Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fb1a1324-5cdd-43d9-9d7f-3fda05d39f9d.roa
File: fb1a1324-5cdd-43d9-9d7f-3fda05d39f9d.roa (raw, json)
Hash identifier: we9LA7JlViayLVvgwAo1HA+lmMkmkegN9L7rIlXBTvs=
Subject key identifier: 9D:14:22:07:A3:E4:21:D9:A4:D8:44:1D:85:C0:FD:AC:F2:A3:B7:79
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5279367207E8DD96CB2DC1A96C5EE95882CB1D09
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fb1a1324-5cdd-43d9-9d7f-3fda05d39f9d.roa
Signing time: Wed 14 May 2025 00:01:32 +0000
ROA not before: Wed 14 May 2025 00:01:32 +0000
ROA not after: Wed 18 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf4:880::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 19:53:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:79:36:72:07:e8:dd:96:cb:2d:c1:a9:6c:5e:e9:58:82:cb:1d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: May 14 00:01:32 2025 GMT
Not After : Jun 18 23:59:59 2025 GMT
Subject: serialNumber=9b758aa34fa71f36c137a7b0b6ec36481f550ce3b5eb769c113f64e786201950, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:a5:02:12:2a:5f:14:69:a8:e5:fc:0a:16:
8b:8b:61:99:b2:2e:d5:c3:af:79:84:ce:d6:0b:93:
e3:7e:ea:1a:0d:02:26:7a:7e:45:8a:2b:33:15:54:
b4:de:ff:ec:e3:e6:fe:6b:a9:0e:ca:cf:3e:e9:d6:
f2:95:67:1c:d2:ee:a2:86:6e:23:19:f6:88:f4:d2:
a4:7f:bf:9f:90:6e:96:a3:e6:a8:e6:15:cd:c4:e2:
82:55:a4:6f:02:90:6c:0c:76:69:b4:0e:77:6c:80:
61:5b:97:2e:a6:3f:fc:7a:81:b6:50:85:48:cb:f0:
41:d1:e0:b5:3c:f2:1a:20:52:42:1b:dc:bf:8d:a0:
bb:ed:d5:19:2e:d5:f1:01:6b:af:d3:80:f1:33:fe:
b5:26:57:57:75:9f:77:cc:5d:ef:d5:21:cb:75:05:
6a:91:b8:19:f3:da:ea:f8:c4:70:d9:a5:a4:00:27:
e3:8b:fa:93:75:d0:19:3d:18:74:1c:4c:39:09:96:
9e:95:60:1a:72:31:1b:0b:a4:11:7a:68:85:93:c0:
b7:09:7d:bc:7a:0b:8a:da:e4:3d:23:c2:c3:fa:40:
db:e0:9c:40:28:b3:5c:21:0a:f5:8b:9f:5a:e8:10:
aa:1c:cf:62:e3:47:97:52:60:ff:59:f6:e5:53:88:
5c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:14:22:07:A3:E4:21:D9:A4:D8:44:1D:85:C0:FD:AC:F2:A3:B7:79
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fb1a1324-5cdd-43d9-9d7f-3fda05d39f9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf4:880::/48
Signature Algorithm: sha256WithRSAEncryption
7d:88:b4:78:34:01:ff:9d:ce:2d:a4:d6:5b:43:8e:71:80:90:
61:fa:3b:68:60:53:d9:ff:4d:77:b3:76:9c:34:29:46:0b:21:
3b:1a:86:73:03:e9:b6:f6:54:5f:c6:70:96:d8:19:cb:d7:c6:
27:89:09:8e:18:4f:4e:02:f1:30:fe:26:00:21:08:0f:53:1b:
4a:c0:bd:fe:d2:6e:57:21:a1:8b:7b:95:62:5e:0c:6b:79:03:
f4:d9:3f:07:8c:75:f7:3a:fa:39:e7:9f:88:69:d0:38:34:16:
cd:07:b2:e4:99:a4:c2:38:05:97:b9:35:1e:a4:35:2b:e0:c2:
dd:4e:63:a6:e9:7c:6c:76:25:78:7b:d7:4f:b4:bc:30:6b:9a:
e7:fc:08:43:90:30:6c:17:4f:65:b2:e3:b5:21:af:11:ab:a2:
98:30:b3:00:dd:e1:1a:b1:8a:13:bd:5c:47:91:75:a2:15:1e:
e5:c7:ab:54:7b:63:62:cc:89:6f:33:f7:2c:d3:05:ce:8e:27:
0d:42:3e:6e:be:b0:c1:74:7e:d7:d1:a8:d4:6d:42:48:81:32:
1f:4b:ea:5a:d9:6e:e2:9a:95:0b:5e:5b:38:09:2b:8b:98:63:
ca:b9:04:71:40:89:63:9d:cc:0b:43:d3:c6:c2:25:c4:61:50:
b7:b8:06:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:14:11 2025 by rpki-client