Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9abaaa64-5830-4693-9846-8a0761c264ea.roa
File: 9abaaa64-5830-4693-9846-8a0761c264ea.roa (raw, json)
Hash identifier: 1c0Nt8Bj7rdNkXgRrOWlEykdyMs+dSpcSpP7J8gbC2I=
Subject key identifier: FA:7E:DF:D4:8B:C9:73:89:E2:9D:66:31:04:6D:07:88:97:6B:B8:B0
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 2FD1018DBD015710D716B2C0CB5954F55CF69C50
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9abaaa64-5830-4693-9846-8a0761c264ea.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dafb:4800::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:d1:01:8d:bd:01:57:10:d7:16:b2:c0:cb:59:54:f5:5c:f6:9c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:c8:db:ec:4d:26:e2:9c:b7:20:eb:62:c0:
e3:d5:c1:bb:97:e3:f8:f0:df:76:18:c1:cf:4c:6d:
cd:80:38:65:67:50:21:3c:5c:83:33:e5:46:a9:05:
3b:d0:05:ba:93:b4:61:23:9f:04:87:3d:4c:18:27:
36:5b:7f:79:d5:a4:10:1b:9b:26:48:1a:89:ea:4b:
4f:46:a9:af:fe:5b:6c:ac:a8:1b:65:34:b0:46:5c:
dd:bc:6c:d7:c0:83:16:39:a9:e1:a5:ac:a3:5a:9e:
bc:8d:b8:67:d0:4a:fb:9d:81:66:71:ca:00:4f:ec:
78:3e:fc:7e:bf:74:5c:6b:2c:1e:b6:7b:bf:cb:9b:
74:b4:45:d4:65:56:6e:fa:6f:ab:54:9f:6e:22:a2:
89:ea:91:da:ac:8e:53:35:ba:86:3e:63:34:f0:30:
20:1b:c7:02:6d:2c:3b:ef:ed:39:25:bb:f6:4e:83:
e6:64:ff:89:bb:0b:3b:e7:d6:6b:24:71:27:45:e0:
39:8e:b1:92:d1:39:11:87:54:ec:80:ca:35:21:c5:
fe:af:a0:9c:43:3d:b8:93:58:fb:d2:58:04:aa:27:
7e:d8:7d:2f:60:a5:a7:f7:35:6d:7e:e7:bb:c6:ac:
8e:5e:21:7d:72:05:04:32:a0:b4:58:0b:30:8a:66:
83:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7E:DF:D4:8B:C9:73:89:E2:9D:66:31:04:6D:07:88:97:6B:B8:B0
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9abaaa64-5830-4693-9846-8a0761c264ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dafb:4800::/40
Signature Algorithm: sha256WithRSAEncryption
22:c1:fc:a9:d3:92:1d:51:a9:6b:7b:35:80:00:a6:7c:da:c5:
4b:70:9e:a8:09:e0:e6:b2:48:06:10:e1:f2:b5:a9:51:25:d1:
38:70:bd:3d:b7:58:c1:4d:32:bc:2a:94:0c:42:fd:50:18:f9:
e8:5f:83:d0:ff:8a:61:ec:0f:58:fd:1b:63:1c:b6:63:56:1f:
bd:10:ef:10:a1:64:e6:b1:15:40:20:eb:22:12:09:54:47:63:
5e:62:99:4b:e9:e6:09:0e:0f:dd:8b:0e:8e:5b:ff:ea:57:cd:
e0:18:b2:74:27:79:63:ec:b1:47:7f:f8:c0:5b:03:ea:0b:5e:
74:3b:b3:62:7c:18:13:00:9d:4f:c8:41:63:94:b4:d9:f4:81:
e3:f5:c1:8d:76:86:16:42:dd:b1:76:95:a4:74:ab:06:d7:6a:
60:6b:17:75:24:e6:ec:bb:ae:d3:c2:ba:7f:58:99:e8:5d:04:
6e:1e:ca:6e:bb:a6:f5:33:47:5f:28:1f:b3:b1:80:0c:16:c4:
aa:d8:0c:d6:f3:94:40:56:d7:34:88:30:75:eb:57:97:53:27:
8a:54:78:a0:61:40:61:b4:0f:f8:2f:cf:ac:41:54:4e:bf:00:
6d:44:09:e6:d8:37:24:95:96:f3:6d:7c:da:cf:7b:1f:c7:78:
73:99:43:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:11:41 2025 by rpki-client