Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c98730bc-a0cd-432d-9952-237d62bcfe53.roa
File: c98730bc-a0cd-432d-9952-237d62bcfe53.roa (raw, json)
Hash identifier: WvSIlW4tLkQJTk8KbmUTzqrQhAOIVQLVqI46p+n7y5A=
Subject key identifier: 3D:92:67:C4:D3:96:C6:D6:16:19:CA:A9:DC:57:96:57:9A:8F:AD:06
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 0DA8A6AD530C1D6E8A1EF2715D772F91CA41A421
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c98730bc-a0cd-432d-9952-237d62bcfe53.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf4:1000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 16:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:a8:a6:ad:53:0c:1d:6e:8a:1e:f2:71:5d:77:2f:91:ca:41:a4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:28:fb:f5:89:99:f9:07:35:47:97:8a:65:
5b:99:ba:a3:79:3b:e5:97:7f:4c:7c:fd:4b:57:34:
70:1b:5d:96:5f:67:00:ca:bb:b0:a7:65:bb:27:64:
df:fd:33:79:c6:ae:c0:b7:42:4c:bb:da:d7:3d:07:
70:e9:9a:57:46:c5:34:5e:7e:a1:f0:fa:49:93:be:
f2:14:af:2f:bb:e0:3e:14:95:90:b3:57:29:62:ae:
7e:2c:17:d9:bb:5d:be:bc:9a:9b:b1:7e:1d:cd:c7:
53:5e:33:64:13:b4:e6:58:b5:4b:2b:18:d9:16:48:
5b:61:40:77:9f:3e:d0:13:d7:32:05:e9:b6:2e:4e:
81:31:a2:eb:d6:21:0c:93:c2:2d:64:58:92:21:9d:
95:71:50:b9:ec:0b:b8:cd:a2:51:92:78:6e:b9:77:
20:29:19:04:cb:5e:6b:1e:a8:7c:63:c3:7a:52:b4:
39:d2:9a:db:c5:5c:28:e9:f1:f8:a3:99:00:9a:5a:
1b:ac:0c:19:6f:e9:d6:06:64:d8:8c:23:70:17:76:
7b:a5:25:7b:fd:d4:c1:8b:47:69:f8:a1:ed:15:2c:
dd:59:13:ad:86:1e:92:ba:0a:dd:66:9d:51:0a:b9:
d3:f7:eb:4b:35:b2:6e:e4:da:a2:2b:24:0e:1d:15:
4c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:92:67:C4:D3:96:C6:D6:16:19:CA:A9:DC:57:96:57:9A:8F:AD:06
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c98730bc-a0cd-432d-9952-237d62bcfe53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf4:1000::/40
Signature Algorithm: sha256WithRSAEncryption
21:c9:9f:c3:ac:a7:24:a1:ff:49:89:ee:06:b1:b4:e4:b8:84:
ad:56:d2:a2:e2:2b:7f:39:a3:87:a3:16:b2:de:c7:cb:aa:97:
e6:64:69:26:58:5c:5a:62:e7:c0:3f:65:ed:d2:55:43:b0:8b:
bd:5d:97:4f:a2:ce:99:49:7a:a3:3c:9d:0a:82:45:de:68:4b:
ba:49:4f:c0:be:3c:fd:c1:c3:0e:90:14:75:3a:8d:0c:36:ac:
64:13:d8:d5:ec:95:c0:36:c4:40:c6:cb:85:ae:e4:c7:52:65:
ca:4c:16:7f:06:33:b8:9f:7c:e5:2b:f8:d3:42:93:58:38:56:
c9:06:cd:70:ba:9f:22:cf:34:49:9f:95:37:9c:64:fb:df:d4:
3c:c4:50:d5:43:b2:56:cc:f0:97:d6:df:14:f1:96:5d:4d:3b:
a0:05:a5:64:9a:ea:8b:5a:32:dd:b9:e1:3d:4c:f5:94:30:56:
1b:49:e7:5e:71:38:c8:d2:c6:11:4a:43:24:82:2b:a0:70:ac:
98:85:a2:50:80:c1:b2:b1:e0:f6:88:70:28:fa:45:cc:e2:69:
18:76:33:8b:60:10:ad:6d:00:69:17:26:b0:37:c3:72:61:c7:
30:57:c6:09:0f:20:43:11:42:58:84:75:bf:f4:22:2a:85:93:
6f:54:9b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:11:02 2025 by rpki-client