Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8602e8cf-ec3c-4331-9668-a4ecf6830436.roa
File: 8602e8cf-ec3c-4331-9668-a4ecf6830436.roa (raw, json)
Hash identifier: 6tKZIol4umE0sKsaoPmwkaPII4KHVL1eC0cUHfCW9VM=
Subject key identifier: 1B:04:09:B4:21:E0:46:71:B2:13:7E:68:79:6C:74:41:20:80:2A:81
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 679F9383B4A1802EE8EE1ACDA2E9F83AE969EDFA
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8602e8cf-ec3c-4331-9668-a4ecf6830436.roa
Signing time: Wed 14 May 2025 00:30:12 +0000
ROA not before: Wed 14 May 2025 00:30:12 +0000
ROA not after: Wed 18 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf4:9080::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 19:53:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:9f:93:83:b4:a1:80:2e:e8:ee:1a:cd:a2:e9:f8:3a:e9:69:ed:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 14 00:30:12 2025 GMT
Not After : Jun 18 23:59:59 2025 GMT
Subject: serialNumber=76335c3e14032c0440ce7c54f278a8091d574adb8becc54ab535f04f459e2dc4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f8:23:2e:62:ee:36:75:30:d1:e6:b0:ac:3e:
69:2b:3a:da:67:06:19:ff:16:54:d1:28:aa:60:eb:
de:a6:8e:3e:19:68:79:63:7b:ab:53:71:48:c7:88:
10:64:ce:e8:41:7c:c3:a5:c0:f6:8a:d3:8a:11:74:
98:8c:2c:d1:3f:16:49:7d:1e:60:95:d7:c7:de:bc:
7a:39:d4:7a:bb:66:be:82:6e:45:12:15:65:6f:2f:
dc:c1:b9:25:36:e8:16:90:0c:06:37:07:30:af:cf:
76:fe:4c:f7:49:1f:94:f1:5d:92:9a:ea:26:45:8a:
4f:a5:dd:3a:c1:f7:22:ea:23:e5:b9:92:10:25:32:
6f:51:54:db:94:2d:08:bd:bf:71:c3:4e:66:a5:ec:
a8:1c:30:e7:da:f4:fa:ac:ec:72:ce:0c:03:e2:15:
c1:47:0c:98:4b:4b:0a:9b:31:33:2a:77:bc:dc:54:
0b:05:9c:d3:3e:de:c1:6a:79:27:36:3c:1b:2a:fc:
75:9a:14:ce:26:90:ae:9e:48:08:28:24:7b:8a:d1:
1d:a8:b4:ff:fc:ee:92:65:df:90:0e:6d:6d:10:77:
1f:d9:b1:96:da:b2:b7:c8:e1:d9:c9:30:89:50:02:
99:20:19:5b:39:b8:9f:6d:b0:e6:f4:3c:c2:42:f7:
16:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:04:09:B4:21:E0:46:71:B2:13:7E:68:79:6C:74:41:20:80:2A:81
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8602e8cf-ec3c-4331-9668-a4ecf6830436.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf4:9080::/48
Signature Algorithm: sha256WithRSAEncryption
5d:99:06:ce:bd:5c:ab:96:fe:1f:8f:11:d2:97:35:e3:53:71:
45:86:82:aa:c6:2a:b4:fc:42:fe:7c:e7:97:22:3b:fd:9c:a3:
9d:c5:05:08:dd:87:12:c4:85:c2:c1:dd:1b:8d:0f:6d:73:cb:
c9:e6:de:c7:f3:66:c0:62:ac:d6:fa:49:b2:a0:59:5e:eb:27:
ab:50:c4:32:14:1c:bf:40:fb:eb:32:d8:74:6c:63:4d:40:a5:
8c:19:86:25:28:74:2f:ef:b3:43:6f:d9:17:9d:c6:ae:17:86:
c8:4e:54:71:b7:a5:13:70:06:86:43:38:1b:31:8f:a0:92:0a:
89:a6:fc:52:c7:3d:80:f2:84:59:2b:1b:12:f0:d9:1a:a5:cc:
3e:37:1e:fb:d9:39:e8:aa:73:74:da:24:08:95:8b:19:ba:0f:
18:95:62:e2:87:97:ee:1c:c0:3b:bb:96:20:12:c6:03:61:58:
b4:0f:65:f4:cc:4f:70:69:70:77:3a:2b:7d:45:4e:af:65:e4:
dc:35:82:9b:71:4f:a9:5a:0e:7f:52:75:ac:d7:79:5e:ab:50:
95:62:76:54:28:5a:aa:54:f0:d2:19:e0:78:57:db:8a:0b:0f:
97:20:05:8b:a1:9b:76:d9:d0:7c:67:dc:81:ad:09:e2:60:13:
0e:19:70:5d
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUZ5+Tg7ShgC7o7hrNoun4Oulp7fowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNDAwMzAxMloX
DTI1MDYxODIzNTk1OVowejFJMEcGA1UEBRNANzYzMzVjM2UxNDAzMmMwNDQwY2U3
YzU0ZjI3OGE4MDkxZDU3NGFkYjhiZWNjNTRhYjUzNWYwNGY0NTllMmRjNDEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvgjLmLuNnUw0eawrD5pKzraZwYZ
/xZU0SiqYOvepo4+GWh5Y3urU3FIx4gQZM7oQXzDpcD2itOKEXSYjCzRPxZJfR5g
ldfH3rx6OdR6u2a+gm5FEhVlby/cwbklNugWkAwGNwcwr892/kz3SR+U8V2Smuom
RYpPpd06wfci6iPluZIQJTJvUVTblC0Ivb9xw05mpeyoHDDn2vT6rOxyzgwD4hXB
RwyYS0sKmzEzKne83FQLBZzTPt7BanknNjwbKvx1mhTOJpCunkgIKCR7itEdqLT/
/O6SZd+QDm1tEHcf2bGW2rK3yOHZyTCJUAKZIBlbObifbbDm9DzCQvcWfQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFBsECbQh4EZxshN+aHlsdEEggCqBMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
Lzg2MDJlOGNmLWVjM2MtNDMzMS05NjY4LWE0ZWNmNjgzMDQzNi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAba9JCAMA0GCSqGSIb3DQEBCwUAA4IBAQBdmQbOvVyrlv4fjxHS
lzXjU3FFhoKqxiq0/EL+fOeXIjv9nKOdxQUI3YcSxIXCwd0bjQ9tc8vJ5t7H82bA
YqzW+kmyoFle6yerUMQyFBy/QPvrMth0bGNNQKWMGYYlKHQv77NDb9kXncauF4bI
TlRxt6UTcAaGQzgbMY+gkgqJpvxSxz2A8oRZKxsS8Nkapcw+Nx772TnoqnN02iQI
lYsZug8YlWLih5fuHMA7u5YgEsYDYVi0D2X0zE9waXB3Oit9RU6vZeTcNYKbcU+p
Wg5/UnWs13leq1CVYnZUKFqqVPDSGeB4V9uKCw+XIAWLoZt22dB8Z9yBrQniYBMO
GXBd
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:16:53 2025 by rpki-client