Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f71bafd4-e9ed-4715-b38b-a57003e06da4.roa
File: f71bafd4-e9ed-4715-b38b-a57003e06da4.roa (raw, json)
Hash identifier: iiolWhR7dpYGnNS2QxZ9bA8HcVK/Da0kKkvmqq1eo9c=
Subject key identifier: DD:06:01:83:3A:60:E1:29:EE:9B:A1:12:5D:E7:BE:87:3B:B7:9F:2E
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 579B5EE2FBEB94766C8730F09BB294B76A06E253
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f71bafd4-e9ed-4715-b38b-a57003e06da4.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da69:2000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 18:41:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:9b:5e:e2:fb:eb:94:76:6c:87:30:f0:9b:b2:94:b7:6a:06:e2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:78:9c:9a:e3:ea:f2:21:08:4d:8b:42:d9:81:
3c:25:62:41:7f:35:d9:97:2e:6d:38:40:80:72:79:
14:7b:d6:97:1a:de:cd:d4:17:56:1a:6c:d3:89:93:
22:87:19:81:b6:ac:0f:64:23:c8:da:d1:74:27:82:
f7:62:d1:74:51:cf:37:b6:68:8e:47:7b:67:02:84:
8d:3f:2c:43:51:01:e8:07:1f:62:c4:f0:96:b1:31:
14:0f:d9:3c:7a:ce:11:de:6c:ad:20:d4:5e:d6:e9:
cc:ef:53:84:08:2d:05:b5:86:5f:ad:0c:5a:b4:e8:
08:fe:f3:08:0b:09:7d:ed:d4:f3:0f:92:6e:a4:bc:
41:fc:7f:fe:8f:05:e4:2f:1f:fd:94:6c:3a:5d:fe:
dd:89:95:e4:ac:7c:32:12:02:f3:b4:ec:e8:2e:da:
b5:c3:b2:d4:c1:c6:87:e9:38:9d:dd:99:00:7a:76:
2f:71:d4:d8:c0:6d:71:9d:69:04:5e:58:75:64:d4:
59:b7:dc:7e:ba:f1:03:ab:ed:39:62:bc:18:c9:12:
40:83:18:c7:ac:85:f0:e7:ae:6e:a5:1c:ff:79:31:
f4:0d:3c:d7:1c:b6:8a:30:1a:3c:ea:25:25:42:eb:
f7:61:fb:e7:e7:9a:0f:38:87:49:d9:8f:fb:20:fc:
49:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:06:01:83:3A:60:E1:29:EE:9B:A1:12:5D:E7:BE:87:3B:B7:9F:2E
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f71bafd4-e9ed-4715-b38b-a57003e06da4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da69:2000::/40
Signature Algorithm: sha256WithRSAEncryption
b5:fc:cb:ce:10:a8:ca:df:bb:5a:57:61:ab:49:2a:22:4f:c3:
60:1b:55:46:ec:9c:a2:57:55:7c:10:8c:f7:70:76:35:ea:fd:
19:7d:55:7c:dc:1b:bf:90:2a:42:fc:0f:35:94:ad:9b:d1:c6:
74:95:84:3b:b4:88:c8:76:5c:7d:6e:23:f4:39:65:76:cd:74:
2d:69:00:b6:92:27:94:e3:71:c8:f7:8d:dd:f4:45:3e:92:12:
43:c8:74:e7:53:15:ea:a4:c1:ae:cc:83:e0:71:c8:9c:80:e1:
3c:13:69:63:ee:46:7d:cc:79:55:10:9b:42:b2:9a:c0:87:bd:
7b:d5:c0:80:70:cb:53:70:1f:75:14:f3:84:71:15:1c:33:ce:
59:6d:20:57:ee:07:8b:d1:7c:23:e1:04:85:3d:af:1e:eb:25:
83:f7:57:6c:53:f5:c3:55:24:3b:35:28:d1:ae:2d:db:50:c1:
51:e6:32:c6:86:b0:c4:d8:ff:ee:9b:b3:49:95:14:68:de:ef:
2b:c6:d7:33:b3:0e:4e:b4:41:0f:36:ac:b7:fc:fc:af:04:a5:
b1:ff:69:5a:da:bf:1f:fb:a7:d0:e6:48:51:bd:4f:7a:8a:2b:
f7:7f:d5:d7:01:5d:0d:09:94:da:1c:df:3a:81:aa:85:02:48:
aa:c6:1f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 03:59:14 2025 by rpki-client