
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ebef3a9a-a888-4ea6-8c9c-f166ba84d461.roa
File: ebef3a9a-a888-4ea6-8c9c-f166ba84d461.roa (raw, json)
Hash identifier: wHptnXUcFs1b3Lb/xvF9TC0dBFc0mPiYE73KXRlDAiw=
Subject key identifier: E8:50:4B:D1:F1:9F:8A:BC:8E:A9:DA:37:CD:69:37:89:E2:C6:10:BA
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 0165896FB5E865594F57716E8E43CB27979D30FB
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ebef3a9a-a888-4ea6-8c9c-f166ba84d461.roa
Signing time: Wed 30 Jul 2025 00:30:15 +0000
ROA not before: Wed 30 Jul 2025 00:30:15 +0000
ROA not after: Wed 03 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf7:b000::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 30 Jul 2025 18:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:65:89:6f:b5:e8:65:59:4f:57:71:6e:8e:43:cb:27:97:9d:30:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jul 30 00:30:15 2025 GMT
Not After : Sep 3 23:59:59 2025 GMT
Subject: serialNumber=25cdb50c26323604889a6a8b93d8e076f0ed3d9bca6a83122749f21cc212790c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:61:47:bf:9c:e7:d1:4d:26:31:63:70:ea:38:
fb:80:ff:93:44:5b:3a:0a:0d:e1:24:6d:5d:f5:ac:
1a:c8:a4:19:2c:89:af:c8:f4:dc:79:ca:9a:30:35:
a5:06:14:a2:b9:df:aa:ae:69:6b:4d:0e:3f:a8:cd:
59:83:cd:0d:71:b3:fa:2a:16:db:d7:e0:be:d4:2d:
93:5e:43:f7:19:6a:a4:36:98:a8:1f:58:3e:1c:49:
b8:0d:7a:d8:5d:1c:91:de:a7:7f:f2:74:04:9e:d1:
42:f0:d7:e7:46:28:ee:3e:60:79:91:cc:51:be:4c:
27:2e:66:e6:98:2f:6e:b1:b5:de:56:f9:31:e1:52:
38:14:0a:16:ad:f3:68:50:15:df:3a:dd:cc:d3:1f:
77:79:a1:a2:27:34:32:4b:17:0a:a1:bc:78:14:0f:
8e:1d:39:3b:c3:bb:30:46:19:08:f7:95:aa:b4:bf:
26:9e:a5:96:74:27:7d:2f:79:0a:66:44:a4:a1:b8:
b1:b4:92:1e:42:bf:d3:3b:50:aa:be:6a:45:47:f1:
76:ac:2f:bf:18:65:00:cf:23:bb:54:fc:c7:a1:80:
33:63:44:2e:d9:8c:f2:29:bb:28:f2:da:74:38:4c:
fe:33:bc:2c:61:a7:34:c8:58:bd:d6:c8:3e:89:5b:
45:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:50:4B:D1:F1:9F:8A:BC:8E:A9:DA:37:CD:69:37:89:E2:C6:10:BA
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ebef3a9a-a888-4ea6-8c9c-f166ba84d461.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf7:b000::/40
Signature Algorithm: sha256WithRSAEncryption
10:48:37:03:c4:b0:c2:4a:fa:49:3a:a1:7a:6c:a8:90:de:84:
88:da:e9:0c:f9:17:a9:c4:4c:18:28:cf:fa:b0:f5:28:7d:b9:
a9:56:19:7b:bc:97:a5:e2:a1:82:e9:f6:b1:29:b8:93:27:48:
00:87:ff:a4:c0:b1:af:f1:05:41:34:44:7c:79:76:c9:af:ae:
b9:4d:9d:a4:b5:50:cb:52:03:56:00:68:39:32:25:0a:99:d4:
f3:da:c4:8d:6e:25:32:76:de:e3:12:bb:21:ad:ac:96:58:be:
78:bb:09:e6:e9:12:19:63:1e:9e:d5:b9:fd:0b:e0:cf:e4:ba:
1b:7b:bb:19:79:20:2d:0b:c1:bc:f8:6a:a5:ab:b1:05:1b:ed:
a3:0e:8e:0e:88:42:16:7a:f1:f2:e5:93:99:4d:65:54:ba:3f:
d1:47:eb:b9:c8:48:72:55:5c:3f:63:fb:54:84:30:f2:98:2f:
71:7d:a9:a5:5d:9c:84:0f:31:0f:a6:ce:04:b4:bc:ea:f9:59:
e8:cd:fb:bc:4e:1b:92:0b:3d:46:fb:c8:0e:5b:db:d1:05:e1:
7c:60:ad:9e:b2:e4:17:80:d6:64:44:b8:e9:33:c4:1f:2f:20:
79:86:52:89:e0:57:62:16:5b:88:ba:d7:43:72:10:4f:08:49:
c3:2b:0b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 00:57:23 2025 by rpki-client