Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/715401ae-53b0-4eb2-98a7-a712d8ef7d9f.roa
File: 715401ae-53b0-4eb2-98a7-a712d8ef7d9f.roa (raw, json)
Hash identifier: hbS4MngMkmLAugSm9pCtr/KUEHMBXopRANooIQiCGyA=
Subject key identifier: 31:77:CF:30:0B:76:44:20:B9:6C:3A:B0:E2:89:A1:36:F8:63:E0:D3
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 274F2FC44D517F984288D21BFF1101C5D07DB433
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/715401ae-53b0-4eb2-98a7-a712d8ef7d9f.roa
Signing time: Thu 22 May 2025 00:51:56 +0000
ROA not before: Thu 22 May 2025 00:51:56 +0000
ROA not after: Thu 26 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dab9:c8c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 19:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:4f:2f:c4:4d:51:7f:98:42:88:d2:1b:ff:11:01:c5:d0:7d:b4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 22 00:51:56 2025 GMT
Not After : Jun 26 23:59:59 2025 GMT
Subject: serialNumber=9ddbafa0f487ffda78d43887f6963d54afb19b41f6701d994a7b77beab77a58c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b0:82:8e:d7:84:88:99:9f:d9:5e:ae:17:45:
04:51:13:eb:e2:0e:7c:bd:4f:26:c4:51:b7:68:81:
91:eb:e4:1f:ed:aa:f6:71:31:da:da:4b:8d:3b:ec:
af:c3:fc:c8:c0:f4:36:1f:b7:f4:e9:a8:bc:62:c2:
aa:94:d6:0f:57:96:e8:2f:90:5a:e4:77:24:ab:3b:
ef:56:c4:af:f6:13:18:c3:ea:b4:77:d1:f1:df:52:
d1:a0:3d:38:0a:51:cd:11:da:0a:fb:bd:57:ea:8e:
1f:b4:56:f3:2a:06:4d:11:8a:c5:ef:c9:ca:23:37:
5f:11:e1:68:88:0d:66:01:84:28:68:c3:5b:0e:4d:
4c:ba:6e:84:54:0a:1a:d6:14:af:ce:6b:e2:c8:9e:
de:34:17:e3:3b:18:b4:19:7c:47:04:01:60:d3:25:
dd:bd:82:bd:e0:59:6a:dc:0f:78:3e:a6:d7:61:a9:
df:ec:33:7a:46:53:25:cc:d8:bb:0c:89:e2:55:d3:
dc:07:7c:e2:cb:36:ed:c7:b5:fc:4b:cc:a9:33:9b:
a6:7c:34:21:e7:6d:e3:d2:b4:8c:4e:ad:47:2c:f0:
4e:aa:5a:d1:b7:6b:04:8c:6c:76:d8:bb:95:d8:cd:
af:5b:b6:68:b2:a5:89:53:57:31:67:16:e3:3d:ca:
29:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:77:CF:30:0B:76:44:20:B9:6C:3A:B0:E2:89:A1:36:F8:63:E0:D3
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/715401ae-53b0-4eb2-98a7-a712d8ef7d9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dab9:c8c0::/48
Signature Algorithm: sha256WithRSAEncryption
65:b4:ea:40:2b:c1:ef:cc:29:c6:ef:2a:43:ca:10:3f:8c:34:
e6:c6:eb:fd:e7:4d:11:0f:fd:a0:aa:68:94:d7:46:0f:a3:54:
62:0e:d8:92:f3:13:04:8c:6d:81:e6:8c:2d:f5:4e:00:be:15:
1c:a2:d5:ae:9d:2f:a6:87:9c:9d:2a:a6:42:0a:e3:a5:2b:02:
f6:2c:4e:6c:96:b6:4c:db:b6:92:32:e0:0e:33:c4:64:8c:20:
51:d1:13:29:21:bf:4d:84:38:98:b4:68:f2:96:8c:dd:3d:c7:
b1:ff:75:b3:7b:39:5d:0c:6f:2f:3f:7f:8c:ae:6e:35:c5:d0:
79:e1:7a:63:bf:54:97:a6:44:46:44:04:2c:0e:0e:42:cf:05:
e9:ef:0d:72:c0:f4:89:49:38:1c:d6:ae:23:89:08:27:54:c3:
d9:2e:00:91:f3:9d:a0:67:e0:76:53:d4:d6:05:35:7c:b5:46:
6b:35:fe:77:3a:74:f5:f6:0e:69:5b:59:45:81:fc:20:2e:9c:
34:4d:f3:01:f7:1f:cf:12:96:0f:08:01:a2:70:06:b5:5e:d2:
63:e7:42:4d:56:a2:4a:8e:5f:67:ec:71:4b:26:a8:8b:ac:85:
45:2d:d9:30:c9:22:02:d5:5d:85:f3:f9:b2:bc:ae:83:1c:3d:
34:df:bd:86
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUJ08vxE1Rf5hCiNIb/xEBxdB9tDMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUyMjAwNTE1NloX
DTI1MDYyNjIzNTk1OVowejFJMEcGA1UEBRNAOWRkYmFmYTBmNDg3ZmZkYTc4ZDQz
ODg3ZjY5NjNkNTRhZmIxOWI0MWY2NzAxZDk5NGE3Yjc3YmVhYjc3YTU4YzEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrCCjteEiJmf2V6uF0UEURPr4g58
vU8mxFG3aIGR6+Qf7ar2cTHa2kuNO+yvw/zIwPQ2H7f06ai8YsKqlNYPV5boL5Ba
5HckqzvvVsSv9hMYw+q0d9Hx31LRoD04ClHNEdoK+71X6o4ftFbzKgZNEYrF78nK
IzdfEeFoiA1mAYQoaMNbDk1Mum6EVAoa1hSvzmviyJ7eNBfjOxi0GXxHBAFg0yXd
vYK94Flq3A94PqbXYanf7DN6RlMlzNi7DIniVdPcB3ziyzbtx7X8S8ypM5umfDQh
523j0rSMTq1HLPBOqlrRt2sEjGx22LuV2M2vW7ZosqWJU1cxZxbjPcopzwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFDF3zzALdkQguWw6sOKJoTb4Y+DTMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzcxNTQwMWFlLTUzYjAtNGViMi05OGE3LWE3MTJkOGVmN2Q5Zi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAbaucjAMA0GCSqGSIb3DQEBCwUAA4IBAQBltOpAK8HvzCnG7ypD
yhA/jDTmxuv9500RD/2gqmiU10YPo1RiDtiS8xMEjG2B5owt9U4AvhUcotWunS+m
h5ydKqZCCuOlKwL2LE5slrZM27aSMuAOM8RkjCBR0RMpIb9NhDiYtGjylozdPcex
/3WzezldDG8vP3+Mrm41xdB54Xpjv1SXpkRGRAQsDg5CzwXp7w1ywPSJSTgc1q4j
iQgnVMPZLgCR852gZ+B2U9TWBTV8tUZrNf53OnT19g5pW1lFgfwgLpw0TfMB9x/P
EpYPCAGicAa1XtJj50JNVqJKjl9n7HFLJqiLrIVFLdkwySIC1V2F8/myvK6DHD00
372G
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:12:57 2025 by rpki-client