Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa
File: b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa (raw, json)
Hash identifier: cWn+j0OkZV/Cl5xWdg63Kow2Z0ADurWTBxiz502a96g=
Subject key identifier: BA:94:01:C7:61:17:49:B4:FB:41:68:AD:30:FE:73:3B:3D:70:12:C8
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 4C78EA19053062FBFCA840C0B8FDF0A1B7A529BD
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da00:2000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 16:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:78:ea:19:05:30:62:fb:fc:a8:40:c0:b8:fd:f0:a1:b7:a5:29:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:44:81:36:89:0d:59:53:83:d1:0b:a3:cf:ad:
7d:32:44:80:98:be:7b:73:9e:74:22:40:67:c6:ff:
d5:ae:49:fa:3a:73:3c:40:9a:e0:5a:51:02:0d:e5:
8a:27:cb:dc:a5:16:19:ed:45:1f:7a:77:b6:55:62:
64:ed:e1:d9:f7:8a:e5:61:c0:d9:88:33:12:35:51:
db:7d:8b:ae:3f:61:76:c7:77:7c:0e:5c:93:69:d0:
af:17:78:8e:dd:cc:e9:e4:e0:cc:75:4f:e9:3e:e9:
59:98:9e:46:5e:18:ec:5d:0d:a2:10:5e:0b:d9:6f:
62:66:05:0b:1d:e5:fa:c6:3b:dd:59:34:6b:cc:d5:
83:61:06:8d:ee:c3:66:57:44:e7:29:a1:a3:c0:b9:
6f:75:2d:f8:62:48:b2:e8:95:34:72:e6:e6:35:70:
ea:bc:c8:db:f6:03:1e:2d:b3:16:ce:d1:fd:76:58:
29:da:1a:9a:53:4d:8a:2a:34:c5:e3:83:17:76:ad:
ce:8f:51:ab:77:03:48:ae:ee:04:ce:8f:f7:11:6d:
7e:91:2c:91:0b:e7:15:4f:d8:29:b3:b3:60:a5:90:
b5:ed:3c:8e:c5:45:be:42:92:27:78:94:6d:5b:e1:
46:1f:aa:17:9e:9c:71:51:81:c5:76:e3:b3:3e:f8:
49:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:94:01:C7:61:17:49:B4:FB:41:68:AD:30:FE:73:3B:3D:70:12:C8
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da00:2000::/40
Signature Algorithm: sha256WithRSAEncryption
94:22:d2:ac:f2:64:91:28:d3:56:56:52:b1:f7:64:4b:13:ce:
e9:42:00:d9:ff:69:a5:3d:87:ab:74:7c:cb:49:35:d2:a8:2d:
43:d6:2e:cc:81:b8:59:f9:fa:e5:42:be:4e:b0:33:b5:a0:66:
f2:cb:e1:43:c0:9b:58:76:d7:81:22:5a:8e:4d:39:64:23:a2:
12:ed:99:dd:f3:ee:84:20:77:1a:a3:22:7e:a4:26:0a:f6:17:
0f:e1:17:f8:87:f0:99:69:06:0d:ba:ed:3a:05:94:a0:f7:40:
63:fc:05:51:06:22:96:45:c9:ea:27:ef:e7:81:56:8f:6b:8a:
a6:55:13:8d:d4:99:56:15:56:60:7f:7e:6f:a4:71:0b:3b:0f:
a7:57:e3:3d:3e:38:ce:cf:f5:eb:7f:02:76:e3:e4:9e:33:e2:
46:9c:7f:4e:d4:8a:ed:29:36:f2:31:31:c7:1b:12:bf:9e:de:
9d:ec:40:a8:65:da:6d:93:89:83:78:11:28:69:e1:27:10:5c:
7b:91:b0:57:1e:4f:20:19:e4:57:cd:51:b3:ff:73:cc:21:b8:
63:06:76:bf:8f:1b:a6:86:fb:16:f7:39:6a:f6:55:3d:ce:9f:
b7:9e:7c:c5:2f:b1:7f:8c:e5:b5:06:27:10:f1:ff:af:55:78:
d3:82:da:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 03:56:23 2025 by rpki-client