Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ebef3a9a-a888-4ea6-8c9c-f166ba84d461.roa
File: ebef3a9a-a888-4ea6-8c9c-f166ba84d461.roa (raw, json)
Hash identifier: 1eFNIGWFwXUZHC1/hM1BdZ7ptm8ewEw9PU7jnJ78Igs=
Subject key identifier: 9F:6E:AF:D4:E1:06:07:94:B1:97:83:3D:97:BA:FE:CA:76:C1:EF:FA
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 4F7C79BCCDF72E1F9ADA3523D4678C2100C4353D
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ebef3a9a-a888-4ea6-8c9c-f166ba84d461.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf7:b000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 18:41:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:7c:79:bc:cd:f7:2e:1f:9a:da:35:23:d4:67:8c:21:00:c4:35:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1b:db:36:86:24:a1:45:1a:31:c5:82:1a:b6:
de:9b:df:b7:1c:9e:fb:8b:39:05:24:d2:00:0b:07:
bd:08:a7:a9:04:a6:d6:6a:fd:48:5e:39:64:d3:cb:
17:cc:4b:e7:4e:03:c4:42:d5:ec:39:78:2f:3b:17:
50:44:53:a1:c5:d6:94:a7:75:f8:c6:6a:a5:f6:1a:
e2:25:4d:98:bb:4c:68:ca:88:27:c1:e9:75:6e:69:
e4:d2:35:e8:48:13:3b:0b:44:f1:c7:e8:50:a0:51:
37:47:b0:a4:31:8f:9a:29:a4:6a:70:68:6c:dd:01:
6d:28:89:42:40:8d:d6:46:cd:b7:12:97:e1:02:98:
43:01:58:ba:08:0f:81:c8:a3:01:1b:46:2c:07:75:
8c:35:7c:ac:6a:4c:8a:33:4c:8a:dd:c8:51:4a:81:
e9:fc:a2:0b:8f:c9:39:01:af:26:89:8d:1b:24:09:
15:43:41:5c:fa:8b:4b:bf:42:d5:f0:74:45:d7:77:
2f:7b:41:0e:bd:39:83:a8:6e:a7:44:ee:39:b8:b7:
b7:e2:12:e5:e7:1b:b2:52:7f:56:09:9e:48:4b:a6:
4f:82:5f:0c:d5:0e:5a:9d:91:59:c3:23:ab:63:08:
67:52:56:e6:85:39:c9:22:ab:49:b6:c5:b6:e9:1e:
23:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6E:AF:D4:E1:06:07:94:B1:97:83:3D:97:BA:FE:CA:76:C1:EF:FA
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ebef3a9a-a888-4ea6-8c9c-f166ba84d461.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf7:b000::/40
Signature Algorithm: sha256WithRSAEncryption
c7:e6:3f:bc:66:88:b8:19:7b:1f:5b:d2:8f:a5:c4:52:56:21:
b4:ae:bd:1a:7e:ca:9b:d1:2e:9d:d5:0a:14:a6:07:f3:59:b0:
84:4c:b1:c2:64:1a:f3:c3:97:e5:e7:56:9f:fc:fd:da:8a:fd:
02:0e:73:aa:19:c7:fe:6d:52:3f:69:92:78:97:77:a0:9c:0c:
e0:46:93:4a:63:fe:b7:a5:31:a8:f4:c5:ef:11:ce:d1:ce:5a:
e0:9e:24:3a:be:a9:1d:26:13:43:0b:f6:65:a6:80:7e:13:34:
b1:ac:7b:c9:2f:41:8d:25:69:1d:19:a0:4d:90:f1:bf:ea:3a:
3c:27:a1:56:89:00:70:03:89:21:67:98:9c:31:6a:f5:da:e6:
7d:31:7f:93:dd:21:24:7e:8b:53:49:f5:53:b7:e5:98:b2:36:
83:dc:17:43:0a:a0:2c:c1:e1:15:14:53:db:b7:e3:b6:a2:52:
a9:c7:be:40:9a:d4:53:c7:e2:cf:3c:e1:32:04:33:39:8b:8c:
93:64:89:43:7d:51:b3:70:ef:6a:7a:96:c5:25:25:8d:8d:32:
c5:37:56:f6:e2:06:ca:32:ce:9b:11:6a:2a:6e:76:e2:47:b1:
13:9a:6f:02:7b:61:36:22:43:16:8a:ce:55:a5:66:78:65:48:
0c:a3:84:19
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUT3x5vM33Lh+a2jUj1GeMIQDENT0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX
DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAMjhhNGZkOGIzYTMzMTU1ZWRhZDQ2
OWY2YzdlNWNhYmIzYTMxYjczZTI0NTZkZTI3ZDQ0NmY2MmU1MTBkMWYyYTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRvbNoYkoUUaMcWCGrbem9+3HJ77
izkFJNIACwe9CKepBKbWav1IXjlk08sXzEvnTgPEQtXsOXgvOxdQRFOhxdaUp3X4
xmql9hriJU2Yu0xoyognwel1bmnk0jXoSBM7C0Txx+hQoFE3R7CkMY+aKaRqcGhs
3QFtKIlCQI3WRs23EpfhAphDAVi6CA+ByKMBG0YsB3WMNXysakyKM0yK3chRSoHp
/KILj8k5Aa8miY0bJAkVQ0Fc+otLv0LV8HRF13cve0EOvTmDqG6nRO45uLe34hLl
5xuyUn9WCZ5IS6ZPgl8M1Q5anZFZwyOrYwhnUlbmhTnJIqtJtsW26R4jvwIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFJ9ur9ThBgeUsZeDPZe6/sp2we/6MB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2ViZWYzYTlhLWE4ODgtNGVhNi04YzljLWYxNjZiYTg0ZDQ2MS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba97AwDQYJKoZIhvcNAQELBQADggEBAMfmP7xmiLgZex9b0o+l
xFJWIbSuvRp+ypvRLp3VChSmB/NZsIRMscJkGvPDl+XnVp/8/dqK/QIOc6oZx/5t
Uj9pkniXd6CcDOBGk0pj/relMaj0xe8RztHOWuCeJDq+qR0mE0ML9mWmgH4TNLGs
e8kvQY0laR0ZoE2Q8b/qOjwnoVaJAHADiSFnmJwxavXa5n0xf5PdISR+i1NJ9VO3
5ZiyNoPcF0MKoCzB4RUUU9u347aiUqnHvkCa1FPH4s884TIEMzmLjJNkiUN9UbNw
72p6lsUlJY2NMsU3VvbiBsoyzpsRaipuduJHsROabwJ7YTYiQxaKzlWlZnhlSAyj
hBk=
-----END CERTIFICATE-----
Generated at Wed Feb 5 03:50:02 2025 by rpki-client