Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a2dfef2f-8338-40af-9ecb-7ab01162740f.roa
File: a2dfef2f-8338-40af-9ecb-7ab01162740f.roa (raw, json)
Hash identifier: xl6d4fEicdrmnmlaZnPq5NOWSCO9C6GZMrk+uJbNNWA=
Subject key identifier: 2B:E4:CC:D4:B4:F4:E3:89:BD:24:B9:A7:B3:5F:1F:F3:7E:3F:42:86
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 4E984A04B20D1F1DA1C83DE4E9D74C972AA70B34
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a2dfef2f-8338-40af-9ecb-7ab01162740f.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da69:e000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 18:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:98:4a:04:b2:0d:1f:1d:a1:c8:3d:e4:e9:d7:4c:97:2a:a7:0b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:88:a4:0c:54:8c:91:35:0b:53:98:99:d9:0b:
82:ef:9b:24:69:d9:7f:94:d0:b5:01:04:82:fc:3f:
10:59:82:7a:af:65:d0:b6:e4:19:9f:43:af:09:bf:
8d:61:c2:0e:13:ae:25:58:92:6b:2a:c3:5f:46:1b:
ae:e1:52:22:a7:d5:12:c4:02:21:69:74:81:29:72:
ee:4a:21:4a:bd:46:6c:13:92:a7:52:4c:d7:e7:1f:
51:59:29:4d:13:81:f6:a7:84:28:8e:6b:7a:26:85:
73:32:65:f4:a1:67:9b:15:70:6b:6e:b2:94:f6:80:
7e:a9:03:8d:51:39:f5:c2:5c:52:db:ee:60:86:84:
eb:79:96:15:25:6b:4a:ea:2a:a3:05:0b:e6:cb:58:
2a:9b:69:4a:a7:58:ac:78:1c:47:0e:02:4f:e3:de:
e2:6d:f7:82:9d:35:aa:e0:aa:1b:52:ea:43:95:a6:
18:76:c5:e6:d9:d3:1f:a3:c5:b7:f2:7c:19:c7:f1:
29:38:de:66:d9:17:68:b9:e4:29:f7:a5:0b:ce:dc:
2c:92:18:97:99:9d:8f:bd:39:c7:98:cb:a8:9a:c6:
23:55:4e:03:ce:28:eb:fc:c9:de:2b:b6:1a:8a:72:
d6:5f:24:02:17:18:7f:4e:de:d3:c2:35:09:4e:ea:
f2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E4:CC:D4:B4:F4:E3:89:BD:24:B9:A7:B3:5F:1F:F3:7E:3F:42:86
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a2dfef2f-8338-40af-9ecb-7ab01162740f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da69:e000::/40
Signature Algorithm: sha256WithRSAEncryption
c3:73:87:26:28:b8:50:3f:48:fc:17:a4:61:b3:a7:6d:e5:15:
e2:4f:e2:1f:3a:9d:e0:2b:4c:05:0b:ed:0d:07:da:6e:b1:e6:
6e:cf:c9:b5:31:29:1c:48:79:03:3b:43:10:d8:27:e9:c5:f1:
ef:a1:81:a8:a4:55:54:6b:99:af:68:e3:2a:1a:03:82:f5:44:
67:f3:c1:e3:8f:77:bd:0d:b2:9e:18:cb:95:14:c6:62:82:31:
0b:92:32:d1:b6:88:cc:41:cd:7d:a2:dd:15:a7:0b:ac:a6:d1:
ca:6d:ae:6e:f6:5a:72:cd:3c:35:d9:54:cd:1b:f7:76:85:22:
92:73:84:34:e3:ca:e6:ef:25:e7:21:8c:60:a5:b8:9a:40:72:
17:40:20:91:03:2f:1f:d5:1a:e8:4e:21:72:f5:92:32:9e:d1:
89:9d:12:6c:1a:bb:13:21:56:46:f2:5d:9a:c0:0a:3c:5d:89:
22:36:41:aa:dc:0f:cf:80:f0:66:a9:12:76:97:d7:00:c5:f0:
c5:27:f4:0e:26:c4:30:7c:a9:bc:a2:4d:85:fe:c9:02:88:f6:
06:96:d3:1c:0c:38:de:b3:3c:2e:df:5e:03:95:ab:c3:de:36:
0d:e9:a7:e6:b1:20:de:45:eb:90:9b:f5:c7:bc:aa:6c:5c:d1:
66:85:5e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:03:05 2025 by rpki-client