Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ef1e70bc-3b44-4732-b468-8051e4021135.roa
File: ef1e70bc-3b44-4732-b468-8051e4021135.roa (raw, json)
Hash identifier: YRyDPobMN1zsuf3sPNFvPdHIIUKZ45BOR/tApg50K+Q=
Subject key identifier: 92:8C:73:A8:B8:5B:20:8E:EB:6E:02:F1:C5:FB:DC:B0:95:CF:4B:A8
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 3CD3D5B41367EBAC648AD8A523B739204C900206
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ef1e70bc-3b44-4732-b468-8051e4021135.roa
Signing time: Thu 22 May 2025 00:38:34 +0000
ROA not before: Thu 22 May 2025 00:38:34 +0000
ROA not after: Thu 26 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dab9:b080::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 19:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:d3:d5:b4:13:67:eb:ac:64:8a:d8:a5:23:b7:39:20:4c:90:02:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 22 00:38:34 2025 GMT
Not After : Jun 26 23:59:59 2025 GMT
Subject: serialNumber=c4a2856c216ba9e4e2928bb9cd1a7a1eeec17d867aadb2b75eaf4a42529d5a8c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0d:c7:55:fb:dc:78:d9:f4:83:1b:f0:cf:59:
f6:ea:f7:ff:52:3c:53:26:fd:28:d3:b7:cd:33:c4:
74:f5:f8:44:e8:4e:85:4b:98:06:af:2b:0f:a2:8d:
d8:69:eb:44:59:8b:6c:d6:7e:21:f4:7c:b1:bb:11:
0c:8e:03:c8:69:72:03:46:f1:14:cf:cb:2d:a5:fb:
4e:3a:51:e6:be:f2:bc:60:fe:1c:76:e9:9e:d4:6c:
be:42:e1:67:3b:96:bd:19:ab:9f:ed:b1:50:35:47:
7a:c6:f0:16:80:13:38:92:48:82:f5:0a:a6:27:b5:
de:fa:5d:41:df:b6:f7:b4:bd:9f:ed:d8:5d:c3:28:
95:9e:1a:f8:01:fd:59:8e:87:d5:de:d4:82:2d:6a:
20:67:11:a7:ba:05:06:22:e2:87:07:d3:7b:17:46:
9e:55:ac:cd:97:3b:ce:33:59:65:f6:4a:5a:05:ec:
b5:0e:4e:72:b2:d4:aa:4b:39:2e:c9:a1:aa:9e:b4:
ff:3a:99:71:47:af:3c:69:6b:5b:ea:33:2f:e5:ba:
89:f2:22:25:17:01:9b:8b:66:cf:f9:1d:bf:c1:2b:
e9:4e:38:50:62:1f:71:05:50:c8:5f:4e:25:cb:6c:
62:66:b7:0f:48:cb:9d:71:7e:6f:3f:f3:39:e6:d4:
76:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8C:73:A8:B8:5B:20:8E:EB:6E:02:F1:C5:FB:DC:B0:95:CF:4B:A8
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ef1e70bc-3b44-4732-b468-8051e4021135.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dab9:b080::/48
Signature Algorithm: sha256WithRSAEncryption
0b:1b:1e:f2:da:03:c9:99:ed:2d:7a:61:1a:74:41:ee:9b:63:
7b:a7:06:52:f0:97:cb:ff:d4:48:f6:cb:f5:26:f2:2a:ba:c9:
9f:d9:bb:56:6c:2c:49:5c:58:ef:0b:a2:6e:5c:5b:ab:fc:31:
5e:a3:35:1a:61:c2:be:1a:22:0c:0a:d0:cf:ac:34:75:90:bb:
94:bc:ca:c3:75:07:22:94:d9:05:c0:8b:f1:c3:ab:53:3b:99:
5e:e0:1e:85:d8:ba:8a:cd:84:e1:25:21:bb:0a:90:ef:9a:10:
66:a0:67:5f:25:c3:2e:2d:16:5b:0c:0e:c3:37:3e:30:78:89:
b9:d7:27:db:b7:cc:40:67:33:29:26:d5:61:08:22:75:e3:16:
04:6f:78:fc:af:5f:ce:57:c1:15:03:cc:91:05:0e:ac:6d:e1:
30:7a:2c:fe:4d:ad:2e:0a:03:7b:a0:a9:a9:e7:65:d9:6b:18:
61:89:1b:c5:61:52:a7:15:3b:91:4c:b1:66:4f:c9:57:2f:57:
d2:c8:e7:8f:65:16:10:a6:8d:ca:5c:e5:02:8a:d0:9d:cc:62:
fa:e8:a1:c9:d2:ce:ae:76:20:f2:bc:70:85:eb:61:fb:05:3b:
eb:68:83:0b:0a:21:72:8b:e3:e5:22:6f:17:d8:90:e2:be:91:
2b:ba:8f:1d
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUPNPVtBNn66xkitilI7c5IEyQAgYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUyMjAwMzgzNFoX
DTI1MDYyNjIzNTk1OVowejFJMEcGA1UEBRNAYzRhMjg1NmMyMTZiYTllNGUyOTI4
YmI5Y2QxYTdhMWVlZWMxN2Q4NjdhYWRiMmI3NWVhZjRhNDI1MjlkNWE4YzEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8A3HVfvceNn0gxvwz1n26vf/UjxT
Jv0o07fNM8R09fhE6E6FS5gGrysPoo3YaetEWYts1n4h9HyxuxEMjgPIaXIDRvEU
z8stpftOOlHmvvK8YP4cdume1Gy+QuFnO5a9Gauf7bFQNUd6xvAWgBM4kkiC9Qqm
J7Xe+l1B37b3tL2f7dhdwyiVnhr4Af1ZjofV3tSCLWogZxGnugUGIuKHB9N7F0ae
VazNlzvOM1ll9kpaBey1Dk5ystSqSzkuyaGqnrT/OplxR688aWtb6jMv5bqJ8iIl
FwGbi2bP+R2/wSvpTjhQYh9xBVDIX04ly2xiZrcPSMudcX5vP/M55tR22wIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFJKMc6i4WyCO624C8cX73LCVz0uoMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2VmMWU3MGJjLTNiNDQtNDczMi1iNDY4LTgwNTFlNDAyMTEzNS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAbaubCAMA0GCSqGSIb3DQEBCwUAA4IBAQALGx7y2gPJme0temEa
dEHum2N7pwZS8JfL/9RI9sv1JvIqusmf2btWbCxJXFjvC6JuXFur/DFeozUaYcK+
GiIMCtDPrDR1kLuUvMrDdQcilNkFwIvxw6tTO5le4B6F2LqKzYThJSG7CpDvmhBm
oGdfJcMuLRZbDA7DNz4weIm51yfbt8xAZzMpJtVhCCJ14xYEb3j8r1/OV8EVA8yR
BQ6sbeEweiz+Ta0uCgN7oKmp52XZaxhhiRvFYVKnFTuRTLFmT8lXL1fSyOePZRYQ
po3KXOUCitCdzGL66KHJ0s6udiDyvHCF62H7BTvraIMLCiFyi+PlIm8X2JDivpEr
uo8d
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:22:40 2025 by rpki-client