Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/652666fe-aad6-4cd8-8e35-91322c742337.roa
File: 652666fe-aad6-4cd8-8e35-91322c742337.roa (raw, json)
Hash identifier: TVGzTcuVIYxy3+FEqBJE+laRHQtQtJ2aRrRqtwmMwJk=
Subject key identifier: 46:AA:2A:07:21:CC:C1:4C:A3:74:96:E3:68:54:B8:66:C8:6D:E2:BB
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 3AB1B88A6E438BCC5B2BBFC9AF99AD452F8938D2
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/652666fe-aad6-4cd8-8e35-91322c742337.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daff:9000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 16:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:b1:b8:8a:6e:43:8b:cc:5b:2b:bf:c9:af:99:ad:45:2f:89:38:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:4f:3c:22:42:7a:12:8d:b5:2a:a2:d7:f1:
4e:44:cc:e5:e3:b8:6a:8d:b3:a8:c7:9e:57:ab:6c:
48:b3:49:6a:60:3f:f8:6a:1e:4a:0f:db:b7:be:10:
5a:b2:70:8e:74:a0:d4:b8:92:f3:fb:d2:cb:8f:7b:
b8:f1:d5:30:18:49:a6:3d:fc:01:47:8c:0a:ea:4b:
78:0e:2d:bd:15:47:04:66:58:ed:cb:1b:70:11:26:
1f:e7:74:8b:cd:3b:a1:47:83:43:84:73:ae:b5:b1:
92:13:64:5e:30:1a:84:c4:0c:cf:bd:24:68:5a:88:
0c:02:86:f5:16:56:b3:e1:00:1f:49:7c:02:79:e8:
ef:53:40:d1:e8:a3:3b:f0:b8:0b:50:a8:3b:99:0e:
b1:74:94:54:d1:2b:d4:6a:32:c5:36:46:47:f9:6d:
4e:9a:3e:db:8d:14:21:01:0f:08:29:ed:e9:87:5c:
61:25:a5:79:5a:32:a9:71:8f:d7:a5:b9:10:df:17:
fc:b1:5d:79:3e:a3:03:a4:b5:0c:be:06:2c:43:c6:
6c:78:7c:bb:de:27:8f:06:06:4c:2f:6f:3b:c9:f0:
da:0e:94:18:7e:b0:9a:c6:90:3a:ad:9e:d0:52:03:
1e:55:12:e3:8f:6d:11:67:62:50:9c:90:53:ca:15:
06:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AA:2A:07:21:CC:C1:4C:A3:74:96:E3:68:54:B8:66:C8:6D:E2:BB
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/652666fe-aad6-4cd8-8e35-91322c742337.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daff:9000::/40
Signature Algorithm: sha256WithRSAEncryption
73:bc:7e:90:81:d4:98:ca:8b:40:06:eb:d1:bd:71:5a:7c:44:
58:c5:1f:cf:15:34:e8:88:dc:be:27:f7:87:29:83:c4:ee:cb:
f3:ed:a2:42:d0:64:49:31:98:9c:81:88:0e:3c:08:cd:56:a0:
8d:c0:04:00:1a:e2:66:32:3a:e4:a9:97:ea:fc:04:49:f3:a4:
14:13:a6:7e:15:96:9b:22:7c:e1:f3:8c:0b:cc:a1:73:81:67:
08:2b:dd:90:6d:06:9f:ed:d7:b2:db:bb:b3:d5:97:6f:d4:55:
35:b5:59:57:99:14:f4:7c:71:16:f7:ed:60:f2:e5:7c:b0:36:
1f:de:ac:60:32:ee:d5:79:df:57:8d:eb:d0:38:9b:eb:f2:7d:
bf:3a:ae:34:99:97:60:d8:6a:75:84:d2:94:fd:ba:0e:26:48:
3a:4e:e8:03:36:64:e9:ba:f5:ed:c9:3d:f3:c5:45:cf:2a:12:
4a:6f:2e:8d:6b:93:df:f6:6a:99:1a:22:27:af:2c:44:82:ad:
00:2f:0b:c5:49:36:48:68:76:87:d8:19:f3:9f:25:cc:84:a8:
97:f1:8f:a3:d4:1b:7d:4a:98:ec:bc:4d:48:28:46:1c:5b:09:
13:45:5b:c8:fe:be:9c:55:8d:e3:c3:49:a5:e5:2f:e6:c4:b5:
7d:b8:b2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 03:51:55 2025 by rpki-client