Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/de0c31a3-1155-4ffe-8487-c0a0eb6237d6.roa
File: de0c31a3-1155-4ffe-8487-c0a0eb6237d6.roa (raw, json)
Hash identifier: 09rQW8M0usSGWozMyQgZ7qXAm8T8cYk1yqWIwktBePk=
Subject key identifier: BD:95:45:A4:B2:C4:F9:99:8F:A7:4F:64:CD:2F:E6:CD:A8:EE:63:80
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 554FBB85157374DD5E4CF91BEC0D46A3A79CD42A
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/de0c31a3-1155-4ffe-8487-c0a0eb6237d6.roa
Signing time: Wed 30 Jul 2025 00:40:09 +0000
ROA not before: Wed 30 Jul 2025 00:40:09 +0000
ROA not after: Wed 03 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dafb:4880::/46 maxlen: 48
Validation: Failed, certificate revoked on Wed 30 Jul 2025 18:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:4f:bb:85:15:73:74:dd:5e:4c:f9:1b:ec:0d:46:a3:a7:9c:d4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jul 30 00:40:09 2025 GMT
Not After : Sep 3 23:59:59 2025 GMT
Subject: serialNumber=f741c64efc311ff31004901d444720facea19756b9615bb93159af8e0725a518, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0f:df:d3:96:35:ae:aa:f5:0d:09:87:68:e2:
c6:88:dd:9d:1f:0f:96:0b:0f:7b:26:9a:fc:26:ca:
78:00:13:b4:cf:9c:57:2d:ec:5e:c7:f6:9b:95:6d:
24:32:dc:a7:d8:77:1d:f0:bc:f5:4a:7c:6a:0f:a4:
8a:5a:89:78:7f:14:df:80:c7:8c:af:f4:6b:f7:be:
3e:9f:65:a8:5d:c3:85:02:8c:5d:f0:4a:9d:61:f4:
61:b8:ee:83:fc:b4:88:cb:f1:9e:7c:e3:b9:6c:e6:
56:d3:8b:39:38:e7:27:fd:33:ff:ad:34:8a:b8:a4:
2c:20:f6:bb:e3:e2:67:05:e8:88:35:17:eb:82:3c:
01:73:b2:92:15:3f:2a:2f:c6:81:ef:d0:7d:32:4a:
0d:10:5d:1e:da:1a:9d:54:c2:91:cb:5a:63:f4:4d:
50:f8:f6:46:df:ac:e8:ed:89:d5:44:86:36:23:91:
91:a0:5c:04:51:97:e0:07:5b:d3:53:36:60:3a:18:
41:d5:05:00:e6:21:d5:26:10:03:10:53:5b:dd:ae:
ed:39:e0:96:0e:1c:d0:1b:7e:50:2f:e7:93:85:76:
15:95:bc:3f:f5:8c:cc:af:19:d6:0e:21:61:f9:6d:
81:f2:2d:5a:49:de:1e:82:05:12:96:74:d2:45:ea:
fb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:95:45:A4:B2:C4:F9:99:8F:A7:4F:64:CD:2F:E6:CD:A8:EE:63:80
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/de0c31a3-1155-4ffe-8487-c0a0eb6237d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dafb:4880::/46
Signature Algorithm: sha256WithRSAEncryption
35:2e:aa:d4:11:c4:63:6c:0c:63:6d:63:4c:41:57:8a:5f:71:
fe:c9:95:b7:e9:80:45:6d:bd:61:a3:26:0f:78:6f:1f:67:d3:
c7:0b:96:c8:1f:6b:37:3e:15:21:05:ef:ab:f1:c7:09:e5:72:
ba:dd:aa:2a:af:98:2d:1b:5b:e9:e2:49:b8:2b:88:1c:08:6d:
ef:60:0b:e6:22:7f:a5:31:49:9d:b2:7b:5b:46:a6:11:9b:cb:
5a:10:6c:e2:ef:fd:b8:4a:1a:a0:a2:54:f9:75:1a:b0:09:da:
ec:83:c2:6c:63:64:84:ef:07:bb:0f:ae:ef:40:d5:0b:a5:d9:
a1:fe:81:c5:14:3c:61:14:69:23:e7:2c:48:ca:9b:55:0d:6e:
3a:18:f4:88:9f:5c:12:40:4e:48:45:3f:8d:da:1f:dc:0e:bf:
56:5d:3f:6a:4e:fe:30:3f:05:81:fc:56:7c:76:81:08:e3:b8:
66:6f:af:ab:d6:87:9c:a8:ed:d7:6a:2c:8f:77:f5:a1:d0:37:
16:d7:41:42:60:bd:74:63:fa:19:3d:c9:01:ab:3a:14:46:e1:
25:fe:5a:fc:9d:4a:c2:5d:ef:16:dc:0d:72:8f:e3:46:41:fc:
1c:37:53:29:52:27:05:ef:0b:1e:f9:26:38:a4:c1:5b:cc:ed:
9a:37:d3:1b
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUVU+7hRVzdN1eTPkb7A1Go6ec1CowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDczMDAwNDAwOVoX
DTI1MDkwMzIzNTk1OVowejFJMEcGA1UEBRNAZjc0MWM2NGVmYzMxMWZmMzEwMDQ5
MDFkNDQ0NzIwZmFjZWExOTc1NmI5NjE1YmI5MzE1OWFmOGUwNzI1YTUxODEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA/f05Y1rqr1DQmHaOLGiN2dHw+W
Cw97Jpr8Jsp4ABO0z5xXLexex/ablW0kMtyn2Hcd8Lz1SnxqD6SKWol4fxTfgMeM
r/Rr974+n2WoXcOFAoxd8EqdYfRhuO6D/LSIy/GefOO5bOZW04s5OOcn/TP/rTSK
uKQsIPa74+JnBeiINRfrgjwBc7KSFT8qL8aB79B9MkoNEF0e2hqdVMKRy1pj9E1Q
+PZG36zo7YnVRIY2I5GRoFwEUZfgB1vTUzZgOhhB1QUA5iHVJhADEFNb3a7tOeCW
DhzQG35QL+eThXYVlbw/9YzMrxnWDiFh+W2B8i1aSd4eggUSlnTSRer7RwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFL2VRaSyxPmZj6dPZM0v5s2o7mOAMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2RlMGMzMWEzLTExNTUtNGZmZS04NDg3LWMwYTBlYjYyMzdkNi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcCJAba+0iAMA0GCSqGSIb3DQEBCwUAA4IBAQA1LqrUEcRjbAxjbWNM
QVeKX3H+yZW36YBFbb1hoyYPeG8fZ9PHC5bIH2s3PhUhBe+r8ccJ5XK63aoqr5gt
G1vp4km4K4gcCG3vYAvmIn+lMUmdsntbRqYRm8taEGzi7/24ShqgolT5dRqwCdrs
g8JsY2SE7we7D67vQNULpdmh/oHFFDxhFGkj5yxIyptVDW46GPSIn1wSQE5IRT+N
2h/cDr9WXT9qTv4wPwWB/FZ8doEI47hmb6+r1oecqO3XaiyPd/Wh0DcW10FCYL10
Y/oZPckBqzoURuEl/lr8nUrCXe8W3A1yj+NGQfwcN1MpUicF7wse+SY4pMFbzO2a
N9Mb
-----END CERTIFICATE-----
Generated at Thu Jul 31 01:04:09 2025 by rpki-client