Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bfd05aec-788a-41d2-879d-63b299e1cbde.roa
File: bfd05aec-788a-41d2-879d-63b299e1cbde.roa (raw, json)
Hash identifier: +1g8g0Eim02Xf2hkJIblQSZEW1wOHN2inf18HZ98fM8=
Subject key identifier: DA:94:0D:F5:EA:EB:73:75:01:77:58:4E:07:94:FC:90:CE:63:4A:39
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 49B4EAEAE4E9CAA4EDEBAF655DBC1B806A72BF43
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bfd05aec-788a-41d2-879d-63b299e1cbde.roa
Signing time: Wed 14 May 2025 00:20:09 +0000
ROA not before: Wed 14 May 2025 00:20:09 +0000
ROA not after: Wed 18 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf4:4840::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 19:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:b4:ea:ea:e4:e9:ca:a4:ed:eb:af:65:5d:bc:1b:80:6a:72:bf:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 14 00:20:09 2025 GMT
Not After : Jun 18 23:59:59 2025 GMT
Subject: serialNumber=da136935075df2734876220569854c8d62b748943a5b4ecd599f315905c816a9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:db:0a:b8:78:82:00:82:c8:f0:92:eb:80:62:
be:fc:80:b7:dd:d3:8f:14:5b:94:05:d1:17:ae:e4:
a1:80:a4:39:d8:af:2e:26:5b:31:48:e2:e6:e9:6b:
b9:37:0e:33:6c:b6:3f:42:ca:b7:ec:88:69:3e:ac:
3b:cf:1f:35:ad:b1:3c:01:5b:fd:89:ef:76:c6:65:
e8:cb:b5:9c:f9:e7:65:e3:92:98:b2:72:9d:e7:cd:
97:13:07:de:04:85:c5:a2:72:04:d8:7c:d2:c5:f0:
91:a5:0a:ea:72:f3:1a:af:ac:ad:da:60:81:72:1b:
57:e1:15:46:f6:ee:c8:b6:7f:54:ed:f6:aa:78:34:
fb:0e:4d:ff:21:42:c0:a4:e3:1c:ec:65:fd:fd:f3:
85:35:3a:0f:cf:9d:02:2c:2d:58:f6:15:76:76:40:
ff:29:4b:c9:58:77:8a:23:93:88:bb:0f:c4:ad:f5:
25:d8:2f:7d:67:77:4e:d0:29:a5:03:92:33:7a:24:
91:30:21:ef:4e:49:ad:0b:d5:c3:03:22:71:9d:99:
f7:fb:38:5d:f7:77:5d:1b:5e:06:4c:d6:9d:96:da:
b7:44:26:c9:3d:bc:ba:ec:91:ff:c1:b7:81:37:21:
74:fc:33:c0:69:6a:cc:08:1a:5f:fd:0a:36:9c:6d:
b1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:94:0D:F5:EA:EB:73:75:01:77:58:4E:07:94:FC:90:CE:63:4A:39
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bfd05aec-788a-41d2-879d-63b299e1cbde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf4:4840::/48
Signature Algorithm: sha256WithRSAEncryption
09:69:6f:81:c6:d2:b3:fa:b0:6d:c8:c6:f8:b6:3e:ac:3e:67:
4b:d1:7e:15:26:f2:c1:b0:72:52:78:6b:b8:3e:61:21:ce:67:
8f:5e:57:e0:b1:24:a6:f5:27:19:8f:7a:d6:c2:da:22:2d:0d:
46:79:e2:b1:99:d5:41:28:6f:21:b4:d6:69:46:3f:4b:79:71:
dc:e2:57:43:33:ed:97:7c:48:0f:ad:16:9f:dc:7f:31:4f:46:
95:b0:10:95:6a:d2:95:ca:01:8a:7b:06:56:23:a0:fb:d7:60:
a0:2c:25:48:19:8c:bf:58:a9:72:a4:d6:6e:cb:b5:6d:61:7e:
77:83:77:ee:23:f4:0f:bf:67:ed:0b:61:af:6d:cb:bc:07:95:
f2:b6:52:7d:e0:43:01:8a:bf:bf:dd:ea:86:60:b7:65:ec:83:
94:46:25:0a:a1:92:0b:5e:4c:6d:32:36:1a:34:90:ac:28:fa:
e0:e7:c8:1e:bd:21:7f:c9:fe:e1:83:de:92:9d:9b:1b:64:c3:
46:8b:83:b9:8a:4a:f2:8d:72:cf:02:93:1b:31:4c:d9:5e:14:
ea:7d:e8:b5:a8:4c:7d:36:de:20:99:39:a6:be:87:c1:ca:a8:
36:fe:f2:45:d9:60:99:94:f6:44:b2:52:03:96:ea:ee:64:a2:
56:c4:a5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:28:46 2025 by rpki-client