Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77766784-77cb-46dc-a6c1-db83f60a9e9c.roa
File: 77766784-77cb-46dc-a6c1-db83f60a9e9c.roa (raw, json)
Hash identifier: 9NbsGgJtjDTmZNsg4Cp/JmkIRbNMTQAlO0glkzjHGw8=
Subject key identifier: 91:30:AF:70:56:6E:B0:45:86:F1:E4:26:54:56:F8:1B:11:A5:96:AF
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 11D20E7F112433430B18ABBF66C035A819827755
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77766784-77cb-46dc-a6c1-db83f60a9e9c.roa
Signing time: Thu 22 May 2025 00:38:30 +0000
ROA not before: Thu 22 May 2025 00:38:30 +0000
ROA not after: Thu 26 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dab9:8c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 19:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:d2:0e:7f:11:24:33:43:0b:18:ab:bf:66:c0:35:a8:19:82:77:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 22 00:38:30 2025 GMT
Not After : Jun 26 23:59:59 2025 GMT
Subject: serialNumber=960c32dc561154d86ee1871281496d4f8226e3ca4816259de54d2627d1242ada, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:83:8f:14:cf:72:6a:10:f0:a9:c8:c5:e1:
45:97:84:39:6b:2b:fc:79:4b:da:c2:c3:49:8a:62:
d3:3b:81:1a:0c:31:2a:4f:b1:56:ec:84:82:db:55:
38:91:f7:65:3c:6e:9d:a6:38:2f:b6:b6:42:34:7a:
52:bc:63:81:d4:14:08:b2:e8:be:c3:b4:05:95:e8:
5b:30:31:c8:7c:e0:aa:0b:cc:00:a9:1d:17:88:ac:
ec:28:4a:ed:f7:24:2e:e2:5d:9b:28:8b:99:b6:2c:
9f:9b:3f:2c:c8:f1:d7:2a:78:e4:30:a6:77:20:5c:
ed:8a:ad:fb:cb:5c:ab:ac:6b:bd:73:a0:f9:7e:e2:
fe:09:2c:68:15:42:26:10:64:5c:d1:de:a4:b1:96:
5a:f4:f5:39:ee:a5:18:15:69:ca:84:6f:bf:e0:cf:
06:77:d1:9e:bf:38:41:da:d4:06:91:ab:f5:d2:97:
f8:ca:3b:3c:0c:ce:a9:fb:c1:1f:2a:3d:b3:8e:66:
7f:71:8d:00:ed:ff:e0:9d:eb:f6:48:a7:4d:6c:f8:
58:10:ba:bb:92:f4:b2:e0:62:f7:c9:e1:a5:6f:8c:
65:ef:51:30:76:e9:7e:98:87:4a:c1:49:b9:41:83:
63:33:10:d9:15:a1:bb:93:6f:91:30:57:15:a2:b1:
6a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:30:AF:70:56:6E:B0:45:86:F1:E4:26:54:56:F8:1B:11:A5:96:AF
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77766784-77cb-46dc-a6c1-db83f60a9e9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dab9:8c0::/48
Signature Algorithm: sha256WithRSAEncryption
54:1a:03:a4:76:61:cf:e7:66:13:46:44:92:ee:3d:45:9e:11:
7e:f8:ee:60:9c:1a:25:0e:2f:f9:88:e6:eb:0c:0d:88:c1:76:
70:f4:f3:57:6e:83:cf:89:a2:9b:20:7a:f2:e0:26:9f:b8:c1:
92:b3:61:22:d0:77:66:db:ba:0a:53:f3:63:02:ad:ff:7d:16:
f6:c1:61:f3:1c:15:7e:83:77:f4:2e:10:f6:64:47:f9:ee:8a:
d4:58:53:38:91:98:1c:d0:a7:29:18:2c:b3:5b:be:7e:2a:81:
88:cc:25:81:f7:6c:99:f0:22:2f:3c:87:93:ec:ac:cf:0c:2d:
b9:10:84:08:91:fb:df:30:2e:4b:3e:b6:18:1e:e0:de:b7:ba:
9b:6b:70:1f:70:3a:23:c3:75:bd:48:4a:7a:77:2b:80:6d:ac:
4c:cc:47:28:74:0b:e0:ee:d2:97:e8:d7:46:3b:a7:f0:ae:de:
ca:f8:00:06:20:9a:5e:a5:d9:20:92:4a:06:57:89:f9:b3:25:
1f:06:e0:3e:d1:b4:4a:39:98:c8:d1:ae:11:2c:b4:8b:df:0f:
e3:db:e6:ee:cd:2d:fa:e6:d8:5a:46:b2:73:12:48:80:ae:41:
24:99:51:41:c9:0d:00:7f:08:d3:93:23:05:e0:72:12:91:e3:
4c:1f:e9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:13:01 2025 by rpki-client