Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fd28837-1d63-4252-a57e-a36db614df90.roa
File: 8fd28837-1d63-4252-a57e-a36db614df90.roa (raw, json)
Hash identifier: OCprElsyRyS/ISC6TY55BEfME14C2v7K4dnS/nU6FAg=
Subject key identifier: C7:C8:60:6E:3A:FB:C1:D0:55:B0:4C:F6:FC:7F:8E:CB:93:9F:60:0B
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 793C0556A370427B912540883378DE9C26EF350D
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fd28837-1d63-4252-a57e-a36db614df90.roa
Signing time: Wed 30 Jul 2025 00:50:40 +0000
ROA not before: Wed 30 Jul 2025 00:50:40 +0000
ROA not after: Wed 03 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf7:1000::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 30 Jul 2025 18:52:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:3c:05:56:a3:70:42:7b:91:25:40:88:33:78:de:9c:26:ef:35:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jul 30 00:50:40 2025 GMT
Not After : Sep 3 23:59:59 2025 GMT
Subject: serialNumber=aacd7f2b0a4fa03c5e353af930b3fb721753454981a3490a67c183a3285cb8ea, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cb:04:ac:16:7e:9b:da:08:34:c2:99:03:eb:
45:66:c7:c7:1c:65:80:be:f5:77:5e:62:2f:67:38:
a7:90:0b:60:79:07:bb:87:96:2f:c9:19:ce:c1:ef:
25:1a:f7:f8:44:be:39:5b:d1:bc:9c:ca:57:62:6b:
74:59:9a:9f:f3:47:7f:72:20:31:80:be:9f:e9:67:
17:e3:da:09:b8:a8:93:d2:3f:0c:7a:91:1e:cf:3f:
b2:10:80:7d:df:4a:ae:37:d6:92:f8:fe:2b:93:3c:
85:0d:4d:04:31:d7:6d:19:4c:ed:85:ec:72:42:03:
94:77:da:d5:c0:e0:f3:9d:ec:41:46:a2:7b:e3:23:
93:fd:b2:9a:7a:89:cf:b0:87:0c:e7:26:3e:d6:5b:
97:24:f8:d7:9c:6b:7f:67:34:e4:07:c1:21:f5:24:
50:56:5b:06:b2:6f:5b:00:cb:09:0b:52:65:27:01:
eb:6c:43:4c:73:a5:ed:7c:56:72:ba:c3:69:8e:b3:
60:3d:b7:80:b0:f8:f5:42:9d:77:7a:a1:c4:10:db:
87:81:9b:3f:40:cd:81:7e:f0:7c:0c:91:b1:d1:ad:
f2:e4:71:aa:47:96:e4:11:85:5f:e1:47:59:25:17:
05:6d:5f:18:83:ba:21:a4:75:05:bf:18:0c:e9:7f:
0a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C8:60:6E:3A:FB:C1:D0:55:B0:4C:F6:FC:7F:8E:CB:93:9F:60:0B
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fd28837-1d63-4252-a57e-a36db614df90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf7:1000::/40
Signature Algorithm: sha256WithRSAEncryption
5f:41:ca:bf:6c:29:1b:1b:34:80:aa:39:aa:05:74:39:0e:67:
11:56:d2:d7:82:8d:57:dc:e0:d7:7f:3c:ee:65:3d:aa:88:4e:
0c:ca:77:43:50:0b:1b:08:0e:42:d9:d6:36:68:5d:b9:2b:62:
41:37:b9:8c:f5:d7:4d:80:db:66:e3:d1:da:e5:5e:3e:66:a2:
b3:88:80:d4:e7:dd:dc:91:21:66:db:2a:30:97:6d:ea:86:84:
c9:29:2e:c2:90:0f:eb:1a:fa:a6:73:93:f4:51:bb:c2:ed:4a:
39:d5:21:98:a4:33:66:dc:a4:78:52:d1:7c:1f:e4:86:2b:a8:
38:74:4f:38:94:fa:8a:02:ee:06:54:40:e2:33:11:45:d6:de:
65:a0:88:8c:43:e5:59:b7:f8:10:de:dd:66:41:96:ba:41:88:
2a:86:23:79:64:07:0d:fa:3c:89:09:29:07:00:bb:07:4d:0e:
ba:52:dd:be:ba:ea:7c:4c:fb:26:66:94:9e:36:05:72:41:97:
db:19:10:59:6b:d8:aa:c1:c8:34:0e:68:65:be:5e:10:42:56:
e8:59:9c:f8:8a:81:5a:a1:96:41:21:e3:d3:50:65:22:56:86:
a1:9a:2b:69:6e:04:c7:30:d7:2a:3c:38:43:3b:48:4c:41:a8:
11:c3:2e:bd
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUeTwFVqNwQnuRJUCIM3jenCbvNQ0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDczMDAwNTA0MFoX
DTI1MDkwMzIzNTk1OVowejFJMEcGA1UEBRNAYWFjZDdmMmIwYTRmYTAzYzVlMzUz
YWY5MzBiM2ZiNzIxNzUzNDU0OTgxYTM0OTBhNjdjMTgzYTMyODVjYjhlYTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlssErBZ+m9oINMKZA+tFZsfHHGWA
vvV3XmIvZzinkAtgeQe7h5YvyRnOwe8lGvf4RL45W9G8nMpXYmt0WZqf80d/ciAx
gL6f6WcX49oJuKiT0j8MepEezz+yEIB930quN9aS+P4rkzyFDU0EMddtGUzthexy
QgOUd9rVwODznexBRqJ74yOT/bKaeonPsIcM5yY+1luXJPjXnGt/ZzTkB8Eh9SRQ
VlsGsm9bAMsJC1JlJwHrbENMc6XtfFZyusNpjrNgPbeAsPj1Qp13eqHEENuHgZs/
QM2BfvB8DJGx0a3y5HGqR5bkEYVf4UdZJRcFbV8Yg7ohpHUFvxgM6X8K2QIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFMfIYG46+8HQVbBM9vx/jsuTn2ALMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzhmZDI4ODM3LTFkNjMtNDI1Mi1hNTdlLWEzNmRiNjE0ZGY5MC5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba9xAwDQYJKoZIhvcNAQELBQADggEBAF9Byr9sKRsbNICqOaoF
dDkOZxFW0teCjVfc4Nd/PO5lPaqITgzKd0NQCxsIDkLZ1jZoXbkrYkE3uYz1102A
22bj0drlXj5morOIgNTn3dyRIWbbKjCXbeqGhMkpLsKQD+sa+qZzk/RRu8LtSjnV
IZikM2bcpHhS0Xwf5IYrqDh0TziU+ooC7gZUQOIzEUXW3mWgiIxD5Vm3+BDe3WZB
lrpBiCqGI3lkBw36PIkJKQcAuwdNDrpS3b666nxM+yZmlJ42BXJBl9sZEFlr2KrB
yDQOaGW+XhBCVuhZnPiKgVqhlkEh49NQZSJWhqGaK2luBMcw1yo8OEM7SExBqBHD
Lr0=
-----END CERTIFICATE-----
Generated at Thu Jul 31 01:00:19 2025 by rpki-client