZW6TTefL
ANr6s5lQkxf3BKDVosOF3dfVke6+35YVbdfwYTpVNvwGMgTh0w30X3b8CUTLAojT
BR0NWOBGKVenqUghLa879egp/wS0x0hG+jt5OBF8kNP2ieUkgvSOF8j5Tddp86em
oTyz5BqEL0Vn+/vn4kpjB8npZWpjvi0KIgpXwyOrEQsygaryDzCChhHkvwM4Uny8
cNYC
-----END CERTIFICATE-----
Generated at Thu Jul 31 01:04:11 2025 by rpki-client