Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a82a4699-15b2-4cc5-8957-de9928293f28.roa
File: a82a4699-15b2-4cc5-8957-de9928293f28.roa (raw, json)
Hash identifier: ZRFYe45yRS66GWieuk9Ium69mPap60CEmujZykBqiBU=
Subject key identifier: A2:E4:35:2B:FF:27:10:FC:8E:E3:CF:17:EA:4E:9D:FA:B1:2F:49:3D
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 7362D931A285FE60D78AAB628075351B02396DE6
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a82a4699-15b2-4cc5-8957-de9928293f28.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf7:800::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 19:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:62:d9:31:a2:85:fe:60:d7:8a:ab:62:80:75:35:1b:02:39:6d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:28:1f:6b:79:17:74:0e:d6:de:c7:52:95:
2a:c3:b7:fa:1e:f0:c4:2e:b9:fe:18:54:9d:f1:ee:
50:4d:fe:ba:69:8e:9b:27:73:a3:51:1b:9e:57:d5:
28:d8:fb:c1:1c:af:56:d6:d1:2b:09:07:55:07:b9:
f7:22:a0:97:a4:b8:11:83:22:51:c0:5a:c2:50:93:
4a:82:ac:b2:e1:57:e1:d7:4c:e0:af:82:0a:ac:1b:
be:c3:dd:13:8b:22:d4:01:26:78:d2:0f:a2:ce:ec:
73:2d:6a:27:67:05:35:f8:b4:07:3c:4b:ce:07:e8:
bc:ec:20:9a:4b:21:0f:d5:af:63:53:f2:71:0e:39:
f2:e1:f0:36:05:ec:57:30:93:d1:7b:b1:1e:e3:41:
9c:36:14:cd:c1:4b:56:09:7b:85:4b:db:7a:b7:08:
aa:e4:07:85:4b:80:87:80:2a:b7:e7:0d:00:cd:01:
4e:80:4b:1e:76:5e:e6:bf:4d:e9:20:86:b7:08:81:
13:14:49:bd:83:9b:e8:79:78:9a:dd:81:c6:07:98:
35:00:3a:51:c1:9f:aa:7f:d7:dd:34:2f:0c:89:6e:
03:75:4e:47:09:f9:f9:27:f6:9e:9b:85:11:1d:0e:
b9:68:44:c6:82:eb:9b:5c:2e:28:4c:13:ef:4a:ec:
8c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E4:35:2B:FF:27:10:FC:8E:E3:CF:17:EA:4E:9D:FA:B1:2F:49:3D
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a82a4699-15b2-4cc5-8957-de9928293f28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf7:800::/40
Signature Algorithm: sha256WithRSAEncryption
1a:29:42:21:a3:7e:e4:99:b5:07:d5:2c:f0:31:6d:4c:ac:69:
30:78:8a:88:40:4e:34:b6:a1:92:bc:33:41:e2:da:40:3a:7c:
3d:14:82:ae:e5:3d:c9:38:69:45:7e:b8:8a:f3:3f:34:5c:c9:
e7:3d:c7:6a:40:fa:9e:15:2a:48:6b:ec:e5:82:f3:df:0f:d4:
fd:40:8c:ea:08:97:92:93:3d:d0:b9:fd:ba:bf:96:06:da:91:
a3:60:64:0d:76:2d:99:b7:32:a0:19:83:19:50:9f:68:52:4c:
c8:43:38:69:7a:60:21:4c:96:66:1f:5b:a8:52:82:11:b4:ae:
b0:86:6e:5b:29:50:02:9a:2b:4e:ab:0f:bb:5d:ae:bc:0a:89:
d4:a9:40:78:f7:2f:72:98:68:43:42:f0:9a:4c:54:c0:f3:af:
ed:17:22:b4:e0:52:b1:10:cd:7e:e0:08:db:73:6c:74:d8:7f:
32:d0:01:0e:cc:82:64:ec:c6:de:1f:ac:d9:5c:46:81:f0:5d:
26:b7:d0:6d:ea:94:4b:27:e3:c1:a4:b3:02:3f:58:99:4a:9b:
ee:e0:fa:20:54:13:8d:bc:cb:ca:fc:bf:68:d6:b7:1e:5e:2c:
3d:d0:62:de:17:61:3a:8f:6b:b5:04:6c:d0:d4:0f:f5:b4:6c:
f4:20:3c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:04:13 2025 by rpki-client