Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b9c913ee-ed05-4815-9620-c3c48eb368a1.roa
File: b9c913ee-ed05-4815-9620-c3c48eb368a1.roa (raw, json)
Hash identifier: H3JqH6pCtVoubxO9ItIFd6IXQjodnhxzEtUqYgZUVD8=
Subject key identifier: 9A:5E:5E:5A:7C:54:64:BA:BE:A3:D7:07:5C:E1:D3:EE:E2:A1:AB:A1
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 35468CF1341ADF872A99437C5E96FA5F6C26D93E
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b9c913ee-ed05-4815-9620-c3c48eb368a1.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da69:2800::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 18:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:46:8c:f1:34:1a:df:87:2a:99:43:7c:5e:96:fa:5f:6c:26:d9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:ee:4a:57:1b:da:1f:18:12:ef:1f:f7:66:
20:0a:6d:c1:90:48:a9:3c:05:0b:d3:e1:ac:52:cf:
33:c1:b5:19:09:65:2c:79:5b:ba:25:72:ee:47:f9:
15:03:39:24:35:6a:90:67:b2:ce:ed:2d:f1:b8:e4:
e0:5d:a5:8a:78:73:11:cb:35:22:a8:d4:c8:55:ff:
21:ad:6d:26:bd:0c:19:44:52:b8:e0:e1:9d:ed:83:
d0:08:79:4f:83:8e:40:3f:e0:58:1f:40:bc:1f:d4:
0a:4c:8c:5c:89:26:3e:37:c6:5c:fe:b0:95:5f:92:
fe:e2:8d:ce:b8:d8:02:ec:9f:24:8f:80:62:62:48:
ca:7d:46:58:b6:30:7d:2c:25:51:c9:24:6c:10:89:
da:14:af:a3:3f:51:4b:ce:42:09:c3:40:ec:f1:e4:
42:f5:b6:ec:8d:a4:78:10:e8:21:e6:26:60:f3:dc:
45:7e:06:fc:48:40:15:aa:31:a1:81:c2:58:af:49:
82:16:32:64:55:8d:b1:7a:7f:a4:f3:89:b3:c5:93:
9a:af:e1:e4:d2:8a:2f:d8:8d:e8:35:f6:5a:71:a8:
da:77:a9:56:fe:d3:66:b7:f8:21:d0:f4:3c:c0:4c:
bc:ca:21:b3:6a:69:fc:6b:cd:f7:da:ae:b5:c1:7c:
8b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5E:5E:5A:7C:54:64:BA:BE:A3:D7:07:5C:E1:D3:EE:E2:A1:AB:A1
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b9c913ee-ed05-4815-9620-c3c48eb368a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da69:2800::/40
Signature Algorithm: sha256WithRSAEncryption
57:ac:ab:9c:88:32:ee:9c:4d:81:4c:20:c3:6f:e2:b6:20:75:
ee:76:86:2c:87:b1:c0:d5:28:22:75:2a:19:45:e6:49:6e:d2:
5c:13:3c:63:7a:ee:35:8d:50:76:79:b7:14:e9:c5:1d:07:66:
47:5d:ed:49:53:5c:1a:28:f8:40:8e:fb:55:56:51:f3:4e:11:
73:7f:ee:ea:92:f5:c4:b7:53:cc:65:e3:f0:79:43:1d:e8:f7:
70:ef:3d:d2:4e:2b:46:2d:b6:a2:35:57:e2:ac:3d:bd:d1:6b:
66:26:e1:64:82:2d:32:f1:ca:3c:b5:fa:72:39:b7:37:d5:b4:
0c:89:84:29:56:90:4b:e9:96:a3:8b:8e:e8:92:d1:4b:90:ad:
05:cd:1b:97:cc:f1:b8:a2:a2:a4:1a:15:b7:dd:f1:9e:26:22:
9a:74:7a:4a:0d:ff:31:dd:b6:32:27:3b:c1:ce:c2:dd:f4:f5:
56:8f:76:90:97:c0:47:fc:a7:8f:11:83:3e:6a:13:2c:93:5b:
8e:b1:d3:d3:e4:b1:30:cc:46:47:03:0b:e4:03:17:91:4d:1c:
3e:78:c9:3f:c0:ab:77:d5:bd:d5:a5:c5:58:cb:ea:06:a9:e5:
74:8e:db:83:37:83:c7:09:5a:3f:1c:59:44:e0:63:92:88:6f:
bc:2c:7a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:12:18 2025 by rpki-client