Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/acdbbeff-0998-49b2-8b5c-2bb111fc21ce.roa
File: acdbbeff-0998-49b2-8b5c-2bb111fc21ce.roa (raw, json)
Hash identifier: 1lehIRjNAhEi1pbRxQB+0rGU734f0CDo4F+m4OwohOk=
Subject key identifier: 5B:65:B2:75:58:35:9D:45:AC:C0:61:4A:E0:E0:97:A4:2B:76:70:D7
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 0317356822F00C061CAEE6B444CEA4E332B0EF0C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/acdbbeff-0998-49b2-8b5c-2bb111fc21ce.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da00:1000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:17:35:68:22:f0:0c:06:1c:ae:e6:b4:44:ce:a4:e3:32:b0:ef:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0b:c3:51:68:27:9b:59:b0:6c:e2:f4:2f:2d:
50:e1:fd:ef:de:99:65:31:b8:87:b3:94:81:00:f0:
e0:6a:63:da:00:f7:ec:c5:ea:8a:d1:c4:6b:b0:f7:
28:70:3f:df:af:cb:57:68:bc:04:24:4f:98:36:92:
d2:13:8c:ab:c7:60:10:53:a1:76:a8:b2:56:78:e1:
b2:0b:75:e9:7f:b5:fa:a0:69:ec:81:bc:4a:30:63:
9f:54:b8:56:ec:89:8d:ef:e5:e7:51:be:72:a7:5a:
51:c8:17:96:af:e3:88:c9:bb:1b:7a:85:41:da:9d:
7f:84:5d:03:7e:c7:c8:46:3f:45:e0:d6:39:4d:3e:
41:f3:b3:c2:c4:6e:cf:27:03:b7:0e:cf:37:d0:57:
59:b8:21:62:a8:d0:2d:69:75:af:21:75:b4:e0:fe:
be:eb:49:8e:91:e0:c7:77:7b:d2:df:6b:ee:4e:f1:
33:3a:a2:ab:db:c6:8d:58:ed:40:c0:13:5a:e0:fb:
57:fd:c9:6b:cc:69:21:3d:8f:28:e4:c1:32:06:8f:
4a:e6:d0:9c:35:a5:b2:1b:2e:8e:01:84:d9:61:f0:
1d:d7:39:6d:89:00:55:4c:d0:f1:2f:33:44:d4:62:
d9:ab:78:e2:dc:45:86:91:ad:de:a0:df:4e:3c:93:
f3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:65:B2:75:58:35:9D:45:AC:C0:61:4A:E0:E0:97:A4:2B:76:70:D7
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/acdbbeff-0998-49b2-8b5c-2bb111fc21ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da00:1000::/40
Signature Algorithm: sha256WithRSAEncryption
88:8e:25:7f:63:bf:40:85:26:1b:1c:67:d1:0e:d8:db:db:e4:
b1:d9:59:2c:74:97:00:64:42:37:99:3b:d2:d9:f2:4e:3a:db:
ff:9a:07:3e:62:98:dc:53:8d:d4:46:a7:91:95:b7:a0:e9:b5:
c7:0a:25:e1:a8:8f:d1:50:f0:83:97:c5:d4:a3:c4:69:b9:70:
09:67:29:b1:28:9f:f8:f8:20:2a:29:97:7a:a4:7b:14:60:5e:
37:15:ad:41:8d:0c:08:87:73:a2:d5:3f:7f:fe:93:04:09:33:
a7:54:55:35:e0:bb:64:b9:9f:81:c9:7e:34:8f:ba:50:9b:74:
ac:c6:24:76:7d:44:7c:27:7f:64:36:ab:27:60:70:ff:a0:54:
71:a2:1f:41:69:db:c5:ed:dd:50:ec:bb:48:ff:8f:9d:12:4c:
e7:66:b4:31:99:96:ff:05:f1:07:60:4d:c0:b5:e7:fb:14:73:
94:bb:55:75:a4:d8:38:c1:4a:bb:6c:ca:22:07:cf:e5:d7:11:
ea:f6:c1:89:a0:93:63:7f:ff:f6:78:3f:4d:40:07:5d:5d:bb:
9c:3e:b2:79:08:f2:47:8b:54:9a:d4:b9:6f:e4:27:25:e5:94:
d4:26:eb:7a:59:1a:99:1d:4e:30:e3:70:13:72:44:f9:bf:71:
8b:27:6f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 03:48:10 2025 by rpki-client