Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/875b28fd-476a-4596-8a10-01b875e1b39b.roa
File: 875b28fd-476a-4596-8a10-01b875e1b39b.roa (raw, json)
Hash identifier: htnVQolOBjGuUOOhcaUy4I3P0fzGo2yBPvb4D7mWON4=
Subject key identifier: 7D:7A:2A:13:A8:BF:7C:2D:D2:7F:5E:BE:70:34:65:0D:75:BF:79:84
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 152742C50D4452776396CB8C8CB1D94B6350770C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/875b28fd-476a-4596-8a10-01b875e1b39b.roa
Signing time: Wed 14 May 2025 00:30:22 +0000
ROA not before: Wed 14 May 2025 00:30:22 +0000
ROA not after: Wed 18 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf4:f080::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 20:07:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:27:42:c5:0d:44:52:77:63:96:cb:8c:8c:b1:d9:4b:63:50:77:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 14 00:30:22 2025 GMT
Not After : Jun 18 23:59:59 2025 GMT
Subject: serialNumber=6bbd6ef91f4a3e8aee327e22a0b11292ee6a9eb77c2e35bfb174baf148752651, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f4:c1:22:e1:fe:22:35:97:3d:97:3f:0b:ba:
2f:fd:d4:6a:c3:a0:ba:22:d4:75:98:6a:2c:86:e2:
da:20:0d:a8:58:8d:51:90:1c:07:b9:e7:6d:d1:3a:
2e:80:de:71:01:57:5f:8d:8f:5f:c0:a4:a0:48:6f:
cd:9b:54:33:5a:30:59:e0:f6:17:45:f1:15:4a:99:
09:22:03:3a:18:33:e6:ce:3c:93:07:38:3b:d3:08:
90:cb:f8:25:13:0f:d1:66:58:e0:8d:87:ef:84:a9:
4d:e7:78:66:db:1b:9b:53:ee:7a:86:ed:74:74:de:
a7:73:b2:3b:f2:cb:3a:6b:8e:50:97:c4:38:0c:be:
d8:0f:fe:f1:10:7d:76:ee:84:3d:63:8b:64:73:e6:
10:90:39:fb:06:60:a4:78:06:6b:d0:17:5b:54:4c:
a0:e5:04:6e:94:9f:c4:72:e6:66:6c:b3:ae:69:40:
d7:9c:16:a5:d3:ae:c2:0d:3e:d6:95:97:21:91:b5:
96:b2:94:e6:8c:42:7b:16:db:95:63:d5:ce:69:af:
df:57:50:c4:32:a0:f5:89:92:2f:98:08:eb:83:2d:
8d:3a:bb:36:42:5b:19:b6:06:29:c2:87:23:97:20:
13:83:5a:de:d2:b2:f5:ca:34:10:89:45:fa:dc:93:
a2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7A:2A:13:A8:BF:7C:2D:D2:7F:5E:BE:70:34:65:0D:75:BF:79:84
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/875b28fd-476a-4596-8a10-01b875e1b39b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf4:f080::/48
Signature Algorithm: sha256WithRSAEncryption
94:fc:28:15:24:9a:c8:e9:e8:c8:9f:10:35:35:2c:b6:e8:4a:
dc:29:23:67:17:f3:35:d3:e4:f0:a8:80:1f:a9:37:2f:22:25:
6e:b4:76:d6:8a:10:03:5c:5e:7f:d8:f5:b6:fc:9c:64:c9:18:
09:8e:e6:12:5c:ff:b4:36:bf:1f:23:65:6a:84:9a:e9:51:3a:
13:b5:55:a2:ba:9e:75:6b:8a:1c:35:e1:7e:9c:16:45:8b:1a:
29:2b:a2:93:69:78:4c:cc:11:6c:21:4a:d7:7c:a7:05:ef:d2:
c6:0c:5a:d3:9d:fc:6d:34:a3:3f:4e:2f:bd:41:23:05:86:44:
1c:bd:62:7f:c5:1f:2c:e2:7f:a8:1c:58:1e:09:d2:35:0c:fc:
92:59:77:97:9c:7a:56:e2:82:14:e4:fa:ef:3e:f0:2c:fa:92:
01:f4:48:42:40:96:2f:7d:7b:f4:fd:f7:7b:ee:4c:17:cf:b7:
2b:58:54:fd:00:c1:85:17:ef:14:58:8a:06:1e:1f:23:98:ed:
7f:7c:6a:cd:b7:82:8d:9e:16:5f:13:de:e6:e3:3b:57:30:05:
99:29:2a:13:42:d9:a5:14:22:93:77:56:75:3e:18:f1:a3:15:
4f:9f:11:f2:27:56:2c:19:bf:ef:76:ea:c6:c6:05:e6:64:15:
b8:cd:52:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:26:13 2025 by rpki-client