
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93d0db3c-2ec7-42b8-a93c-b598adfc00c2.roa
File: 93d0db3c-2ec7-42b8-a93c-b598adfc00c2.roa (raw, json)
Hash identifier: jGIcvib+k6MO/mneplTIXqzixtSzUWqFoS/ydfhQaj8=
Subject key identifier: 6A:8A:5D:17:6A:74:32:72:76:77:61:CF:3E:0C:61:64:01:54:55:18
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 150526AC7E7B08986C3721E9865A29643F37BC04
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93d0db3c-2ec7-42b8-a93c-b598adfc00c2.roa
Signing time: Wed 30 Jul 2025 00:30:23 +0000
ROA not before: Wed 30 Jul 2025 00:30:23 +0000
ROA not after: Wed 03 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf7:2800::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 30 Jul 2025 18:52:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:05:26:ac:7e:7b:08:98:6c:37:21:e9:86:5a:29:64:3f:37:bc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jul 30 00:30:23 2025 GMT
Not After : Sep 3 23:59:59 2025 GMT
Subject: serialNumber=1392fffba88f0d61f48428c4e1f315889d70030feae377a8001bba0da5d36f56, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:63:09:de:b3:e4:30:14:d5:2f:b7:4f:9b:
95:df:01:b3:c4:8a:ff:3f:68:7e:a0:3c:3c:81:1d:
c0:50:75:65:60:17:16:1a:a1:3d:9c:d5:af:9e:8c:
59:1c:9a:5e:27:1f:18:52:68:65:b7:35:bf:cf:c1:
62:31:a0:d9:7c:9b:e4:33:f1:37:9b:28:1a:24:1f:
3a:e7:74:d1:0a:e8:a6:38:9f:7a:a6:f0:ba:9e:8a:
c2:21:01:b8:c0:5f:be:9e:51:b5:e8:91:86:a5:42:
dd:32:b0:68:f1:3c:ca:fb:a8:7d:0b:a0:23:31:80:
19:ae:9e:be:37:78:cd:db:d4:27:5f:00:6b:7b:9f:
bf:d8:c9:9b:0f:9c:33:20:70:f2:b0:38:71:0f:59:
78:a4:ce:bd:82:7e:fa:84:2f:4c:5c:cf:d5:b9:a0:
ac:cc:b8:55:16:49:8e:c6:41:e2:6c:b8:2d:0a:01:
21:58:4b:bf:98:da:63:d8:68:58:ca:be:77:a2:41:
d8:fa:83:a9:86:c5:90:65:fb:81:c0:b2:a0:41:5b:
1d:9b:48:bb:86:84:aa:a1:30:c3:07:fd:6c:4a:79:
68:87:13:39:6f:a2:46:00:53:97:07:bc:85:cf:58:
41:d6:78:0d:78:c5:3d:3a:0b:42:fb:f2:f7:b7:9e:
43:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8A:5D:17:6A:74:32:72:76:77:61:CF:3E:0C:61:64:01:54:55:18
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93d0db3c-2ec7-42b8-a93c-b598adfc00c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf7:2800::/40
Signature Algorithm: sha256WithRSAEncryption
33:3b:a8:38:e5:00:09:d2:e5:ef:53:e1:fb:1e:0b:38:14:06:
75:16:92:ea:e5:00:7f:ed:64:27:a1:52:d1:b4:20:17:71:fd:
c8:64:64:56:4d:77:14:18:5d:d0:09:3c:cc:59:9b:39:32:df:
18:c6:3d:18:36:be:3b:0a:f1:58:ed:0b:bf:60:31:4f:ef:a7:
93:d6:41:69:8c:92:cb:f5:4e:f8:83:e7:6c:5b:1a:9a:1e:7c:
c4:d0:3d:98:10:69:8a:d7:d4:98:ff:84:8b:60:ea:1a:8f:4d:
25:81:59:01:64:4a:83:f7:2f:c8:8f:a8:08:a0:09:36:1e:8b:
c5:9a:f6:7c:1a:52:51:ca:ad:e2:70:8e:ba:e2:47:c6:01:cc:
54:4c:40:45:2e:dc:99:20:b7:e0:5c:ba:fe:16:33:ad:51:fd:
9e:af:e8:ca:b8:76:e9:17:9d:00:51:52:f3:20:15:e0:33:c4:
da:5c:55:e4:e1:5e:49:a0:d3:f9:f0:a3:2a:61:92:09:84:71:
31:7e:d1:8e:3b:93:cd:94:46:d1:e1:64:2f:55:a5:65:42:65:
4e:ca:6b:a5:4d:f7:43:fd:57:be:ab:5e:3d:6d:9a:7b:3d:a0:
6c:79:7a:b2:16:31:f5:41:9e:77:fe:b3:f7:62:68:de:d9:6d:
30:10:42:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 00:57:26 2025 by rpki-client