Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cad0253c-e8ea-4a70-af97-ef37e7b915e5.roa
File: cad0253c-e8ea-4a70-af97-ef37e7b915e5.roa (raw, json)
Hash identifier: IFpGZQcb1gWihFqcRPePh5sKiRnw5exPI3xpyM53k2E=
Subject key identifier: 08:27:E6:F8:0D:25:4E:B6:9E:C7:C5:EF:9A:6C:2A:C2:90:0F:78:70
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 7A3EA6F1761F3874C663F18B97C740FCE3EE5DF3
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cad0253c-e8ea-4a70-af97-ef37e7b915e5.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da61:1000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 16:40:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:3e:a6:f1:76:1f:38:74:c6:63:f1:8b:97:c7:40:fc:e3:ee:5d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4c:fc:de:63:f0:a6:39:d3:2e:0c:05:cc:0f:
a9:79:eb:9a:36:64:f0:c2:06:59:70:61:5f:61:ac:
19:3d:8d:b1:aa:d7:64:79:96:c4:6c:04:91:d1:94:
34:a6:e9:87:7a:26:05:a9:e7:95:ba:2b:f2:43:33:
af:4b:d7:79:13:cd:5f:e9:c9:08:55:8f:95:3b:8c:
32:ef:33:26:90:cb:6e:3a:69:33:9d:17:f4:02:c4:
19:78:bb:88:88:f2:c1:fb:44:40:8f:cb:43:77:fb:
ba:8f:13:03:87:52:cc:c8:34:10:d2:1f:95:e6:78:
ce:e6:f7:cc:3d:7d:b1:ea:3e:1d:2c:c5:ab:c3:9d:
cb:56:1a:9e:f7:c2:7a:93:0e:18:3a:04:ff:51:49:
43:9e:23:d5:71:8c:c9:db:78:dc:d1:b9:e4:3d:e6:
86:0c:d6:4c:c0:f0:13:4e:04:4c:91:32:24:0a:ab:
5c:3d:a9:72:58:6f:4f:cf:3f:a8:6e:53:f4:25:f8:
07:0e:11:77:84:0c:ea:e1:58:97:14:ee:d2:6f:c2:
83:28:d7:f3:d2:0c:e4:69:97:63:b1:e1:6d:0b:9a:
e3:e6:66:86:28:16:36:3e:db:ee:58:0e:af:f3:61:
09:15:01:b6:e9:7c:fa:8b:58:ae:02:fe:3f:c6:9c:
ab:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:27:E6:F8:0D:25:4E:B6:9E:C7:C5:EF:9A:6C:2A:C2:90:0F:78:70
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cad0253c-e8ea-4a70-af97-ef37e7b915e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da61:1000::/40
Signature Algorithm: sha256WithRSAEncryption
52:52:54:aa:e1:61:59:18:9e:36:36:04:d8:72:15:40:ab:60:
dd:27:ce:91:d2:0e:93:a3:83:38:53:e3:21:80:a6:14:81:f2:
12:06:fa:f2:48:60:97:2f:f5:1d:c7:5b:3c:e5:30:e1:39:34:
f8:ff:57:1b:93:c3:ee:37:4a:6b:af:3f:c4:c9:77:a0:3b:8f:
4c:cd:e7:82:72:43:ad:c0:e0:4e:c5:ed:e9:f0:28:d6:ff:1b:
54:15:6d:89:9a:29:bb:75:e7:57:c9:d5:6e:a3:98:17:99:5d:
b9:da:fe:2c:7d:8a:29:e5:66:e4:9b:53:1c:c6:10:4a:ed:68:
e5:46:ab:19:7f:95:b5:cb:a3:24:7b:b6:31:77:d6:0b:e9:a8:
a1:86:cc:66:07:80:01:13:a0:a1:f7:8c:e4:b7:fb:cd:6b:75:
3c:cb:85:f0:eb:26:18:99:a4:59:c7:e4:75:7e:ca:eb:8f:9a:
80:79:18:00:1a:29:6e:f3:e5:30:2c:78:a7:06:47:05:b0:d2:
0c:54:d0:d3:0b:a5:bb:53:d5:8c:95:89:97:e3:04:27:d6:ac:
4b:a9:51:cf:56:5e:db:f4:94:b7:8b:54:b5:d1:23:94:0e:b4:
14:2a:92:a5:85:4f:93:53:5e:33:63:89:77:7b:23:cc:e1:d5:
8c:af:75:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:07:58 2025 by rpki-client