Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b0b5c6a1-5dd0-4536-a2eb-332bd3098549.roa
File: b0b5c6a1-5dd0-4536-a2eb-332bd3098549.roa (raw, json)
Hash identifier: 2JyprgMhZX+yvT+AjhO9twNAD7OgSeN8UDrHq1BVPxI=
Subject key identifier: A3:C0:63:47:19:CE:64:B2:E4:73:0E:F8:AA:42:EE:98:30:1C:54:E2
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 11B1CF6518CAB0CB272515C514FA87B83C36F57F
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b0b5c6a1-5dd0-4536-a2eb-332bd3098549.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf4:9000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 16:20:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:b1:cf:65:18:ca:b0:cb:27:25:15:c5:14:fa:87:b8:3c:36:f5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6f:ad:17:68:9b:38:7f:41:5d:c3:8d:27:76:
ae:6c:36:93:17:84:09:d0:1a:d5:f8:09:21:99:15:
0f:6e:f1:5f:a9:68:50:ef:e8:6e:d8:82:c4:52:bc:
3d:6f:36:33:82:fc:52:61:9e:fa:4f:ce:79:98:ab:
0c:0b:4f:a2:b0:77:98:2c:54:53:30:fd:2c:5a:ef:
93:bb:d9:c9:75:f3:72:93:f6:a7:a1:68:aa:b9:cc:
43:f2:b8:b4:a7:15:30:d9:9e:b0:82:f4:68:a6:d6:
2f:b9:fd:57:1c:87:35:25:19:6a:8c:29:3a:1a:5a:
4d:52:9d:d3:95:7d:e3:2f:da:a0:4d:51:97:75:bf:
1e:4e:5c:8e:96:60:6e:84:81:3e:ff:60:14:be:8b:
f8:67:f2:10:4d:74:f8:c5:c4:05:a7:6e:24:93:ca:
72:2e:27:e3:82:eb:f5:70:38:13:c3:3f:38:b6:86:
98:a2:ac:f0:a5:c5:e6:eb:40:22:e6:04:e9:5a:20:
d4:75:b3:0d:ca:99:e7:1b:d8:4e:b2:b7:33:3c:88:
18:89:42:b7:b3:7a:90:85:e0:51:82:a2:e7:49:47:
1a:bb:3a:90:61:c1:a8:03:8a:2e:a5:0c:ac:bd:34:
02:de:52:cd:5d:4d:80:e2:e0:b1:d6:ef:ef:52:aa:
2b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C0:63:47:19:CE:64:B2:E4:73:0E:F8:AA:42:EE:98:30:1C:54:E2
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b0b5c6a1-5dd0-4536-a2eb-332bd3098549.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf4:9000::/40
Signature Algorithm: sha256WithRSAEncryption
26:52:99:0f:25:41:21:9d:88:5b:70:ab:e5:95:cf:8e:be:f4:
a0:2e:bd:e5:33:fd:f5:f0:2f:dd:bd:c4:0c:31:15:a3:a3:59:
1f:3a:e4:5e:9b:24:67:35:7b:d8:c6:2e:fb:30:3d:7e:dc:d5:
5c:f4:70:b1:7a:be:d1:80:27:bd:88:c5:60:67:b3:79:76:03:
67:5d:e8:a9:c4:84:5d:bb:63:84:77:66:51:ac:1b:20:8a:7d:
fc:50:5a:88:2a:74:59:1d:02:d3:9e:e8:81:30:26:cb:1c:06:
89:8d:c2:c2:bb:80:0a:3a:a6:45:07:80:39:9c:cd:38:c2:fe:
b5:5a:bc:7a:c0:93:d7:d6:88:6f:be:9d:69:cf:81:63:a4:a7:
f5:9b:99:91:94:80:b5:47:88:99:fe:fa:2a:f6:6d:0f:6d:3a:
ab:18:30:76:69:fb:8a:7b:49:34:ba:12:fa:d9:2b:78:4a:ae:
1c:3a:25:53:f5:a5:be:b7:d1:57:13:3d:26:2b:50:6c:0f:d2:
08:a9:ac:bc:d7:fb:56:e6:93:3e:7b:95:2b:b9:95:c7:4a:7a:
d7:6a:e4:e5:ba:46:8f:4f:ad:70:80:f5:8c:03:9d:80:c1:a4:
4a:6c:38:c5:22:36:81:50:f1:b4:5b:8c:c0:72:cf:26:14:f5:
86:68:eb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:12:04 2025 by rpki-client