Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e412b8c5-d14f-41d7-9e86-d79c89748c36.roa
File: e412b8c5-d14f-41d7-9e86-d79c89748c36.roa (raw, json)
Hash identifier: AVuYFpYyEYAcu10PFPnW6vgTVWBGdepLvA8SYS1ms/8=
Subject key identifier: 53:BF:44:2F:38:C7:F2:A0:0C:DE:FE:AE:52:E9:23:70:28:78:5B:D4
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 65C8D9B71DD10A9C13955C746783F99A74BA708A
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e412b8c5-d14f-41d7-9e86-d79c89748c36.roa
Signing time: Thu 22 May 2025 00:38:29 +0000
ROA not before: Thu 22 May 2025 00:38:29 +0000
ROA not after: Thu 26 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dab9:8840::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 19:38:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:c8:d9:b7:1d:d1:0a:9c:13:95:5c:74:67:83:f9:9a:74:ba:70:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 22 00:38:29 2025 GMT
Not After : Jun 26 23:59:59 2025 GMT
Subject: serialNumber=bbe004373e1b893004725d926b8daa68c24b0a9a0305824a3d54582723c1e3ed, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:96:05:45:91:95:3a:36:a6:58:cf:78:84:55:
50:32:ab:80:25:36:57:47:8b:a7:96:88:8b:42:bc:
18:8c:c9:fe:22:89:c9:76:b6:cb:57:e7:bb:d8:db:
a3:90:13:77:2f:79:04:f5:95:93:89:6b:1f:18:68:
cb:3e:42:7f:6c:de:bd:cf:96:b5:a4:e9:a5:fc:f3:
4b:7a:ea:e7:95:90:2a:50:42:dc:30:83:7c:bb:dd:
5f:00:67:83:b0:4d:92:e3:e8:08:b6:8d:9d:05:11:
8c:b8:2f:81:9f:e6:34:4a:ef:1b:ab:8b:64:cc:58:
f9:10:6b:ff:7e:86:46:6a:4c:bf:0d:d9:5a:a7:3d:
de:ae:5c:31:96:1c:78:3d:8a:5d:ee:e4:f0:bb:3e:
15:95:58:fb:f1:26:93:8d:02:2a:07:a8:b2:65:3b:
77:53:55:5e:cb:9f:0d:ea:57:4c:be:75:47:8c:47:
42:39:c5:4f:0c:4c:c0:30:53:c0:35:0c:e6:38:fa:
39:de:34:78:22:30:e1:8c:bf:74:e9:5f:42:87:51:
dc:11:47:a9:f0:7e:6c:e4:f3:b3:f7:df:10:c1:10:
db:02:2a:62:50:72:65:de:f2:1a:a2:66:09:40:9f:
18:de:91:04:cd:f3:3d:09:54:47:ec:02:45:aa:59:
c5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BF:44:2F:38:C7:F2:A0:0C:DE:FE:AE:52:E9:23:70:28:78:5B:D4
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e412b8c5-d14f-41d7-9e86-d79c89748c36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dab9:8840::/48
Signature Algorithm: sha256WithRSAEncryption
0b:7a:d7:83:47:5f:64:9e:88:a5:ac:97:b4:02:8f:ad:b0:a9:
ef:2c:99:74:51:44:1e:1d:48:7d:c7:11:b5:a8:c9:d1:cb:e7:
6e:7a:61:99:5f:90:76:93:b0:79:d6:2a:30:d5:29:3b:24:93:
16:70:13:8e:9c:a8:98:19:62:4d:c9:26:15:6d:a9:a8:07:87:
57:21:6c:df:96:e1:5e:a9:63:23:d2:54:f6:91:0f:b4:3e:00:
4f:40:12:4a:c5:86:8e:c7:4a:2d:96:95:73:6b:f5:85:db:b8:
3a:b9:fa:08:11:e6:ac:66:3d:d0:97:38:af:9f:94:98:33:99:
37:94:f5:ee:0b:84:f6:af:dc:f3:3a:5d:6c:09:4f:58:50:39:
b7:d3:9b:1d:a5:78:df:5f:b6:45:25:e9:8c:45:ce:9b:a6:40:
65:f2:8c:c1:ab:0e:8c:52:a1:aa:41:fc:c1:50:7e:e8:e9:46:
62:01:97:fc:ed:26:1d:86:fa:29:0c:c9:2c:6b:d1:2a:24:bc:
84:c4:62:51:d6:57:5e:cf:c1:89:c4:a1:76:41:9c:1c:67:0e:
6c:03:84:60:6b:de:25:77:1c:03:c0:ca:9e:d4:27:43:15:4c:
fb:00:e9:19:04:ed:c8:7c:6e:a3:11:9f:e4:6f:c7:4d:7b:7c:
73:5f:1b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:12:08 2025 by rpki-client