Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/858ae285-51c9-48c9-be09-17df643aafc4.roa
File: 858ae285-51c9-48c9-be09-17df643aafc4.roa (raw, json)
Hash identifier: k8AxO1bEAggup3/Z5mYBtsYrKVxKtHNg0N2QcgETBGs=
Subject key identifier: 47:57:C5:73:AB:42:2A:D0:84:78:68:74:4B:81:1F:EB:B6:9B:B4:FF
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 03F77699A55875D643E21BF2D6B83B5E57C22427
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/858ae285-51c9-48c9-be09-17df643aafc4.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da00:6000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:f7:76:99:a5:58:75:d6:43:e2:1b:f2:d6:b8:3b:5e:57:c2:24:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:04:96:dc:7c:5a:9a:18:d1:ae:02:7a:40:c8:
c1:f4:08:e7:e4:18:80:ff:c1:79:fd:ba:e9:c1:d3:
c7:38:f3:0d:fd:81:73:33:66:fe:d3:94:fa:57:d7:
7e:f0:48:17:68:ce:c5:f6:cf:97:bf:1d:88:fa:87:
32:f7:cc:53:87:cc:0c:45:eb:94:8c:c3:9d:af:41:
8f:05:3c:b6:7b:20:7e:7e:2d:f0:ec:b2:87:3d:cb:
4f:ec:5c:60:bf:e1:ba:dc:ca:fe:84:cc:4c:3a:71:
cc:be:48:16:f8:7e:71:00:b3:d4:d6:2d:e3:ef:05:
92:27:4c:ab:0c:2e:32:23:bc:bf:bf:8e:c8:bc:3f:
39:37:46:62:8a:9e:2a:9c:44:2c:67:7d:9d:cb:13:
39:55:59:30:b7:5e:83:ed:e5:9f:f7:cf:c3:5f:fb:
43:8d:47:84:7b:65:7e:e6:31:18:a8:d9:65:d1:64:
de:c5:0d:f3:53:1f:02:c7:40:64:81:99:aa:51:c8:
6c:dc:f0:99:6b:88:0b:fe:c0:fc:1f:60:b9:64:b1:
f4:11:ca:2c:bf:34:d1:61:db:b3:68:65:d2:6a:76:
ae:69:9b:f4:c8:62:42:b9:3a:58:1a:49:83:ff:b2:
f8:0e:1e:78:ce:73:40:34:e7:1e:2a:e5:97:0d:d9:
4b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:57:C5:73:AB:42:2A:D0:84:78:68:74:4B:81:1F:EB:B6:9B:B4:FF
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/858ae285-51c9-48c9-be09-17df643aafc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da00:6000::/40
Signature Algorithm: sha256WithRSAEncryption
3d:54:48:25:9c:be:ba:fb:62:f7:49:bd:b8:36:3a:71:49:01:
17:f3:77:75:1f:5c:8e:07:f2:14:f5:ce:26:82:c1:70:47:25:
96:d4:2f:91:28:0e:c1:26:62:d7:95:6c:26:0d:2a:4d:61:1c:
1b:3b:ca:4b:f7:54:31:cf:96:4e:56:5a:e1:02:9a:0d:65:06:
5d:60:d4:db:e9:3f:4e:d2:5a:0a:2a:f4:ee:44:0a:16:23:5c:
89:2d:f9:31:b3:1d:65:c8:79:9d:9b:91:92:e8:db:f3:23:68:
fa:38:29:3a:f8:62:57:8f:59:a5:37:92:2c:3f:36:78:85:e0:
a5:54:69:36:04:9b:61:75:5d:e7:5f:57:75:a5:90:07:c6:a6:
a1:bd:4f:0c:28:48:2f:2a:62:31:d7:39:95:08:7c:56:41:c2:
13:bd:97:60:dd:dc:2e:94:50:c9:57:90:c3:fc:c3:99:45:c9:
a3:54:25:a2:e7:f5:e6:f6:7e:87:81:3c:b8:df:85:46:0f:27:
6f:22:41:77:03:27:1f:c7:aa:fe:53:95:6a:9e:f3:d2:ad:3d:
f3:3e:26:f4:38:42:21:e6:7e:67:73:6b:b6:8c:5f:98:c6:90:
ae:b3:c8:f6:24:0d:0a:0d:fd:4f:f1:5f:25:aa:ec:90:3a:2e:
57:48:fe:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:05:40 2025 by rpki-client