Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9d169e7-ca97-4c4c-ae07-24f80d2cb31a.roa
File: a9d169e7-ca97-4c4c-ae07-24f80d2cb31a.roa (raw, json)
Hash identifier: /4Wa0u2kutz+58EwUXPemf7dan31KuUOBG50tEIVMEA=
Subject key identifier: 26:67:D1:B0:03:FD:E0:14:D5:9A:D9:B6:0E:91:09:A0:88:BA:A7:1B
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 6C8A82F638EAFAED94F758DBFD8C7671B6F810CF
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9d169e7-ca97-4c4c-ae07-24f80d2cb31a.roa
Signing time: Tue 13 May 2025 00:20:04 +0000
ROA not before: Tue 13 May 2025 00:20:04 +0000
ROA not after: Tue 17 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf4:48c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 19:52:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:8a:82:f6:38:ea:fa:ed:94:f7:58:db:fd:8c:76:71:b6:f8:10:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 13 00:20:04 2025 GMT
Not After : Jun 17 23:59:59 2025 GMT
Subject: serialNumber=65adba1913efefd7cba18b201ee5e10efc8c00c1dd25fa08a74cd3b4de8bf7cd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e0:02:e1:b1:cb:fe:09:42:c7:d7:e8:f8:1a:
01:ca:40:e1:21:73:ae:39:ae:a2:2e:37:8b:c7:96:
51:2b:e0:88:69:a5:86:49:77:44:81:52:b2:2a:bb:
15:d5:69:05:12:10:14:b7:61:4f:55:8d:5c:b6:f6:
3a:33:db:55:f7:19:5d:91:df:60:1e:4b:b3:1b:54:
19:88:86:d1:f0:0d:f3:05:32:ae:d9:b2:e4:1e:37:
c5:c6:f8:b9:42:19:86:bb:00:e2:c9:2d:e2:2d:01:
88:18:d4:50:cc:9e:3d:96:d9:23:b4:0c:a0:a2:76:
54:48:95:4b:02:bf:eb:a3:14:58:d8:80:0f:e0:28:
9b:33:1c:19:6d:48:d3:ab:f2:a9:9b:d5:59:e2:14:
c7:f4:d7:b1:c1:51:54:32:cc:51:46:3a:2f:2a:3d:
25:92:bb:6f:fa:fa:09:bd:28:85:b7:cf:90:14:29:
dd:9e:6a:10:48:a7:b1:2e:36:22:d5:aa:e5:9e:12:
5b:b6:53:d0:fc:bf:91:cc:01:18:39:a8:8f:dc:f1:
ed:04:d6:3d:12:f0:e6:4e:83:1e:ac:f3:88:61:b2:
22:28:75:2f:12:b2:97:05:9a:02:37:1f:ee:c9:24:
be:90:70:51:bc:15:74:d7:7f:41:10:03:51:82:00:
d4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:67:D1:B0:03:FD:E0:14:D5:9A:D9:B6:0E:91:09:A0:88:BA:A7:1B
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9d169e7-ca97-4c4c-ae07-24f80d2cb31a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf4:48c0::/48
Signature Algorithm: sha256WithRSAEncryption
40:e0:0f:92:b5:45:2d:2d:6a:47:59:78:15:77:41:05:56:39:
0d:6f:a0:62:f1:d1:e3:79:f5:d5:81:a0:af:b1:13:7e:9f:61:
5c:f4:b4:f3:1c:07:f0:fb:02:7b:e2:78:a4:f1:fa:0a:2e:4e:
8a:0e:94:c6:ed:c4:66:ba:dd:c3:c9:9a:62:c6:e2:89:db:95:
96:63:94:6f:97:ee:e1:b9:07:be:89:db:04:10:54:80:42:2c:
29:2c:88:16:ae:d3:86:32:d5:2d:46:bd:94:80:a1:f6:f5:41:
be:76:b2:d0:02:25:78:aa:7d:d2:70:a5:d3:48:88:ff:c3:b2:
78:85:4c:c1:f8:02:49:16:f7:29:0b:0a:67:b9:c9:a4:e9:05:
2a:ee:15:56:10:af:33:28:f8:91:10:71:e7:75:cd:af:4a:3a:
47:05:33:76:c8:97:e0:f2:f6:26:d1:44:23:47:27:93:67:13:
05:38:30:dd:22:88:b1:b6:24:28:96:3e:37:ee:72:fb:f0:d1:
90:a9:c0:d8:50:58:11:7f:6f:ea:3a:eb:ce:f0:f7:68:05:63:
36:ee:50:bf:cf:4e:0f:1e:c2:d7:5b:6b:a2:4a:67:ca:16:84:
a9:a4:ce:49:d2:7b:f9:fb:60:7b:07:6c:a5:6f:e2:86:19:c5:
a0:ed:3e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:12:19 2025 by rpki-client