Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6258dbd6-4bf6-4a16-898b-b5bba709d9ea.roa
File: 6258dbd6-4bf6-4a16-898b-b5bba709d9ea.roa (raw, json)
Hash identifier: R3K2hLFMLzmG3GyXHyyGrBDZAOUL19v95VZhxxIIazc=
Subject key identifier: 90:C0:F4:44:C8:CC:F9:00:AF:82:48:DA:47:54:02:84:38:4F:55:1E
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 173B4F13EE1E7A6AF7D2896599B1C13036541F85
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6258dbd6-4bf6-4a16-898b-b5bba709d9ea.roa
Signing time: Thu 22 May 2025 00:51:55 +0000
ROA not before: Thu 22 May 2025 00:51:55 +0000
ROA not after: Thu 26 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dab9:c880::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 19:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:3b:4f:13:ee:1e:7a:6a:f7:d2:89:65:99:b1:c1:30:36:54:1f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 22 00:51:55 2025 GMT
Not After : Jun 26 23:59:59 2025 GMT
Subject: serialNumber=c0f44b97c67ac928e86f463951b2f382652efa861c23a7c4e825b847257e7049, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c3:c0:62:87:20:aa:98:1b:fb:a2:e4:fe:56:
b2:7f:37:02:c2:f1:39:4f:a1:d4:02:36:14:65:72:
53:36:59:93:22:23:97:03:c8:1d:3c:08:50:bf:42:
d1:56:d7:0e:0f:08:b6:b7:f6:7b:e9:6d:b3:c8:7d:
a0:2d:0b:26:72:e3:b2:b3:b0:01:19:fc:e9:fd:73:
07:4d:35:62:2b:ac:3e:36:34:c6:22:fe:21:4c:f6:
c6:17:c0:a6:10:28:e1:f5:e9:44:aa:19:6d:43:4f:
fe:4a:fe:03:95:41:1a:8c:4f:5a:23:ae:1c:f4:9f:
ac:49:7d:00:51:51:2a:4d:a3:19:2c:27:15:30:7f:
1b:f5:a2:9a:9b:9f:ac:5e:17:1c:24:13:d6:31:69:
e2:6e:a2:85:0d:d1:46:0e:8f:06:d7:cf:f1:45:e8:
1a:65:46:18:53:82:79:ab:80:1e:e9:de:e6:cd:71:
7b:36:eb:c2:7c:a8:5b:f2:3d:8e:41:3b:5f:4a:14:
9d:b1:2b:6c:32:fe:37:ab:ad:3c:5b:bf:09:26:22:
ef:6e:5c:cd:a4:53:7a:01:45:3a:e6:ab:60:48:22:
72:57:23:33:4e:4c:4a:15:81:a4:ab:8b:88:10:38:
16:76:d4:89:eb:2e:80:af:22:61:c5:bb:08:5f:e3:
a3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C0:F4:44:C8:CC:F9:00:AF:82:48:DA:47:54:02:84:38:4F:55:1E
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6258dbd6-4bf6-4a16-898b-b5bba709d9ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dab9:c880::/48
Signature Algorithm: sha256WithRSAEncryption
55:a5:33:3f:16:08:9d:33:ce:ce:63:98:77:e7:53:0d:fd:a9:
e9:05:e2:53:99:dc:a4:00:78:a7:7e:43:d3:4a:0a:cc:d3:e3:
d4:88:31:6d:f4:78:f2:60:f6:93:54:97:42:ca:a5:f5:2f:66:
30:c5:92:51:3e:a5:6f:76:d1:9c:e3:43:33:1a:27:15:d0:71:
3e:84:3e:d9:65:6c:54:11:42:19:b9:76:cc:69:2a:37:bc:43:
12:30:cc:a0:d5:16:fb:33:5d:c6:8e:6b:6c:03:1f:97:78:63:
b4:d7:6f:e4:33:3d:82:b9:fc:17:2d:db:9b:c8:26:0e:bb:ef:
72:06:a6:87:85:f9:60:12:c2:9a:c5:02:74:0c:f8:09:4b:91:
7a:e3:e3:94:3f:e4:85:3c:d0:02:1f:cc:b2:39:01:dd:d7:6b:
47:ba:9a:fe:93:b0:4d:cf:9b:5e:00:73:cd:1d:39:ca:0b:59:
4e:67:d7:1d:a9:02:58:15:54:6b:85:af:b8:ea:59:1f:99:45:
ee:00:cf:df:be:2c:35:24:58:b1:ec:e3:f2:5b:73:4b:4c:41:
31:7e:2f:1f:89:b4:1a:bf:88:3e:77:88:b5:3b:af:10:28:63:
33:9a:f2:65:6d:19:3c:be:3c:ef:22:50:1e:0e:03:94:ce:eb:
51:2e:a2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:26:10 2025 by rpki-client