
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c1c8ae50-47d8-4c2f-8704-ebdeba5ec511.roa
File: c1c8ae50-47d8-4c2f-8704-ebdeba5ec511.roa (raw, json)
Hash identifier: fZw5+6bQQk93XOsY6PMH0JWRDlCRXjZbEqvtdlm6Tlk=
Subject key identifier: 4F:E1:D0:E8:71:EC:69:0C:DA:4D:24:16:60:BF:64:FC:DF:5E:57:94
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 3D67B4C70EEA2E616C4AD37FD96370F09DB1C47A
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c1c8ae50-47d8-4c2f-8704-ebdeba5ec511.roa
Signing time: Wed 30 Jul 2025 00:11:31 +0000
ROA not before: Wed 30 Jul 2025 00:11:31 +0000
ROA not after: Wed 03 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf7:2880::/46 maxlen: 48
Validation: Failed, certificate revoked on Wed 30 Jul 2025 18:08:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:67:b4:c7:0e:ea:2e:61:6c:4a:d3:7f:d9:63:70:f0:9d:b1:c4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jul 30 00:11:31 2025 GMT
Not After : Sep 3 23:59:59 2025 GMT
Subject: serialNumber=7e0351f40436e57ca4f088204eca02c698388181673522148403c2d2c66d277f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:13:65:09:0d:ec:56:c1:03:f5:a9:94:8b:a0:
b7:52:ec:04:01:8e:20:85:fe:2d:c3:4a:9e:1f:9a:
c2:e2:6d:5f:3e:c2:2b:01:de:7d:ff:e2:c3:99:61:
94:00:e4:6e:fa:91:12:2a:16:b2:7c:db:dd:36:d4:
a0:3f:ba:d4:e4:b6:0c:c9:e2:91:8f:78:45:49:6a:
f0:66:2b:19:52:f8:40:d9:59:ae:ad:26:c2:76:51:
ab:00:22:63:93:dd:02:f2:47:1e:a4:d0:6d:bc:f6:
eb:ff:ac:26:f7:0f:05:08:96:ab:36:73:e3:c5:3a:
a6:0f:ab:86:9d:fa:22:ec:92:f0:4f:da:79:8a:19:
ab:15:50:b9:89:93:22:08:d5:51:d1:23:b4:56:20:
3b:a2:e0:c2:0c:09:03:75:47:57:b1:7d:84:86:e9:
82:df:ab:46:23:68:3c:f0:21:c3:28:23:09:a8:b8:
7f:7f:67:57:1a:c0:dc:4f:02:96:8d:3a:9f:aa:b2:
05:36:ff:69:ab:4e:65:9a:82:dc:92:44:af:bb:df:
50:b9:9b:d2:ca:e9:ee:b4:5f:49:0b:39:3d:e2:88:
ce:6f:2d:53:bd:48:5d:44:71:7e:f9:ef:2e:66:99:
5e:d6:1d:a2:48:ed:ba:d7:d3:1f:8b:86:f1:38:e9:
69:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E1:D0:E8:71:EC:69:0C:DA:4D:24:16:60:BF:64:FC:DF:5E:57:94
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c1c8ae50-47d8-4c2f-8704-ebdeba5ec511.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf7:2880::/46
Signature Algorithm: sha256WithRSAEncryption
c0:1b:e1:6c:a9:55:43:9b:20:22:07:0c:b5:18:d8:53:33:29:
25:e8:fe:2c:da:9e:88:06:11:c2:c0:e1:e0:4b:7a:10:75:e4:
8f:d3:bf:f2:4d:35:37:13:c6:e6:6a:a6:3f:2a:27:d6:4a:f6:
38:bb:22:bb:cc:9c:31:1b:a6:74:0a:26:8c:9a:54:04:f8:39:
cc:5b:98:d9:9f:fa:5c:41:5f:91:70:74:1e:1a:c8:e0:bb:1e:
cb:a8:65:be:95:31:0b:93:86:dc:f0:4b:88:4e:69:52:4f:5d:
c3:f4:85:08:cd:07:7f:a8:75:99:11:fc:95:5f:aa:a8:71:82:
ae:dd:33:85:c8:5d:a8:b9:58:f7:78:68:d9:01:0c:90:6b:a9:
2d:89:fd:f6:30:35:e5:33:b4:20:b2:8c:53:db:df:f1:41:ad:
0b:f2:fd:20:ea:75:01:e8:fd:4e:a2:ac:b5:1c:c4:8f:0c:65:
4e:3d:d7:e2:16:58:45:f6:d9:2a:7e:68:ca:44:41:38:37:78:
14:51:84:68:dd:ca:c1:b1:6a:3c:72:40:71:38:cd:81:27:67:
a7:31:98:89:e3:2a:80:9c:5d:22:63:00:ec:04:94:b3:f8:41:
6e:37:29:22:04:27:47:c9:47:61:e1:6d:ee:23:b5:11:b2:ef:
f0:fb:b8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 00:57:24 2025 by rpki-client