Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2483dca-fe84-4fed-8d9e-611ad95e4054.roa
File: c2483dca-fe84-4fed-8d9e-611ad95e4054.roa (raw, json)
Hash identifier: X00W4ic3RsoWUySe3gVya91qn2JTyJRE4Fl7GcIGb9o=
Subject key identifier: D4:76:12:42:81:B4:AE:CB:B2:32:97:8B:B0:BF:AB:7C:FC:CE:1B:CF
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5659F597CCB68BC9F2CA0A27D7ADED7C90C74FC3
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2483dca-fe84-4fed-8d9e-611ad95e4054.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf7:2000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 18:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:59:f5:97:cc:b6:8b:c9:f2:ca:0a:27:d7:ad:ed:7c:90:c7:4f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:33:2e:9b:e5:c7:f0:3d:ac:19:95:08:e8:
2c:0d:b5:97:6b:0d:7e:c9:71:3f:80:11:51:fd:d5:
f0:77:44:22:eb:ff:05:05:80:76:f5:9a:59:23:fb:
8c:a3:6d:d7:85:1b:14:61:a1:03:5c:15:b5:d1:05:
ed:ea:11:ac:6e:47:fe:9b:0d:00:65:60:27:d0:59:
df:37:53:53:bb:19:e7:35:e0:80:fe:70:af:f9:78:
20:47:19:86:eb:5d:dd:f6:78:66:a5:8a:11:2a:35:
19:7e:37:2e:3e:39:fb:60:2b:b0:42:72:69:71:3b:
e8:73:3b:1b:2b:71:52:cd:91:d5:4f:5a:95:a7:1a:
fe:46:5d:36:b2:7d:5d:86:0f:90:50:4f:f2:c5:d1:
9a:4d:f2:e9:1b:36:72:da:f4:9e:c6:16:f9:56:22:
b6:3f:fc:22:f2:64:1c:d8:7b:71:21:54:06:aa:2c:
c8:1e:4e:88:fd:e2:94:c2:79:0f:5d:e4:e0:8c:f8:
22:ff:72:44:6e:c5:0f:df:2d:8f:d7:cd:99:0a:5c:
80:1c:bc:47:77:dd:5c:99:67:c8:f5:72:19:a7:1f:
8c:45:0c:af:7b:2f:7b:e8:be:09:28:90:06:a4:6d:
ec:aa:9d:54:b1:f5:b1:9c:55:bf:f6:c4:3c:31:c3:
d1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:76:12:42:81:B4:AE:CB:B2:32:97:8B:B0:BF:AB:7C:FC:CE:1B:CF
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2483dca-fe84-4fed-8d9e-611ad95e4054.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf7:2000::/40
Signature Algorithm: sha256WithRSAEncryption
a9:b8:80:ed:29:00:46:c3:86:3b:66:60:c8:1e:b4:e0:f5:ce:
64:de:fc:76:9a:eb:6b:f6:4f:ce:d3:51:6b:8e:5b:d3:73:93:
29:71:48:c8:f1:47:76:4e:1d:38:a7:46:c0:3a:ed:bb:65:50:
39:9a:ba:cb:39:61:e8:b4:0d:b4:85:b3:bd:cb:cb:aa:73:a5:
7f:26:77:44:fd:4a:2b:28:a1:a8:85:b7:66:44:78:ed:fb:22:
b4:c3:95:fd:7e:1d:50:36:52:e6:f6:87:59:5f:f0:6c:18:6e:
7a:2a:4f:08:de:29:1e:ef:a1:bc:7c:b7:6a:d9:77:3b:59:ab:
67:d3:5e:48:2e:40:0e:2d:18:a0:e1:89:e0:8b:81:8d:b1:f5:
47:6e:c4:76:2e:88:fd:cb:4c:5d:36:2d:8d:d3:d7:85:53:8c:
4c:8d:f0:bc:b4:1e:c3:12:11:da:5d:19:67:bd:d8:d1:56:9c:
cd:f3:0e:cc:94:a6:1d:f9:95:02:da:a1:5f:b4:b5:f4:2a:c3:
d0:2b:5a:f2:64:c9:c8:97:70:f1:39:08:05:25:d3:a5:da:59:
5f:86:d6:d9:f6:7e:fd:72:21:77:12:38:62:70:c3:84:92:16:
3c:44:1e:21:f8:66:33:13:33:ee:f1:bd:ac:06:08:87:d8:49:
7b:7d:fa:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:03:18 2025 by rpki-client