Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a7ecee49-7d64-49c8-b1d0-58cc2a1f16bd.roa
File: a7ecee49-7d64-49c8-b1d0-58cc2a1f16bd.roa (raw, json)
Hash identifier: Bv3QkdJ6PyAITfq6HguNy+8+7Cu3OnEYRJaFkw9Ay4k=
Subject key identifier: F4:98:94:C7:55:24:5C:8B:47:5F:07:DD:66:66:C4:F2:58:2D:50:81
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5D3738AADD74585045545206D2DB2F1CC6C813DB
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a7ecee49-7d64-49c8-b1d0-58cc2a1f16bd.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf2:4000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 15:40:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:37:38:aa:dd:74:58:50:45:54:52:06:d2:db:2f:1c:c6:c8:13:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:c2:05:99:ac:7d:e8:1b:9b:11:1e:d5:78:
be:38:8d:ae:67:04:5e:bc:88:c1:3a:f3:8f:37:c9:
0d:bc:9d:1c:b2:24:54:d8:f1:59:a4:0d:79:5c:06:
a5:86:06:8f:a8:17:27:65:fe:5f:ce:19:f4:5f:65:
1c:ba:72:ab:37:68:12:15:9f:ab:f1:c3:e0:94:8d:
06:3c:94:ba:c4:c7:59:02:53:5e:07:c0:1e:92:10:
02:f0:4b:cd:c8:4a:f6:00:d4:40:57:7d:8e:52:6a:
01:16:50:fc:84:41:9c:21:21:2c:67:c8:6e:bb:c1:
cc:ec:67:e4:6f:d5:fa:5f:2a:ab:81:a1:6c:ab:a7:
19:cd:8c:b7:79:06:dd:c8:13:19:f8:b4:b6:8f:fc:
bb:90:14:25:5a:31:fb:8d:0b:68:21:9e:5a:f0:f7:
e4:a9:fd:3d:4c:df:b0:cd:59:32:2e:2c:46:db:c4:
e0:a6:e0:40:3b:12:b9:a3:68:85:cd:82:6a:02:68:
4c:db:44:b7:e8:df:3f:b8:11:a3:89:fc:15:17:81:
30:dc:e5:b1:fd:5f:8e:52:23:d0:b1:37:cf:27:19:
7e:13:86:fa:50:2b:2e:b8:22:d5:cc:9d:74:15:9c:
20:06:49:f1:d2:0b:a2:41:46:71:e9:b7:cd:3c:fa:
48:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:98:94:C7:55:24:5C:8B:47:5F:07:DD:66:66:C4:F2:58:2D:50:81
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a7ecee49-7d64-49c8-b1d0-58cc2a1f16bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf2:4000::/40
Signature Algorithm: sha256WithRSAEncryption
c0:45:4e:34:95:12:33:f8:be:00:9e:06:3f:85:d6:ac:56:76:
69:dd:41:90:c6:be:7f:8f:19:2b:c3:24:be:ce:11:1f:78:cd:
1d:37:7f:e3:09:48:94:08:ed:b7:7d:11:39:6f:67:c9:4c:3d:
df:39:aa:17:dc:de:0e:5c:35:e4:3a:4b:d0:d5:4a:db:31:15:
38:aa:7d:75:a3:4a:7b:38:d7:6c:44:f4:0c:e2:fc:fd:fc:47:
fa:60:ee:7c:dc:cd:12:31:6e:b8:e4:e7:0f:26:6d:03:14:2b:
c5:ac:38:07:59:34:cd:49:a2:dc:ab:5e:ea:34:dc:6c:2f:97:
fd:66:bb:4a:56:07:fa:b3:10:26:48:f7:84:63:9f:b9:e9:c1:
8f:86:39:4d:64:f7:7b:28:cd:38:d4:45:bb:62:0e:1e:0c:f9:
41:1c:6d:07:05:ac:e4:98:90:8d:c4:ad:a0:13:2a:f4:64:ac:
79:07:11:91:9a:c6:3f:39:5b:6b:88:0a:f9:21:d0:e2:9b:63:
52:76:73:31:cf:19:24:a1:9f:b4:c2:3a:5a:08:a5:95:d8:aa:
8d:39:cd:6b:45:ce:48:19:7a:4f:3f:67:fe:23:dc:5d:40:12:
0c:3c:5f:55:35:c0:0f:52:5a:d7:9b:73:69:1a:63:fa:38:e2:
4e:d2:19:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 03:51:42 2025 by rpki-client