Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80cc7c37-3012-4875-809a-e11a9f2ebbbb.roa
File: 80cc7c37-3012-4875-809a-e11a9f2ebbbb.roa (raw, json)
Hash identifier: ZX3pvpHOWaQvnyMFQ6n78FiDW3ZE3Pce98tlQD20NWw=
Subject key identifier: 8A:CE:93:0E:AD:A0:A4:2E:C0:08:FE:F1:A7:65:F7:A3:60:45:AF:AF
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 1B2CAE9C539EC8882B6342F2012C5368D6D2503D
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80cc7c37-3012-4875-809a-e11a9f2ebbbb.roa
Signing time: Wed 30 Jul 2025 00:10:15 +0000
ROA not before: Wed 30 Jul 2025 00:10:15 +0000
ROA not after: Wed 03 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da69:c8c0::/46 maxlen: 48
Validation: Failed, certificate revoked on Wed 30 Jul 2025 18:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:2c:ae:9c:53:9e:c8:88:2b:63:42:f2:01:2c:53:68:d6:d2:50:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jul 30 00:10:15 2025 GMT
Not After : Sep 3 23:59:59 2025 GMT
Subject: serialNumber=62c919d3c3e8e8ab4ce45cd82d0769cd71fc8f5eb9473a3a2a12fa024f3881e1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:e6:e7:c4:ad:ed:63:ab:3c:28:c1:0b:7c:
52:14:38:d5:82:58:97:a1:12:d1:86:e8:f6:0d:d2:
4b:f4:28:f2:7b:36:3a:82:e8:9c:75:32:6b:ad:da:
7f:d5:b4:ab:b3:eb:04:eb:5c:76:52:7c:30:41:f4:
30:ff:f4:8d:f2:b5:42:48:21:56:47:0c:42:8c:a5:
7d:80:61:08:f4:e5:1b:e6:21:dc:14:70:1b:a1:f2:
0d:63:91:d0:30:af:d4:d9:66:2a:d8:71:01:25:49:
b4:e6:47:a9:d2:c6:e5:99:1f:9d:88:a9:e1:ef:26:
51:7e:24:e3:a1:84:39:a2:68:58:5b:de:8b:1e:a6:
b4:82:52:a5:75:ff:91:72:d0:27:62:6a:d0:75:e4:
b0:ef:29:d5:9e:5c:c7:aa:e3:7f:cf:ab:c4:09:a8:
3b:4a:24:8f:42:e3:26:17:e0:71:2c:8c:54:81:9a:
21:8e:cf:4d:c7:ba:76:ed:88:40:f5:e1:80:31:f6:
13:4b:7e:1b:49:b4:19:04:08:a0:26:5f:0a:8a:3d:
2c:08:d9:65:2c:77:93:ea:5f:d4:f7:6d:53:29:54:
80:cc:c1:cb:d6:90:97:45:10:f2:06:8e:e7:e4:e3:
66:9f:34:45:34:d0:00:c9:3e:4c:00:6a:fb:cc:9f:
a1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CE:93:0E:AD:A0:A4:2E:C0:08:FE:F1:A7:65:F7:A3:60:45:AF:AF
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80cc7c37-3012-4875-809a-e11a9f2ebbbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da69:c8c0::/46
Signature Algorithm: sha256WithRSAEncryption
3f:dd:bf:59:e2:b8:ff:87:61:9b:3f:fd:1b:d0:45:c2:ce:6f:
2e:e3:db:3c:58:a5:71:d2:af:23:59:12:12:e2:84:57:7f:5d:
ea:21:c2:ac:33:53:f3:52:6a:8c:b0:82:98:28:b4:9b:9d:f7:
4c:24:00:a2:3c:f6:28:43:fd:98:5b:68:72:31:2a:b8:25:8f:
c4:30:95:cc:d5:85:be:c8:ca:fa:af:c6:cb:a7:df:68:36:82:
d5:77:f0:c7:e2:e8:2f:1f:c7:70:3a:ea:b7:a5:66:a3:33:ff:
3c:ea:17:e0:81:3a:c5:52:8b:48:09:45:74:87:57:bd:12:f2:
d6:ba:c8:97:9a:4f:22:4f:f1:71:ca:35:ce:7a:22:bc:05:7e:
5e:3b:f9:b2:95:12:31:f1:31:c4:fa:b3:98:cc:e8:71:32:7a:
a3:db:02:5c:c8:9c:3c:79:6f:dc:cf:57:4f:ce:f3:15:e6:41:
2a:57:d7:f9:f9:aa:52:25:ba:0d:73:71:4f:7e:98:d3:52:cb:
33:2c:b7:6f:ff:e8:92:31:e8:ae:c1:03:c6:1c:a3:73:40:98:
40:a9:ec:76:01:15:c7:58:b0:d3:7f:83:03:4d:f4:08:5c:a1:
cb:e0:01:8d:3d:0e:8f:8c:04:f0:25:c7:95:ea:9a:5e:cd:33:
40:4a:17:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 01:02:33 2025 by rpki-client