Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/713c8f81-96fb-4a8d-ba7b-a964e2fa2b25.roa
File: 713c8f81-96fb-4a8d-ba7b-a964e2fa2b25.roa (raw, json)
Hash identifier: Ad8S1/MVUHGz6rw4ucU6w4Dqx8Ib06SSfe1wEB1gh8g=
Subject key identifier: 16:A0:6E:AF:52:91:10:79:1E:32:AD:07:13:08:CF:BB:CE:2E:18:EE
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 76158C979650433E9325962023B45A4AD552285E
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/713c8f81-96fb-4a8d-ba7b-a964e2fa2b25.roa
Signing time: Mon 12 May 2025 15:10:03 +0000
ROA not before: Mon 12 May 2025 15:10:03 +0000
ROA not after: Mon 16 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dabb:2800::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 03 Jun 2025 20:07:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:15:8c:97:96:50:43:3e:93:25:96:20:23:b4:5a:4a:d5:52:28:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 12 15:10:03 2025 GMT
Not After : Jun 16 23:59:59 2025 GMT
Subject: serialNumber=9ec1e17dc42045f411fa14805c97a9b00f57ea5483a6c3f64eeca381cf86dcee, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cf:9e:18:4e:b5:7d:43:01:ba:57:b0:71:e1:
d9:c6:5d:9a:1e:76:00:89:d9:a9:f1:e1:00:ed:e9:
73:5b:a4:3b:6f:93:3a:cc:41:57:79:3a:1d:e7:f2:
0f:85:9d:e8:b4:a1:0c:6a:d2:34:b7:ec:4a:ed:9b:
fa:46:d0:40:85:16:98:17:68:3c:46:54:a2:9f:ba:
2b:60:fd:36:d8:ac:0c:18:0c:3f:1b:07:d9:ca:97:
02:8c:58:11:48:02:c9:e2:8c:73:16:c9:39:49:80:
31:5f:6f:aa:46:ea:c7:e6:cc:c4:2f:dc:c7:b3:1b:
00:b2:e6:01:a4:96:ae:6a:4a:e8:77:28:1f:4d:d6:
6c:3e:24:a9:63:9b:e8:51:8f:ff:6c:23:d8:00:c9:
f6:64:d2:2f:6b:e0:d1:25:65:63:a5:fd:2a:b2:a1:
a5:1b:2f:b8:ed:e6:3a:23:45:c4:eb:c6:15:a5:a5:
1c:2f:1c:f7:ef:db:9d:9c:09:2d:ab:80:97:c9:f5:
12:34:7b:ed:e2:97:80:df:ee:0b:70:d3:32:28:69:
36:9f:9f:58:45:29:32:36:4e:f0:06:10:1b:49:af:
50:0e:6b:a6:1d:0f:a4:02:a2:48:6e:a7:1b:93:2d:
58:b8:1f:3e:be:9f:b2:7e:a9:f3:1b:c4:bd:9e:9e:
0a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A0:6E:AF:52:91:10:79:1E:32:AD:07:13:08:CF:BB:CE:2E:18:EE
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/713c8f81-96fb-4a8d-ba7b-a964e2fa2b25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dabb:2800::/40
Signature Algorithm: sha256WithRSAEncryption
26:7b:a2:12:74:40:a8:0e:c0:4a:8d:58:90:01:c9:65:8f:72:
c4:f2:e4:04:f5:cb:b0:d3:d3:90:e2:47:a6:91:0c:5b:65:f7:
f5:7c:f3:61:69:fb:53:ed:61:c1:55:38:6a:6d:c5:43:e7:ba:
e0:17:a4:0c:9a:bd:f4:fa:e5:7d:a4:c4:40:63:40:4c:56:d8:
2a:37:22:4f:75:a4:6a:5c:d6:21:39:f2:4a:1c:8c:05:e1:7e:
6d:b3:75:5e:3f:00:0f:35:7a:59:2d:24:a5:4d:a3:90:e1:83:
d6:0c:e8:b3:50:4b:1e:68:02:cf:9d:9d:df:c5:94:de:a0:b2:
fe:ba:66:d8:c8:91:0c:a5:dd:f9:b9:f1:70:70:2e:c8:5e:0c:
8e:81:97:02:a7:5c:85:a7:79:80:2c:0d:93:7d:64:5a:58:f4:
be:de:4a:b8:27:1a:3a:b6:2b:66:b1:04:3d:94:a9:ff:bd:23:
b2:e7:53:8e:7d:fc:d1:3c:35:db:d9:20:4b:90:7f:34:67:56:
ff:3b:29:cd:c7:10:cd:6f:16:a2:6a:3c:47:aa:d1:16:80:c0:
fb:f3:2c:c6:ef:9d:11:20:f1:9f:13:e8:a2:4f:6c:61:e8:3b:
5a:33:1b:1a:02:1f:23:62:b5:55:9d:ce:0a:f2:16:2c:71:87:
92:4e:14:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:09:26 2025 by rpki-client