Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a94f2984-1928-445d-84dd-31b383f82b6b.roa
File: a94f2984-1928-445d-84dd-31b383f82b6b.roa (raw, json)
Hash identifier: AUK8ZLDzw3CRKh5uvYSPXMIY661ACexrXFV6plvYrh0=
Subject key identifier: C9:4B:6F:6B:2A:6D:56:44:24:6A:0B:EC:3E:56:D5:AE:10:7C:16:2F
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 20998DB3FD7BB23D4604D526A74F45D8651ED351
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a94f2984-1928-445d-84dd-31b383f82b6b.roa
Signing time: Wed 30 Jul 2025 00:50:53 +0000
ROA not before: Wed 30 Jul 2025 00:50:53 +0000
ROA not after: Wed 03 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dafb:a0c0::/46 maxlen: 48
Validation: Failed, certificate revoked on Wed 30 Jul 2025 18:38:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:99:8d:b3:fd:7b:b2:3d:46:04:d5:26:a7:4f:45:d8:65:1e:d3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jul 30 00:50:53 2025 GMT
Not After : Sep 3 23:59:59 2025 GMT
Subject: serialNumber=f28b1f9b1c48ceb3e4aa1ab6a6d5f91a40571ef934d31f3f5117a97e8c814347, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:5c:a9:8a:72:5d:84:e2:7d:ea:f9:6c:0d:
ec:2e:ae:62:be:69:20:9e:bb:2f:d3:be:0f:c3:1f:
12:bc:2a:e3:f3:7e:6d:61:ba:d8:ea:ed:7c:bb:34:
08:7d:23:84:f1:f8:01:7d:33:a9:ee:81:15:d2:59:
c9:01:4c:e5:8b:8f:4e:a6:39:db:18:e1:b9:9e:8f:
4f:04:1c:6d:41:fc:ec:48:25:b0:78:c6:64:48:d5:
6e:96:5b:a7:1c:7e:76:c2:cd:36:5e:4a:e8:56:62:
3e:c3:04:d2:1f:97:46:a9:dd:97:0f:ea:c6:bf:cb:
f6:a4:e1:57:00:2e:48:b2:49:5d:d8:66:c9:97:72:
6f:ec:70:f2:29:21:2b:41:b0:8f:4a:27:e6:6e:4a:
c8:de:0d:73:53:4c:b1:5d:fe:11:c8:a3:bd:71:ae:
c7:8b:d8:75:fd:12:20:15:98:b5:7d:74:6b:09:a8:
b9:e3:b3:2a:22:0e:0c:c5:31:0a:7f:5a:f9:24:9c:
17:43:f4:e8:ba:f8:29:71:34:e2:a1:3d:ce:96:c0:
12:23:09:45:ef:fa:cb:3b:d8:4c:ed:01:87:c6:41:
01:b9:91:9d:f3:c6:24:5d:ef:10:61:60:c3:83:81:
aa:52:80:b1:57:f1:44:10:28:e6:1a:44:d3:66:fb:
19:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4B:6F:6B:2A:6D:56:44:24:6A:0B:EC:3E:56:D5:AE:10:7C:16:2F
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a94f2984-1928-445d-84dd-31b383f82b6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dafb:a0c0::/46
Signature Algorithm: sha256WithRSAEncryption
90:78:57:17:c0:e6:dd:a6:12:2a:50:7b:b4:de:a9:e1:12:a9:
95:c5:c0:26:28:be:0f:b7:e5:2c:0f:4a:f9:cf:9d:3d:92:49:
49:78:83:54:fc:41:f7:b8:86:88:d7:a4:03:ee:06:47:54:a1:
13:fb:19:94:49:48:ed:5b:f7:9c:91:4f:ee:f7:44:a3:c6:cd:
b1:e9:f1:d8:39:bc:de:ba:c1:62:2c:35:45:20:eb:b6:c8:21:
62:ba:4a:6a:af:96:d5:a7:31:55:af:09:67:f8:c7:c4:3f:94:
f2:50:3a:cf:66:d7:8f:2b:de:cb:e9:e9:2f:27:3d:bb:e0:28:
7a:dc:a1:a2:ed:9a:3b:ff:b1:37:e9:b4:20:bb:e7:f1:18:ec:
d7:c6:37:36:b8:6c:6d:cd:84:ee:9b:49:5b:1d:2a:9e:98:20:
cb:a9:b4:95:16:36:64:5b:12:34:b1:0b:ef:13:f9:ab:23:44:
51:6c:98:23:94:72:29:de:a5:5f:b2:68:d0:a8:3c:3d:cd:76:
0e:f1:d4:01:b5:cb:42:1a:56:a3:96:a1:25:14:a2:60:e3:0f:
61:12:44:93:eb:42:72:27:d7:48:2e:d4:66:50:5a:06:c1:cc:
9a:f7:8e:a4:e2:5f:19:01:52:ef:af:1f:dc:f8:b3:44:df:d6:
d6:9b:3f:31
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUIJmNs/17sj1GBNUmp09F2GUe01EwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDczMDAwNTA1M1oX
DTI1MDkwMzIzNTk1OVowejFJMEcGA1UEBRNAZjI4YjFmOWIxYzQ4Y2ViM2U0YWEx
YWI2YTZkNWY5MWE0MDU3MWVmOTM0ZDMxZjNmNTExN2E5N2U4YzgxNDM0NzEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQNcqYpyXYTifer5bA3sLq5ivmkg
nrsv074Pwx8SvCrj835tYbrY6u18uzQIfSOE8fgBfTOp7oEV0lnJAUzli49Opjnb
GOG5no9PBBxtQfzsSCWweMZkSNVullunHH52ws02XkroVmI+wwTSH5dGqd2XD+rG
v8v2pOFXAC5Iskld2GbJl3Jv7HDyKSErQbCPSifmbkrI3g1zU0yxXf4RyKO9ca7H
i9h1/RIgFZi1fXRrCai547MqIg4MxTEKf1r5JJwXQ/TouvgpcTTioT3OlsASIwlF
7/rLO9hM7QGHxkEBuZGd88YkXe8QYWDDg4GqUoCxV/FEECjmGkTTZvsZbQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFMlLb2sqbVZEJGoL7D5W1a4QfBYvMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2E5NGYyOTg0LTE5MjgtNDQ1ZC04NGRkLTMxYjM4M2Y4MmI2Yi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcCJAba+6DAMA0GCSqGSIb3DQEBCwUAA4IBAQCQeFcXwObdphIqUHu0
3qnhEqmVxcAmKL4Pt+UsD0r5z509kklJeINU/EH3uIaI16QD7gZHVKET+xmUSUjt
W/eckU/u90Sjxs2x6fHYObzeusFiLDVFIOu2yCFiukpqr5bVpzFVrwln+MfEP5Ty
UDrPZtePK97L6ekvJz274Ch63KGi7Zo7/7E36bQgu+fxGOzXxjc2uGxtzYTum0lb
HSqemCDLqbSVFjZkWxI0sQvvE/mrI0RRbJgjlHIp3qVfsmjQqDw9zXYO8dQBtctC
GlajlqElFKJg4w9hEkST60JyJ9dILtRmUFoGwcya946k4l8ZAVLvrx/c+LNE39bW
mz8x
-----END CERTIFICATE-----
Generated at Thu Jul 31 01:04:12 2025 by rpki-client