
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6028875-2fe3-4ddf-9577-aa3cc83dfc7b.roa
File: f6028875-2fe3-4ddf-9577-aa3cc83dfc7b.roa (raw, json)
Hash identifier: a+G3PEB9VfqI17aHT0zD0B4Y5p+wbI33cCc7Qzhy76Q=
Subject key identifier: 70:98:31:6B:1D:19:CE:B3:FF:74:1F:B9:62:00:41:80:75:A2:FF:CE
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 65479CE559776F63B2836735F9C72B40399742A9
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6028875-2fe3-4ddf-9577-aa3cc83dfc7b.roa
Signing time: Tue 29 Jul 2025 00:50:09 +0000
ROA not before: Tue 29 Jul 2025 00:50:09 +0000
ROA not after: Tue 02 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf7:7080::/46 maxlen: 48
Validation: Failed, certificate revoked on Wed 30 Jul 2025 18:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:47:9c:e5:59:77:6f:63:b2:83:67:35:f9:c7:2b:40:39:97:42:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jul 29 00:50:09 2025 GMT
Not After : Sep 2 23:59:59 2025 GMT
Subject: serialNumber=2ed80741c28e3af6bc36c3c6cf121d42f1b35afdd2b07a25270c357502305eaf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:79:60:e8:29:fc:7b:21:a2:12:0f:43:eb:c4:
49:4e:d7:10:a0:dc:96:25:b1:3b:c2:ab:3b:d2:a1:
b0:71:86:42:77:9b:be:e8:ce:ee:55:ee:32:28:80:
3f:e3:8d:61:a5:b1:48:af:89:9e:f4:51:1b:33:b1:
6c:d7:5f:f2:b0:b5:cd:08:c1:12:38:6c:b5:c5:11:
3b:ad:bd:9c:cd:3e:92:98:19:7a:4b:69:1e:5e:6c:
82:12:e9:aa:f5:cd:24:18:9e:b2:f6:77:6e:26:dd:
9e:aa:56:77:b8:44:cd:0c:d7:bc:55:5a:8c:84:81:
11:fc:0b:7d:2a:8e:4d:78:34:b2:06:28:3e:e3:34:
8e:c7:70:53:9e:39:aa:73:90:09:60:be:2e:9b:f0:
1d:6d:f6:0f:f2:91:6a:e6:21:2b:d6:bf:70:0d:02:
ba:b5:f7:b1:15:d0:8d:3c:c8:b1:e3:0e:54:60:f1:
15:14:0a:3f:b5:cd:13:49:21:79:a1:86:c7:28:7d:
42:74:eb:0d:af:c2:88:e0:82:8f:15:1b:2a:d1:2b:
26:98:bd:9d:ef:f8:f7:e2:2b:b9:7b:10:a3:b9:f1:
82:9e:2d:07:c6:f1:7f:4e:11:60:18:d4:0f:e3:29:
eb:8b:a6:03:78:13:29:54:82:b5:79:a5:a1:c3:8e:
49:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:98:31:6B:1D:19:CE:B3:FF:74:1F:B9:62:00:41:80:75:A2:FF:CE
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6028875-2fe3-4ddf-9577-aa3cc83dfc7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf7:7080::/46
Signature Algorithm: sha256WithRSAEncryption
ba:ad:3b:e8:40:38:1f:e3:e6:41:6c:6b:57:26:71:ed:2a:18:
7e:ff:2e:42:1e:8d:74:37:f5:d9:a3:a7:ad:ba:21:90:81:99:
1a:fd:37:81:79:fe:bb:bb:e7:c7:9a:3f:b6:e3:aa:f9:70:df:
3f:98:6f:e7:c1:32:15:45:72:57:12:4a:2c:39:a0:d0:52:7e:
ac:c4:8c:b5:a5:f6:6b:df:8e:6c:b5:b3:19:45:5d:02:2e:98:
35:91:61:35:ab:80:08:46:f8:4f:5f:a3:44:01:f5:21:d7:67:
4b:72:fd:f8:4c:40:49:9a:05:d8:68:f7:b0:40:cd:10:5b:4f:
31:5c:28:1e:cc:ff:24:35:b7:fb:72:c9:26:67:c5:fd:dd:0f:
5b:93:94:47:c7:a4:af:d8:2d:28:2d:4b:78:cd:d5:ed:c5:ad:
18:5a:8a:b9:44:b8:c3:84:e8:6e:28:0f:92:63:d5:2d:67:f0:
e4:4c:32:a1:7c:56:c9:65:78:ce:a6:eb:63:13:3a:ca:30:eb:
bd:bd:7e:18:93:71:07:21:33:5d:46:5d:01:26:94:b2:61:ff:
0b:04:30:de:19:f3:44:b9:95:1a:c2:cc:24:19:d9:fd:40:0e:
0d:83:0e:6a:09:76:a1:8f:bf:f4:7b:c4:eb:d9:7c:51:58:17:
74:d8:5e:96
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUZUec5Vl3b2Oyg2c1+ccrQDmXQqkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyOTAwNTAwOVoX
DTI1MDkwMjIzNTk1OVowejFJMEcGA1UEBRNAMmVkODA3NDFjMjhlM2FmNmJjMzZj
M2M2Y2YxMjFkNDJmMWIzNWFmZGQyYjA3YTI1MjcwYzM1NzUwMjMwNWVhZjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Hlg6Cn8eyGiEg9D68RJTtcQoNyW
JbE7wqs70qGwcYZCd5u+6M7uVe4yKIA/441hpbFIr4me9FEbM7Fs11/ysLXNCMES
OGy1xRE7rb2czT6SmBl6S2keXmyCEumq9c0kGJ6y9nduJt2eqlZ3uETNDNe8VVqM
hIER/At9Ko5NeDSyBig+4zSOx3BTnjmqc5AJYL4um/AdbfYP8pFq5iEr1r9wDQK6
tfexFdCNPMix4w5UYPEVFAo/tc0TSSF5oYbHKH1CdOsNr8KI4IKPFRsq0SsmmL2d
7/j34iu5exCjufGCni0HxvF/ThFgGNQP4ynri6YDeBMpVIK1eaWhw45J5wIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFHCYMWsdGc6z/3QfuWIAQYB1ov/OMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2Y2MDI4ODc1LTJmZTMtNGRkZi05NTc3LWFhM2NjODNkZmM3Yi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcCJAba93CAMA0GCSqGSIb3DQEBCwUAA4IBAQC6rTvoQDgf4+ZBbGtX
JnHtKhh+/y5CHo10N/XZo6etuiGQgZka/TeBef67u+fHmj+246r5cN8/mG/nwTIV
RXJXEkosOaDQUn6sxIy1pfZr345stbMZRV0CLpg1kWE1q4AIRvhPX6NEAfUh12dL
cv34TEBJmgXYaPewQM0QW08xXCgezP8kNbf7cskmZ8X93Q9bk5RHx6Sv2C0oLUt4
zdXtxa0YWoq5RLjDhOhuKA+SY9UtZ/DkTDKhfFbJZXjOputjEzrKMOu9vX4Yk3EH
ITNdRl0BJpSyYf8LBDDeGfNEuZUawswkGdn9QA4Ngw5qCXahj7/0e8Tr2XxRWBd0
2F6W
-----END CERTIFICATE-----
Generated at Thu Jul 31 01:03:58 2025 by rpki-client