Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/74eae580-d878-4c03-9f29-3a263b955b28.roa
File: 74eae580-d878-4c03-9f29-3a263b955b28.roa (raw, json)
Hash identifier: JLt+ftr8veRRcDBjjUnDvpUVHx9SDSxd2j/rp/fy0d4=
Subject key identifier: D4:DA:83:07:9C:1E:DA:85:35:0D:42:03:C3:27:53:EE:28:67:F2:C7
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 4DC4955816D590C3C90D9E996EE97F2AEE89DA86
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/74eae580-d878-4c03-9f29-3a263b955b28.roa
Signing time: Fri 16 May 2025 15:10:19 +0000
ROA not before: Fri 16 May 2025 15:10:19 +0000
ROA not after: Fri 20 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dab9:c800::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 May 2025 00:52:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:c4:95:58:16:d5:90:c3:c9:0d:9e:99:6e:e9:7f:2a:ee:89:da:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 16 15:10:19 2025 GMT
Not After : Jun 20 23:59:59 2025 GMT
Subject: serialNumber=998d7189fa09724deb316a8b724cf0271ca0263de49b9a62c8b8085a17b99dc6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:20:d4:d0:47:af:bd:8c:6d:6e:cb:9f:70:
b3:ea:9c:e9:b8:ef:0c:e6:e8:2c:34:1d:27:a4:8a:
0d:99:e9:25:a4:2c:b6:6d:5a:9f:3e:36:3c:99:a3:
08:96:d2:9a:75:ca:86:26:fc:b1:31:9b:23:c7:b3:
1d:d1:24:2c:7c:d9:7f:d1:80:f5:6a:31:ab:dd:3f:
31:42:a7:88:77:49:53:36:26:a3:18:95:33:73:19:
1d:de:51:02:35:cc:a9:55:11:ad:25:ae:3f:a7:77:
71:c6:ba:78:23:9f:16:d1:bd:32:ad:60:ed:86:31:
4a:e4:1b:12:7e:9c:8a:52:1e:29:ad:d3:ad:48:6e:
66:49:dc:76:7d:8b:2e:74:3d:34:90:5b:33:28:50:
33:58:95:f9:57:a6:b2:a5:82:12:7b:80:a9:51:f0:
ef:59:cd:da:d0:29:86:49:06:58:83:1f:c2:f2:53:
42:f6:11:cb:9a:ab:ea:68:68:a3:5b:cf:4c:a5:4c:
11:c4:6f:10:52:e5:d7:18:33:f2:54:9b:e6:83:b1:
e1:e5:d0:b6:2b:f6:48:5f:4c:e2:2b:0c:a4:80:2c:
a5:41:18:1f:c3:a0:15:02:cb:6f:8d:09:21:37:d8:
e6:a6:d4:de:d7:f7:5a:94:83:87:24:7e:a4:62:43:
5f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DA:83:07:9C:1E:DA:85:35:0D:42:03:C3:27:53:EE:28:67:F2:C7
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/74eae580-d878-4c03-9f29-3a263b955b28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dab9:c800::/40
Signature Algorithm: sha256WithRSAEncryption
bc:9c:9a:3b:c1:8a:aa:e4:27:22:89:ce:2d:48:27:44:c1:d8:
79:c8:ae:d5:68:aa:0d:78:19:48:88:46:32:a7:3d:bb:5a:2b:
42:c5:dc:01:f2:22:07:fd:43:5f:b3:06:d4:fd:bd:b8:40:d3:
78:dd:14:97:42:02:0b:01:3b:44:b4:6a:d5:40:a0:2e:48:5e:
c2:4d:b6:d2:6a:f8:b1:35:36:03:a9:93:2f:a8:fe:33:ff:94:
42:1b:15:1f:0a:9b:fe:1d:d2:ce:74:a0:b5:c3:44:73:4a:e4:
dd:bb:a7:6f:6e:2e:28:59:9d:28:12:db:10:f0:1b:c6:d4:7c:
12:0e:70:af:8a:51:ab:1a:5a:30:79:d7:8a:cc:a7:14:d3:f6:
6d:ac:02:b2:d1:c6:50:f6:af:bd:d1:07:44:1b:66:de:40:0a:
8f:71:b0:88:d4:48:f2:2f:f3:bb:e0:a4:02:b8:bc:be:9e:79:
65:d8:27:5f:e8:7a:68:83:69:e0:71:48:28:00:ae:85:58:e3:
f7:2c:9c:d8:cf:a6:34:b0:09:ac:98:39:72:46:0f:08:df:12:
33:0e:60:50:91:1b:b5:d5:e6:39:0e:2a:e3:98:be:6f:d7:70:
29:b3:dc:40:1f:78:33:a1:e8:13:fb:74:88:e1:19:19:75:97:
4e:50:1c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:20:49 2025 by rpki-client