Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b04b51f6-e100-4085-9603-95f68de5b1d2.roa
File: b04b51f6-e100-4085-9603-95f68de5b1d2.roa (raw, json)
Hash identifier: PT4toF64QGTBGLgaACrmLWLkpT0o4AuxoUOh7RZv/r0=
Subject key identifier: EB:18:7C:6E:05:5E:AD:58:54:9A:E8:D7:56:96:A1:52:38:35:D6:C0
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 18E82D315767444CE668CC457908DDB416E8C688
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b04b51f6-e100-4085-9603-95f68de5b1d2.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf4:b000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 17:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:e8:2d:31:57:67:44:4c:e6:68:cc:45:79:08:dd:b4:16:e8:c6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d7:2d:10:30:21:66:ad:bd:72:08:24:12:08:
ef:f2:7f:2c:6a:f2:2d:d2:56:bb:a0:c8:80:5a:40:
4d:03:34:1d:01:f4:97:d0:c5:e3:e7:91:18:03:8b:
9b:cd:d0:97:14:a9:42:b5:21:1a:7d:ce:81:1a:81:
da:14:9e:e7:a9:85:18:87:d9:1f:f0:23:d9:4c:47:
b7:d3:f8:9f:6b:aa:4a:f4:4e:a5:cc:27:0b:45:36:
19:60:2c:51:70:b5:fe:4e:67:0d:0a:30:75:03:89:
b5:96:bc:b7:a9:80:34:5e:91:5a:33:cc:5f:92:59:
0a:c0:89:18:29:9a:56:9e:0a:12:83:37:7c:13:ad:
e6:a3:d2:b8:cb:52:2a:42:83:a8:6c:22:71:8b:c8:
c6:35:86:af:61:4d:8e:ae:ce:ca:7b:55:06:7c:88:
8f:72:c0:88:47:22:0e:30:fa:52:a9:84:02:e2:e3:
16:be:2e:98:25:1a:f3:45:51:8a:b7:0f:12:38:5e:
7b:ee:cb:c5:07:c2:22:12:96:2b:87:36:bd:5c:e9:
4b:ad:41:a1:67:e6:fe:71:4a:a8:98:87:df:0c:3e:
cd:35:cd:cb:24:3f:7f:24:51:a6:e8:41:1c:01:55:
34:7d:16:16:02:9e:51:01:00:d8:4c:74:96:bf:e8:
1d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:18:7C:6E:05:5E:AD:58:54:9A:E8:D7:56:96:A1:52:38:35:D6:C0
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b04b51f6-e100-4085-9603-95f68de5b1d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf4:b000::/40
Signature Algorithm: sha256WithRSAEncryption
03:12:00:35:96:5e:62:b6:2f:fe:cc:80:87:ed:4f:13:8c:aa:
e1:0e:d3:09:96:de:09:22:00:c0:b3:6f:55:90:24:1f:cb:cd:
12:e6:c6:85:a2:54:83:62:f3:db:8e:df:90:7a:57:2c:57:49:
93:e4:c7:bb:67:e2:e8:2f:25:cd:b9:b3:15:ab:3f:1f:92:c6:
6c:49:d3:ce:0d:84:a4:b2:96:b1:b0:39:42:e7:4d:54:ba:b5:
45:82:92:1f:f0:8c:de:2c:7d:97:68:a3:a8:cd:e4:54:5d:80:
d8:34:b4:1d:ae:a2:23:8c:d1:43:6e:38:d0:5d:04:04:f4:9a:
25:c4:34:bd:d8:75:f7:bd:eb:47:7b:3c:4c:a5:00:c4:72:43:
d5:66:51:e4:d1:da:65:47:c9:f8:7a:81:1c:f9:12:2c:41:06:
5d:2f:fd:af:1a:fe:f7:34:83:5d:a4:aa:ef:7e:ac:3e:fb:01:
55:d3:83:29:eb:d7:f2:d6:c7:9c:9a:6c:b7:2d:d5:32:3e:00:
27:53:aa:37:a2:38:60:44:91:d0:f4:f4:81:d0:f8:2c:ef:73:
c1:df:93:a7:9c:6d:b3:9d:83:96:1f:b9:af:ec:2e:06:1c:b6:
ef:e5:59:18:6b:39:4b:22:a0:95:05:6a:8f:6f:d0:e1:a8:65:
7b:7b:1e:54
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUGOgtMVdnREzmaMxFeQjdtBboxogwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX
DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAN2JjZmNlYTEyOThlMDBiYjVkNjA5
OGY4OWRjM2IwMWY3MjFjNjBjYzkyZDhmOTBjYmIyYTAwZmRmM2IyYzU1MjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydctEDAhZq29cggkEgjv8n8savIt
0la7oMiAWkBNAzQdAfSX0MXj55EYA4ubzdCXFKlCtSEafc6BGoHaFJ7nqYUYh9kf
8CPZTEe30/ifa6pK9E6lzCcLRTYZYCxRcLX+TmcNCjB1A4m1lry3qYA0XpFaM8xf
klkKwIkYKZpWngoSgzd8E63mo9K4y1IqQoOobCJxi8jGNYavYU2Ors7Ke1UGfIiP
csCIRyIOMPpSqYQC4uMWvi6YJRrzRVGKtw8SOF577svFB8IiEpYrhza9XOlLrUGh
Z+b+cUqomIffDD7NNc3LJD9/JFGm6EEcAVU0fRYWAp5RAQDYTHSWv+gd5QIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFOsYfG4FXq1YVJro11aWoVI4NdbAMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2IwNGI1MWY2LWUxMDAtNDA4NS05NjAzLTk1ZjY4ZGU1YjFkMi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba9LAwDQYJKoZIhvcNAQELBQADggEBAAMSADWWXmK2L/7MgIft
TxOMquEO0wmW3gkiAMCzb1WQJB/LzRLmxoWiVINi89uO35B6VyxXSZPkx7tn4ugv
Jc25sxWrPx+SxmxJ084NhKSylrGwOULnTVS6tUWCkh/wjN4sfZdoo6jN5FRdgNg0
tB2uoiOM0UNuONBdBAT0miXENL3Ydfe960d7PEylAMRyQ9VmUeTR2mVHyfh6gRz5
EixBBl0v/a8a/vc0g12kqu9+rD77AVXTgynr1/LWx5yabLct1TI+ACdTqjeiOGBE
kdD09IHQ+Czvc8Hfk6ecbbOdg5Yfua/sLgYctu/lWRhrOUsioJUFao9v0OGoZXt7
HlQ=
-----END CERTIFICATE-----
Generated at Wed Feb 5 04:11:40 2025 by rpki-client