Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1d34582-e896-46c1-9e9d-d17ed2292b03.roa
File: b1d34582-e896-46c1-9e9d-d17ed2292b03.roa (raw, json)
Hash identifier: eUplaHGdQ/DjHoFIgcFjuoeBY3Gkk04xKSjrUsLAsDM=
Subject key identifier: 99:6F:71:AE:E3:4C:85:7B:4E:03:ED:A2:90:8F:CB:16:4B:C2:C9:5F
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 3DC8AFF95A469C9526AFB6854D42632B2E013884
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1d34582-e896-46c1-9e9d-d17ed2292b03.roa
Signing time: Thu 22 May 2025 00:51:54 +0000
ROA not before: Thu 22 May 2025 00:51:54 +0000
ROA not after: Thu 26 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dab9:c840::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 19:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:c8:af:f9:5a:46:9c:95:26:af:b6:85:4d:42:63:2b:2e:01:38:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 22 00:51:54 2025 GMT
Not After : Jun 26 23:59:59 2025 GMT
Subject: serialNumber=85e8b128755863029f12639e5683a07842178e85870011537ca37a83af37ab20, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:c3:b1:7f:02:bf:e2:11:84:e3:cb:d0:6e:
77:e6:a9:38:c9:8d:6a:29:c1:78:3e:6b:31:ca:4c:
91:9a:f2:29:f7:37:88:68:f7:0c:b1:03:75:c0:a6:
05:cc:d4:45:d4:81:aa:98:75:ed:1e:75:1a:0c:0f:
a0:20:28:93:37:9c:2c:19:87:c0:78:10:45:d5:d5:
96:b1:57:c5:81:bd:29:54:e8:c9:d7:19:49:c2:fe:
ea:73:b3:a6:3b:df:25:dd:7e:95:95:3f:7c:5b:c0:
73:80:38:5b:56:ab:32:af:06:f2:64:57:2e:3d:22:
10:23:c6:71:2e:1c:d9:68:27:03:8a:23:5c:04:be:
7f:6c:7a:d0:b1:ea:b1:b2:da:e9:61:cf:43:17:1e:
53:59:61:8e:f7:d4:7c:13:0b:94:f2:f3:07:9c:6e:
c6:f0:83:60:0f:5f:25:dd:bc:37:71:30:82:67:88:
a6:0a:45:48:91:36:41:99:93:65:59:4e:41:24:e3:
b2:48:73:80:64:64:02:8a:26:2e:03:d8:8c:76:79:
48:29:d5:5d:ac:f4:fc:77:d9:13:86:0f:a4:8a:76:
2d:15:73:87:4d:9a:12:74:37:57:92:13:81:fe:9c:
4c:bf:a3:f0:9b:30:6b:77:26:95:80:25:94:62:e3:
5f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6F:71:AE:E3:4C:85:7B:4E:03:ED:A2:90:8F:CB:16:4B:C2:C9:5F
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1d34582-e896-46c1-9e9d-d17ed2292b03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dab9:c840::/48
Signature Algorithm: sha256WithRSAEncryption
2b:be:6a:b1:d3:a4:a2:a2:cd:60:c3:c4:14:4f:53:8e:ee:a9:
49:db:05:81:e4:4c:0d:18:c3:cc:5e:2f:71:0c:5d:ee:6b:09:
be:54:74:69:55:9e:23:c8:b5:f5:63:1c:8e:15:0a:31:a2:5c:
b4:44:e7:18:2d:7a:43:b7:4b:cd:22:30:5d:39:93:9a:3b:1f:
c5:55:b8:8a:67:fb:f7:89:dd:67:85:40:c0:53:38:10:3f:9e:
ec:b9:a3:bf:d6:94:35:cd:d6:55:c6:4b:74:58:f7:a5:bb:c4:
7a:50:e6:37:e2:f5:0a:e6:d8:1f:5a:01:77:7a:d6:b4:56:5b:
46:7a:3e:ca:15:57:c2:08:51:bf:88:99:ff:f4:13:a4:d4:b5:
e0:ca:3b:49:1b:ea:06:c8:8d:15:ad:e7:34:83:b7:39:25:5e:
6e:8e:7c:a2:11:52:b0:d8:53:9c:49:28:fb:0f:d2:20:55:3e:
69:e2:8d:06:0e:49:2f:02:90:34:29:40:e0:47:cf:83:1f:b2:
dc:99:04:ec:42:2f:7a:b9:c0:04:8c:04:a3:c7:49:c4:5e:c5:
b5:20:24:3b:0e:f7:51:7f:b4:09:84:54:9b:04:50:f9:0c:37:
e1:ef:ec:fa:b2:b8:89:50:c8:30:1d:dc:58:d8:79:f8:46:71:
50:14:d8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:17:56 2025 by rpki-client