Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bbc222e6-116f-4448-906c-f1f4faecf1a2.roa
File: bbc222e6-116f-4448-906c-f1f4faecf1a2.roa (raw, json)
Hash identifier: nd21VHzEGvTjhWC92R5xgdWzTDr5SEj6Nsp12UIndq8=
Subject key identifier: 7C:C4:71:CE:AF:6A:C0:B9:60:45:E7:6B:11:6E:26:2B:45:D3:E3:88
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 0BA925AA21507799CA8F7405212BAD525E6A6DBC
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bbc222e6-116f-4448-906c-f1f4faecf1a2.roa
Signing time: Wed 30 Jul 2025 00:21:28 +0000
ROA not before: Wed 30 Jul 2025 00:21:28 +0000
ROA not after: Wed 03 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da69:80c0::/46 maxlen: 48
Validation: Failed, certificate revoked on Wed 30 Jul 2025 18:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:a9:25:aa:21:50:77:99:ca:8f:74:05:21:2b:ad:52:5e:6a:6d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jul 30 00:21:28 2025 GMT
Not After : Sep 3 23:59:59 2025 GMT
Subject: serialNumber=650417d056046c205f4de032201766f3273271c1a525aef8689fb8a2f1907d83, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ce:51:86:3b:ee:96:68:ab:0d:78:35:86:87:
71:64:4d:29:fc:c7:83:b3:03:cc:8b:98:89:f0:65:
69:7a:f0:67:1a:f0:fd:f1:dd:bd:72:49:a6:b3:bc:
cc:fa:08:5b:0f:6c:e0:8e:a1:a3:0c:55:74:bf:fd:
8b:87:b8:0c:77:9d:d7:05:d6:c8:be:99:79:71:1d:
a9:c8:ea:22:c6:6b:4b:45:04:7c:20:2a:96:30:c0:
95:5d:65:24:7c:9c:21:8a:1b:e2:76:ae:2b:5a:41:
9b:0f:ee:d0:77:53:0d:e2:4e:3b:c2:30:e7:34:17:
ff:fc:57:d5:10:7b:ba:ec:b3:96:6f:18:2e:e9:06:
dd:28:4a:4d:02:90:e4:dd:dc:78:87:61:3e:05:53:
29:db:27:4c:e6:89:98:47:39:7e:35:24:71:64:f7:
49:24:36:ae:20:6d:f7:fa:f2:ab:e6:45:ab:ea:81:
4b:cc:3b:0b:ea:d4:bb:3a:cd:48:64:44:dd:eb:ec:
82:6e:74:fa:36:b2:5e:90:02:4f:c2:43:0e:3b:bd:
99:95:f8:20:e3:70:5d:d4:15:e5:81:00:e7:5b:d5:
c5:d7:b7:a0:f2:b7:b1:ae:99:58:0e:79:b3:4d:fa:
fd:3e:2f:15:52:3b:92:70:de:18:3a:a7:7f:81:a0:
86:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C4:71:CE:AF:6A:C0:B9:60:45:E7:6B:11:6E:26:2B:45:D3:E3:88
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bbc222e6-116f-4448-906c-f1f4faecf1a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da69:80c0::/46
Signature Algorithm: sha256WithRSAEncryption
3f:78:57:b9:ec:d9:39:c9:c2:76:16:3a:41:0c:7b:dd:79:2d:
49:6c:85:a0:b0:db:41:46:47:17:34:29:d4:68:7b:1a:87:a2:
d9:68:9b:36:da:3b:34:97:04:56:56:0b:84:62:63:59:42:fa:
df:26:c4:be:dd:fe:60:61:6e:d2:a7:90:55:bc:63:7e:92:a1:
60:3b:2b:97:51:92:5c:ad:6c:6b:4d:c5:c4:1a:8c:11:15:3f:
e2:7e:67:1f:ff:a7:9a:61:72:c1:82:71:c8:0d:ff:1d:a6:59:
db:a1:43:d7:44:27:0d:94:ec:42:85:24:bd:8c:e9:33:fb:16:
f4:91:8c:d2:e7:28:dc:96:52:90:5d:26:ca:f0:30:06:9f:4d:
6a:78:10:1d:ba:a2:4e:a1:84:0a:ab:2e:25:fa:9e:ce:f6:b6:
c4:48:0f:f4:6c:61:07:c7:65:1f:fd:81:b6:3f:2f:3f:97:23:
cd:99:ea:08:8e:33:cb:92:e2:01:4a:ee:f1:96:6f:4d:f1:6a:
f3:f2:79:06:fb:bf:1c:30:1b:f6:77:01:5f:ec:7d:85:aa:b4:
32:0e:4d:c1:83:9d:33:38:e6:0f:7b:2a:32:a1:d5:e2:9d:5d:
ef:d4:24:fd:a4:dc:1b:62:49:0e:d1:82:f2:c1:8a:b5:31:c7:
a0:27:f9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 01:02:11 2025 by rpki-client