Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c5eb0908-8059-48ea-b819-0091d3848aee.roa
File: c5eb0908-8059-48ea-b819-0091d3848aee.roa (raw, json)
Hash identifier: Ofr0I/t+8kW2diehR8dp0kbzNs+7FOq7AALx4737MQs=
Subject key identifier: 10:BC:21:F7:57:B7:99:95:CF:E8:9A:02:08:4D:13:85:27:5A:61:FA
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 679DB9918F780531D66649E0118CA759CE455EEA
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c5eb0908-8059-48ea-b819-0091d3848aee.roa
Signing time: Tue 13 May 2025 00:11:09 +0000
ROA not before: Tue 13 May 2025 00:11:09 +0000
ROA not after: Tue 17 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf4:7040::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 19:53:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:9d:b9:91:8f:78:05:31:d6:66:49:e0:11:8c:a7:59:ce:45:5e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 13 00:11:09 2025 GMT
Not After : Jun 17 23:59:59 2025 GMT
Subject: serialNumber=6474bc43c514abfad289b0f8764f7fa9b941d21dfd717823fd1009426410aab3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:24:72:0f:60:61:d5:01:71:95:6f:91:ef:a0:
f4:32:3d:04:ba:5d:ea:53:4a:f5:7d:0a:40:5b:e4:
18:ec:d4:dc:c0:01:0b:f3:db:1c:ec:00:10:e1:24:
f4:6f:a2:6a:3d:87:93:ab:ae:c5:b6:31:02:2e:31:
55:91:98:2d:3e:06:b0:9f:14:58:69:e6:5d:b2:3c:
30:11:58:83:c8:3f:19:21:6e:c0:6d:c5:ab:35:1e:
1b:66:87:ae:2b:31:45:f0:c3:48:b3:0c:48:c5:4b:
4d:d1:29:8d:5a:92:85:59:9a:9f:2e:11:69:72:d4:
32:f9:fa:e4:b6:b6:a2:04:c0:cc:d0:f5:e4:21:72:
f3:3c:0e:6e:7f:2d:38:ad:b6:5a:0d:be:ce:3f:7a:
77:59:5e:4e:6a:f1:38:8c:71:e7:07:fa:11:a1:32:
3e:f9:01:1d:59:a5:a0:21:33:80:79:63:19:a9:d7:
9c:a4:ca:4b:1b:44:21:76:d9:eb:53:34:c9:d2:25:
1d:31:78:ee:be:ae:b1:bb:38:93:d8:54:5e:11:fb:
ec:33:bf:56:24:15:2a:78:f4:0b:9a:95:6a:d4:15:
77:ae:f9:30:29:be:3c:b6:8c:ae:21:c7:69:56:5e:
85:61:dc:cf:0e:09:79:e9:97:49:9b:03:48:af:e2:
48:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BC:21:F7:57:B7:99:95:CF:E8:9A:02:08:4D:13:85:27:5A:61:FA
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c5eb0908-8059-48ea-b819-0091d3848aee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf4:7040::/48
Signature Algorithm: sha256WithRSAEncryption
15:8b:0e:68:0d:c7:a2:51:a9:3d:9f:84:b3:5f:19:39:7c:2f:
42:94:4d:4f:76:a4:35:fe:59:d0:0a:d4:5b:6b:e9:50:8d:7b:
b6:be:a3:59:cf:f7:5b:15:1e:5c:dd:77:8d:ed:97:c5:da:30:
ed:cb:d7:54:9a:2e:f3:7e:fb:62:97:be:2f:a0:91:2e:e0:98:
4b:ad:30:da:85:7f:f0:eb:97:57:f7:4a:ea:0e:5f:01:ed:db:
ec:44:37:75:f4:76:cc:6f:3b:fe:ee:fa:9f:aa:97:c0:58:51:
59:83:64:81:24:05:3c:d3:ba:e9:21:c5:3b:20:1f:2b:d1:74:
31:ce:45:bf:b6:e2:2e:b9:9d:ed:78:33:61:0e:2c:26:2e:cd:
26:5e:e2:15:48:b6:31:1a:a3:b1:83:55:73:83:6b:06:98:8b:
6e:3b:58:34:62:13:61:80:49:bf:95:79:fa:10:ce:ba:dd:82:
e3:7f:d5:d0:3e:a1:18:f0:ed:90:a4:4c:e2:5a:01:05:ec:5a:
b8:14:7f:86:5d:0e:c1:c7:28:f2:23:0a:a5:c4:c5:4f:d7:e1:
b1:2d:2f:3c:16:8c:c3:ee:39:fe:47:ca:2e:66:2c:76:58:a7:
f5:56:57:cf:46:c4:7a:12:84:ea:a1:20:b8:dd:7d:f4:23:fc:
b7:69:aa:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:18:07 2025 by rpki-client