Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9aef2d7c-13ad-45c1-b5b7-aa535dfbf17e.roa
File: 9aef2d7c-13ad-45c1-b5b7-aa535dfbf17e.roa (raw, json)
Hash identifier: dsfXI2tXXFyt6kaZnmCMbflyQvPiS+aCfeYnZZSF1yk=
Subject key identifier: 5E:59:06:E6:02:77:01:3F:10:AD:0B:68:8C:2F:4C:38:1D:B3:60:3E
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 1DDC19651AD522E1C4F7F4A259E7CE872459EF42
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9aef2d7c-13ad-45c1-b5b7-aa535dfbf17e.roa
Signing time: Fri 16 May 2025 15:00:16 +0000
ROA not before: Fri 16 May 2025 15:00:16 +0000
ROA not after: Fri 20 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dab9:b000::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 May 2025 00:52:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:dc:19:65:1a:d5:22:e1:c4:f7:f4:a2:59:e7:ce:87:24:59:ef:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 16 15:00:16 2025 GMT
Not After : Jun 20 23:59:59 2025 GMT
Subject: serialNumber=accaa28ba72c175d9d9c2214050207e40c536ba2f4f01d0e250c68db1afee596, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:a6:56:38:fa:64:2d:5b:93:d6:30:bb:9c:
b0:57:59:14:58:a3:5c:9e:eb:51:98:bb:d8:4a:01:
51:9c:f2:17:20:a3:d6:e0:dc:17:b2:82:03:59:c8:
fb:03:f1:06:8a:ce:bd:cd:54:56:2f:6e:87:70:da:
eb:f6:66:d9:56:af:fd:c5:8c:98:61:7c:89:d6:47:
77:4d:73:08:b1:cf:ec:10:a4:31:6b:fa:b1:05:78:
ae:2b:6c:bb:bd:af:43:c9:85:95:27:88:62:b0:d9:
22:3e:49:79:d7:28:96:e5:60:f6:77:1f:10:47:85:
d0:56:87:3d:f4:b8:ab:64:64:15:30:81:49:a5:83:
54:50:7e:86:f6:b7:fb:ee:6b:18:3f:ed:87:d2:cb:
9d:46:6a:58:c4:22:cc:f4:54:55:37:93:81:48:55:
99:c0:50:f8:60:99:a6:80:97:10:f9:e1:da:ce:50:
d3:41:d4:de:35:1d:4f:cf:80:8a:ec:5a:a8:ed:26:
e3:9e:6c:8b:0e:62:c9:ae:e6:be:6f:ba:e9:20:25:
60:ec:d3:3d:05:54:4f:7f:0e:c9:cf:54:cf:21:85:
e7:c7:63:3a:3c:5b:b0:43:83:45:10:94:40:9d:f1:
6b:1e:69:0d:3c:5b:14:7d:f1:29:69:d3:82:75:ca:
b1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:59:06:E6:02:77:01:3F:10:AD:0B:68:8C:2F:4C:38:1D:B3:60:3E
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9aef2d7c-13ad-45c1-b5b7-aa535dfbf17e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dab9:b000::/40
Signature Algorithm: sha256WithRSAEncryption
41:7d:84:0b:d2:52:07:73:00:56:95:ec:82:27:b4:c5:5d:2a:
99:f4:72:a7:71:af:6a:1f:8e:49:d8:5b:d8:ea:9d:24:c9:a7:
30:eb:42:c3:62:6b:2a:66:1d:07:63:1e:49:95:6e:04:49:cc:
7a:ad:88:a6:48:8a:aa:8c:16:46:ed:0a:3b:6c:a4:6c:b0:05:
1f:78:bd:02:b5:71:0f:ab:2d:0d:17:49:cc:19:45:8b:fb:76:
41:6f:b9:98:d9:f5:08:b2:f2:a3:73:ac:0f:39:53:5e:67:00:
3f:5f:65:15:6f:57:6e:ef:4c:00:de:09:3e:f9:f9:29:eb:87:
de:7e:cc:a1:13:66:1e:fc:0a:7c:b8:b8:5b:d2:a3:1b:22:f3:
15:06:17:81:58:00:4e:be:82:03:40:bf:05:6b:64:b6:2d:14:
dc:ba:52:70:06:94:1d:69:7f:3f:69:95:53:46:f7:c5:9f:1b:
e7:07:19:52:bc:8b:8e:7a:46:a0:c8:31:bb:c6:4a:3b:be:70:
26:83:f5:f8:68:58:f4:40:a6:af:f2:07:e1:05:33:5b:e6:55:
6f:cb:d7:90:ed:3c:b1:90:dd:a6:3b:a1:61:32:42:5b:04:a8:
8f:32:c0:51:0a:17:4b:80:80:c0:fe:dc:c0:e6:30:32:c2:b5:
c2:f0:95:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:13:53 2025 by rpki-client