Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9021aef9-c76a-41c7-9ff8-dd9ea326340d.roa
File: 9021aef9-c76a-41c7-9ff8-dd9ea326340d.roa (raw, json)
Hash identifier: rsKIj76CPpB4bJELHZKEXL360+iJu/o+YrLn/umkUgE=
Subject key identifier: E7:FC:DE:F7:B2:F1:EB:F4:2B:04:32:34:32:26:B7:D3:D9:E3:5C:71
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 726FB6ADBA1D09F2541A442AFBFC0529E9AE7A13
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9021aef9-c76a-41c7-9ff8-dd9ea326340d.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da61:2800::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 15:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:6f:b6:ad:ba:1d:09:f2:54:1a:44:2a:fb:fc:05:29:e9:ae:7a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a8:2a:ed:40:74:82:7a:85:d2:68:45:05:37:
9a:a1:d2:61:e5:1f:a7:4c:9b:26:7d:93:88:5f:e5:
8f:43:c2:94:2f:d6:71:46:99:6c:ee:db:40:b8:b4:
5d:7a:6a:34:0f:ce:bd:5a:65:50:77:fc:c8:c7:aa:
14:9f:bd:e7:ad:50:6e:76:bf:f9:b4:d0:e9:cd:c2:
f7:28:3e:d1:fb:2e:49:cf:f0:9a:94:d2:95:87:37:
ca:a0:00:9a:12:84:68:74:b1:b1:e7:a3:fe:97:56:
99:c7:15:80:a7:d8:88:fa:39:67:b5:0d:45:c0:5f:
05:36:0b:b5:a2:1b:67:d5:dc:30:7f:e2:83:27:67:
93:bb:a9:50:78:65:fd:bc:69:95:ec:f0:50:e2:31:
67:9b:da:0a:64:67:a4:e5:fa:3d:2e:10:2d:8d:04:
66:51:19:5e:63:cd:fe:14:fd:2a:9c:65:2c:21:74:
dd:4d:d3:07:01:f0:42:00:58:d3:68:e9:e6:4c:a4:
aa:09:60:c6:b5:65:2c:ea:33:60:17:84:22:14:7c:
4d:1f:99:e0:ef:bb:88:72:9c:41:f9:5e:70:21:77:
3c:03:76:ca:7c:5c:9a:4c:51:cf:c5:19:7b:5e:bf:
f7:1f:a4:47:48:e4:bb:85:94:cf:b6:bc:c5:d7:ce:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FC:DE:F7:B2:F1:EB:F4:2B:04:32:34:32:26:B7:D3:D9:E3:5C:71
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9021aef9-c76a-41c7-9ff8-dd9ea326340d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da61:2800::/40
Signature Algorithm: sha256WithRSAEncryption
b3:b7:41:42:b4:ad:5f:72:e6:b6:77:cc:53:c1:ec:ca:10:a4:
c2:fa:ab:0f:77:d7:2c:4d:ae:e8:1a:fe:e9:8d:74:d4:82:5c:
8b:ed:5c:9e:e8:47:58:a3:ed:9b:89:68:95:1d:92:32:b1:a0:
2e:16:f1:1f:be:b7:b8:f4:6e:09:97:a6:48:4f:15:57:2e:cf:
02:68:9d:13:22:9c:96:84:44:16:17:bb:5c:17:94:2b:1e:87:
01:f2:0c:c6:4c:be:74:84:6e:72:8a:9c:ed:8d:c4:81:8f:8b:
fa:ff:da:71:02:74:ae:d8:49:12:fc:46:c7:b5:52:f2:47:ed:
a7:c2:e3:3e:02:58:67:ae:dc:3f:1d:34:4a:77:17:7b:90:78:
7f:e7:e0:52:d9:a0:8d:88:34:06:2b:42:f2:bf:e7:c2:df:a3:
90:c3:96:6c:d5:76:1f:36:71:3b:92:7e:6c:62:30:ae:53:f6:
7b:37:7d:8d:6b:db:6e:5c:2b:3a:7f:7a:65:e2:1d:9f:b5:05:
34:d8:62:ee:8d:77:93:ec:0f:93:cf:2b:e0:2e:3e:88:05:95:
4e:19:a2:12:da:48:8e:96:31:a5:bd:93:49:cf:59:40:2c:d7:
23:2a:ac:a8:49:05:82:96:35:ad:ce:93:56:fc:82:2b:2e:23:
d0:e7:08:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:06:54 2025 by rpki-client