Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93e954a5-c03d-4102-b79d-5c4fe9c2242d.roa
File: 93e954a5-c03d-4102-b79d-5c4fe9c2242d.roa (raw, json)
Hash identifier: O/BccOkMzgYbgV/hT2JwLtWBOm9gIsrwNtnLM5HzUGc=
Subject key identifier: 62:26:24:0D:71:3B:56:8F:D8:94:A4:59:BC:AE:37:DD:ED:CA:8D:CF
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 341D871228FF8F92572576414AA81ABB219572E1
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93e954a5-c03d-4102-b79d-5c4fe9c2242d.roa
Signing time: Mon 12 May 2025 15:10:39 +0000
ROA not before: Mon 12 May 2025 15:10:39 +0000
ROA not after: Mon 16 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daee::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 03 Jun 2025 19:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:1d:87:12:28:ff:8f:92:57:25:76:41:4a:a8:1a:bb:21:95:72:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 12 15:10:39 2025 GMT
Not After : Jun 16 23:59:59 2025 GMT
Subject: serialNumber=0b4966ea8fae6992a2bfdfd78b9b590c4afd0b0b5e73a771956f287ac120bebc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e1:09:16:d8:46:1c:a4:f4:aa:76:87:a5:d8:
e6:19:29:c0:91:99:34:8b:17:77:1c:72:d1:d4:05:
14:0f:ff:db:91:a2:f7:0d:a7:4f:64:c5:c4:1b:6c:
45:63:6f:a0:20:41:56:20:6c:20:3d:f0:f0:b4:c6:
d1:d5:1d:ec:a7:5b:2d:2a:e9:a2:49:e5:db:cf:64:
cf:6f:90:1c:13:0b:55:ce:3e:01:02:d5:70:7e:a8:
6f:3f:0a:a4:48:02:88:b9:9e:c5:ba:fa:03:77:b3:
5e:8e:bc:d5:aa:06:64:26:be:ba:29:a4:d3:a0:0c:
c6:38:5c:25:98:a2:ae:c3:00:a5:a3:07:ad:37:77:
71:fe:b4:f7:b1:85:4c:9b:9c:8b:38:94:39:ed:2c:
e0:bf:26:06:e7:f4:f2:52:55:62:96:4d:0c:78:9b:
ae:8b:6b:ff:44:76:0b:9a:4c:a1:8e:0a:76:00:8b:
75:9f:80:5d:e1:cf:c9:61:cf:2b:82:a5:17:6c:6c:
44:67:36:9a:3f:cf:4b:19:4d:09:88:eb:90:db:0d:
2e:a3:31:a7:65:e2:15:13:76:7f:16:e3:fa:4d:e1:
8d:83:f7:8b:d7:5b:74:4d:61:b6:cb:7f:55:5d:6b:
ab:c7:86:28:a5:e9:50:14:3c:96:44:48:31:5b:a8:
e6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:26:24:0D:71:3B:56:8F:D8:94:A4:59:BC:AE:37:DD:ED:CA:8D:CF
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93e954a5-c03d-4102-b79d-5c4fe9c2242d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daee::/32
Signature Algorithm: sha256WithRSAEncryption
aa:81:4c:1c:54:6c:aa:59:aa:cd:58:35:7c:8c:0e:45:c6:98:
52:46:65:73:89:f1:1b:db:ec:be:0f:f7:d4:53:86:00:99:6b:
9f:a4:c6:6d:1b:f2:5a:88:85:1a:a7:04:5e:8e:8b:8c:fd:9b:
3a:7b:85:14:53:32:e4:a8:0d:60:21:71:a6:8f:22:cc:52:a9:
07:54:59:d2:6b:a2:f5:db:ea:43:5c:b9:05:a7:0c:91:f2:15:
68:fc:cc:bf:02:e1:c3:57:58:d8:0b:c2:69:31:e6:90:4e:ba:
7b:d0:bd:ed:40:c2:59:2f:42:34:15:d6:d1:0f:6f:f6:fa:e9:
fd:d1:25:cd:a3:aa:ef:ae:c9:72:1a:00:13:cc:19:66:3b:6f:
2e:e2:67:73:e1:2b:db:7b:6a:51:7f:31:a0:de:12:9f:83:23:
6f:31:d3:96:5c:21:bb:77:b1:c1:e6:ad:ff:1d:32:65:43:af:
31:1f:4b:0e:45:0c:4f:77:60:87:c2:15:8f:49:21:78:5c:22:
45:c6:2c:58:59:72:d4:0b:5c:9a:de:c4:90:68:e7:65:e6:60:
06:7b:61:fe:28:82:7b:87:14:41:4d:26:2e:f8:06:f5:9e:b1:
c9:e2:47:8b:9a:28:ef:48:fe:7e:af:e8:9b:89:e0:d6:4c:c1:
40:f5:4b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:16:00 2025 by rpki-client