Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e9bdc82f-e634-4725-a517-9af23893bdd0.roa
File: e9bdc82f-e634-4725-a517-9af23893bdd0.roa (raw, json)
Hash identifier: ce0qdXN3hFbRTcatnIh+5EoETWt3vnU8Op5qLWysO/E=
Subject key identifier: 40:C5:FD:51:7E:5F:DF:43:9B:8B:AD:DA:20:E0:2D:0A:2F:51:E1:B3
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 1D83DDA84A467DC40D743E2BAD97091665B64E9C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e9bdc82f-e634-4725-a517-9af23893bdd0.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf2:2000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 15:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:83:dd:a8:4a:46:7d:c4:0d:74:3e:2b:ad:97:09:16:65:b6:4e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:bc:6d:71:75:8c:e5:25:1e:0a:68:02:ba:
17:a9:34:64:5a:8b:ac:15:aa:ae:f4:ea:d1:ba:29:
95:95:eb:0b:9c:f4:b7:b4:a7:00:2b:45:75:3e:53:
e1:34:d8:78:c3:cc:5b:cc:62:29:6a:ee:69:15:f2:
43:dd:c0:2b:ac:47:9e:1c:f3:81:67:22:92:02:25:
34:5a:10:79:f5:d7:37:2c:85:00:9b:54:6b:e0:1f:
55:f0:ba:01:3b:66:9d:9d:53:ec:d1:88:b1:ec:f9:
80:38:12:0d:95:5c:f7:f3:7c:dc:db:5a:ba:82:3a:
64:15:48:b4:20:03:11:02:c7:1b:01:41:e0:d2:55:
ee:c3:95:85:97:57:8a:a5:6e:1f:4b:b3:fc:01:58:
a9:33:7d:34:ae:5f:11:8a:f5:94:87:50:88:3c:cb:
35:2d:73:06:ed:4e:26:56:be:bb:dd:31:8c:13:6b:
4a:43:a7:87:26:d1:bb:98:3b:a3:e9:80:fe:cf:69:
9f:e0:35:e9:51:de:1b:0f:ba:82:d1:c0:9a:2e:45:
e8:74:f5:72:bb:0c:53:7e:35:81:53:e6:bc:d2:c7:
de:b1:54:c7:b5:b4:f9:4b:dc:8b:97:c8:22:2d:1e:
9c:2f:88:9e:74:1d:27:ca:1d:08:7b:5a:3d:09:64:
d5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C5:FD:51:7E:5F:DF:43:9B:8B:AD:DA:20:E0:2D:0A:2F:51:E1:B3
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e9bdc82f-e634-4725-a517-9af23893bdd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf2:2000::/40
Signature Algorithm: sha256WithRSAEncryption
7e:b9:f5:43:21:b9:81:c9:29:85:6a:39:69:bb:bb:0b:ac:06:
ee:61:27:53:84:df:10:57:d5:a4:ee:0b:c6:87:e4:8f:0a:98:
07:d2:24:db:4e:ad:4d:46:d2:f2:b7:a4:7d:68:ee:5b:c8:46:
2f:f8:b0:70:0f:9e:62:0d:50:58:54:03:bc:22:ec:94:c9:e9:
e0:69:21:9f:fa:18:2c:91:ee:88:de:38:bb:01:1d:95:9d:4a:
d3:e4:7c:e3:20:9b:a5:a0:44:d8:74:ac:97:aa:82:83:b6:ec:
04:96:72:65:02:b4:ba:af:f2:84:20:2a:f6:d1:16:59:33:2d:
39:90:a5:27:27:62:dc:ae:29:f3:34:5c:c4:ba:65:d9:1c:0a:
69:f9:d3:85:19:d5:37:e9:0e:54:0b:12:0a:45:5f:5f:04:e8:
66:56:85:2f:0f:d2:45:88:db:f1:a4:35:36:4f:4d:77:ab:98:
f1:6d:75:05:bc:e2:6c:4e:45:d7:e3:b0:bd:57:37:91:62:61:
23:2f:d6:75:54:77:fd:11:9c:77:91:6a:45:a2:93:ea:9f:e2:
14:36:47:e8:d5:88:40:ae:f2:7e:28:b1:b4:d5:08:78:16:56:
ca:bf:40:be:b9:21:df:c0:c8:69:a8:1a:90:ab:54:69:81:e1:
80:e0:52:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:01:05 2025 by rpki-client