Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eb1c0802-8e38-4e81-b9bc-a20b8c7337e7.roa
File: eb1c0802-8e38-4e81-b9bc-a20b8c7337e7.roa (raw, json)
Hash identifier: JwA+NidaeCahFUu++MHE5ShRng2JNdxGtaSPxSZ1hsg=
Subject key identifier: C2:9A:AE:91:10:D5:0A:5A:1E:75:36:F9:8C:F7:28:04:8B:CF:2F:3C
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 2751FBD4DFAD3E69F6AC2950CD140CF628FB16C4
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eb1c0802-8e38-4e81-b9bc-a20b8c7337e7.roa
Signing time: Fri 16 May 2025 00:10:22 +0000
ROA not before: Fri 16 May 2025 00:10:22 +0000
ROA not after: Fri 20 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf4:c8c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 19:53:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:51:fb:d4:df:ad:3e:69:f6:ac:29:50:cd:14:0c:f6:28:fb:16:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 16 00:10:22 2025 GMT
Not After : Jun 20 23:59:59 2025 GMT
Subject: serialNumber=f585671e79fb2e8ca2e613b95b490aea7ced3db335f67c05cc2524847589b7ee, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:3f:86:ee:38:da:37:57:84:04:81:c8:33:
74:80:3b:fa:c9:a4:5c:be:0b:74:d2:e1:94:4c:e8:
1e:3b:38:8c:2f:73:78:d5:1a:6c:10:ac:c6:f9:e2:
6f:a4:49:ce:dd:23:d3:33:59:6e:5b:f5:3d:4a:87:
db:95:1c:88:28:dc:22:e8:1d:a3:cb:1b:95:af:f3:
4d:8b:9e:1f:06:1d:02:db:0a:f6:06:79:4f:f7:ef:
d7:93:5c:79:9d:f9:36:e5:54:84:be:82:18:45:64:
7d:9e:fc:8d:ff:87:ca:b0:60:f7:18:0e:5f:51:a7:
82:76:a4:b5:0a:6e:7d:9e:2e:15:d8:8c:27:af:fc:
6a:00:d7:39:19:f7:c8:a6:a4:93:cd:35:80:78:5a:
13:0d:55:72:ce:c7:6b:39:ff:ee:8f:eb:b3:4e:c7:
61:f9:ae:ea:eb:ce:8c:1b:21:f3:5a:38:58:b1:49:
fa:95:34:13:ff:07:7e:ff:29:aa:c3:dd:12:6d:f4:
05:0a:d0:64:cb:92:6f:6e:bd:19:8e:fb:48:2d:28:
af:84:54:8b:49:f9:e7:2b:06:39:83:77:28:64:34:
f0:dc:4e:48:09:24:da:f3:5d:27:1b:c0:5c:08:1b:
32:02:c9:9d:f2:4f:1f:1b:47:a9:9b:c4:bb:32:24:
d7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9A:AE:91:10:D5:0A:5A:1E:75:36:F9:8C:F7:28:04:8B:CF:2F:3C
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eb1c0802-8e38-4e81-b9bc-a20b8c7337e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf4:c8c0::/48
Signature Algorithm: sha256WithRSAEncryption
3d:c2:14:90:de:c9:15:80:4d:7b:b4:ab:78:b3:4d:c8:c1:97:
40:e7:46:75:8d:47:61:12:5e:29:bc:82:1a:ff:4b:7c:ce:04:
63:b8:98:b6:26:68:03:65:a0:1b:a5:ec:8e:2b:8b:89:9c:14:
a6:8d:f9:35:e1:44:cd:56:7e:51:e2:ba:f4:00:9f:4a:60:20:
05:1f:a3:72:68:88:d2:ab:aa:32:43:51:ef:f9:f9:d4:39:3a:
d6:97:1a:5e:bd:b9:73:ae:9e:5d:fe:43:77:80:fc:46:cb:d2:
6a:ea:2f:d7:54:0b:ff:ba:d3:75:10:b3:7e:7c:56:c8:fe:2b:
c5:cd:5a:d5:d4:8c:a3:45:bb:bd:93:6d:74:28:be:1a:3d:b5:
23:eb:b3:1b:e2:10:1d:16:6f:14:62:4e:f4:d3:39:d3:e6:7b:
7f:4c:94:3e:a0:f7:66:e5:aa:cd:6d:59:e2:c3:03:65:f9:6c:
b5:64:bf:57:5e:51:8e:51:4a:02:1d:e5:6d:db:87:94:13:c1:
6a:bd:86:11:fb:57:cf:71:dc:e9:db:1d:d6:c1:78:d5:65:70:
83:6a:d7:83:28:c2:a6:35:7d:16:2f:37:47:e5:4b:32:e9:9b:
36:ab:5a:e5:fa:3d:61:26:d1:27:62:2b:cb:26:25:59:d5:1a:
ae:ab:78:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:12:56 2025 by rpki-client