Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e642a03-5f13-42f1-a402-f293b203265d.roa
File: 7e642a03-5f13-42f1-a402-f293b203265d.roa (raw, json)
Hash identifier: h3whK0y3HZmzt61vLTYQlqdVUvmZAihML3rdYMrmd0Y=
Subject key identifier: AF:F4:CD:FB:3C:B5:65:F2:7A:23:AF:3D:D1:63:BA:B2:B1:EE:52:BB
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 6CA216E31BD22A46D34C710A11CAF0D21BB7FCE4
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e642a03-5f13-42f1-a402-f293b203265d.roa
Signing time: Wed 30 Jul 2025 00:51:29 +0000
ROA not before: Wed 30 Jul 2025 00:51:29 +0000
ROA not after: Wed 03 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf7:c800::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 30 Jul 2025 18:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a2:16:e3:1b:d2:2a:46:d3:4c:71:0a:11:ca:f0:d2:1b:b7:fc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jul 30 00:51:29 2025 GMT
Not After : Sep 3 23:59:59 2025 GMT
Subject: serialNumber=5dacb656028d275c1e5fd7dc43692d146f3db8e65e0c9dd42714487142d62ea9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:45:36:ca:58:db:e9:f9:d2:0b:46:c8:26:d2:
5d:c6:bc:16:d5:f9:eb:b6:dc:85:bc:c5:c4:87:94:
4f:7e:5d:dc:3f:b9:64:2a:76:3a:df:94:96:8a:4d:
f8:59:a4:1e:13:96:06:72:99:23:ee:07:c2:02:7a:
b6:2a:89:a4:d0:f3:d7:3b:7d:1c:e5:05:95:8d:c9:
d6:6d:f7:18:5c:ea:a7:d6:76:c9:a5:9a:fe:50:41:
75:7c:76:9d:64:b5:38:4d:42:7e:ce:cf:ab:28:5c:
84:28:39:f6:45:56:d3:ce:87:b4:dd:f6:04:a3:38:
73:83:8d:71:3d:9b:e6:c6:32:37:d4:00:34:3d:a0:
4c:13:47:12:ff:70:76:1c:18:fa:ef:83:17:7c:b0:
3f:b0:06:77:85:c6:2d:a7:5e:f4:01:6b:bb:e5:06:
da:f5:3b:95:98:b8:4a:28:09:be:0c:70:76:2c:96:
a0:b3:68:e6:99:a2:84:0d:85:eb:47:d4:1f:4d:2a:
46:db:89:bf:bc:56:76:3c:46:0c:21:87:8f:a6:4b:
83:ff:48:94:c5:55:d9:29:9d:12:df:12:85:08:be:
a2:19:4b:d7:ae:17:95:be:63:c6:d1:a4:59:c8:3e:
32:ba:e9:19:52:c5:82:0e:4e:c2:d7:08:db:6e:e3:
c4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F4:CD:FB:3C:B5:65:F2:7A:23:AF:3D:D1:63:BA:B2:B1:EE:52:BB
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e642a03-5f13-42f1-a402-f293b203265d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf7:c800::/40
Signature Algorithm: sha256WithRSAEncryption
6a:de:3b:73:10:4e:cd:82:76:fa:2a:7e:11:58:29:13:67:f5:
1d:b5:74:76:f6:90:2d:03:5c:a4:3e:5e:cd:8d:63:44:93:1b:
ad:09:9a:23:dd:3b:54:9d:08:f7:df:2c:e7:21:e4:ea:af:f8:
9c:e3:56:f3:53:84:95:8e:83:3c:d2:f7:aa:da:3e:15:32:e2:
48:cd:7c:1f:95:ca:ad:d6:e6:30:c1:94:21:b0:8f:c6:f8:c1:
36:d9:48:38:31:e4:a0:10:6a:9f:20:b8:71:80:37:f6:bf:be:
13:79:40:98:f0:d4:1f:ed:93:a4:48:0f:1b:18:cb:88:8b:a2:
8b:8a:a9:0a:de:da:46:ce:3b:cd:a0:db:78:79:8b:08:46:b5:
d6:96:d4:d4:66:d4:ff:7d:1f:07:9f:85:a3:85:b4:cc:12:49:
0d:28:9c:0d:e7:63:cf:77:d6:3c:20:45:f5:2c:25:e9:0b:1a:
0a:4e:86:38:3e:de:30:5d:26:b8:88:45:4e:5e:54:36:f8:4e:
3a:9e:0f:39:28:3e:91:17:77:2e:bc:1e:a3:94:b0:83:5e:f5:
df:1b:00:b1:24:ed:0c:7e:4c:8d:21:2b:b4:de:ff:0e:51:59:
b6:25:66:c0:5a:7b:ac:31:93:e2:97:49:e7:ea:bc:6f:35:16:
17:cb:69:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 01:00:19 2025 by rpki-client