Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fdd5c2fa-813f-413d-8c2d-8d355361f2fc.roa
File: fdd5c2fa-813f-413d-8c2d-8d355361f2fc.roa (raw, json)
Hash identifier: ZvxR+wHFMQUf8pYyuUeomSc9Tey16ogU1kH0Qvp3Sbs=
Subject key identifier: E9:DD:A3:79:A2:C2:B4:75:FB:BD:B3:5A:45:C0:E7:2E:28:E2:5B:0A
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 7368B40D6EB3487639E3A7DB36B49CBD537FA129
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fdd5c2fa-813f-413d-8c2d-8d355361f2fc.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da00:4800::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 16:11:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:68:b4:0d:6e:b3:48:76:39:e3:a7:db:36:b4:9c:bd:53:7f:a1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8f:78:f1:40:71:11:33:aa:d3:ec:61:97:59:
07:6f:77:7a:96:8f:8b:74:99:76:3f:be:ca:b8:49:
0f:f4:53:b3:72:ee:ca:59:58:fb:1f:6c:bf:7a:65:
1c:b5:5a:f2:38:91:e0:49:94:61:4a:22:69:db:58:
3b:1c:ea:ad:ef:b7:81:9e:9e:f8:8b:b8:d9:4d:42:
44:13:81:8b:cf:e6:0b:51:36:75:ec:c1:2b:7c:ba:
d5:fa:74:5e:0b:28:7d:22:7d:6b:dc:b4:de:32:74:
e3:68:08:0e:a5:0a:28:6d:ec:6e:6e:5f:c5:d5:f4:
36:a5:b3:88:ea:d0:51:23:f4:f3:45:9b:8b:ea:24:
cf:7f:8c:ad:83:84:63:b5:fa:54:cd:9e:fa:e1:c5:
0e:ec:67:c8:e7:db:be:71:7c:b5:b0:f2:6c:37:f3:
c6:af:2a:42:b6:be:b3:80:40:12:f1:30:e5:8b:c8:
fd:14:d0:a6:e5:95:cb:f4:4f:ed:c4:7a:30:67:9d:
78:e2:65:78:22:44:32:9b:2a:83:30:10:34:21:44:
63:a5:bd:c8:b8:91:db:09:ca:9b:eb:a5:f7:8c:b4:
bd:ab:89:8b:63:64:ac:60:97:9d:5d:80:f6:af:dc:
0e:ba:9b:5e:e1:c2:3c:56:a0:02:b6:74:30:c6:52:
6d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DD:A3:79:A2:C2:B4:75:FB:BD:B3:5A:45:C0:E7:2E:28:E2:5B:0A
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fdd5c2fa-813f-413d-8c2d-8d355361f2fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da00:4800::/40
Signature Algorithm: sha256WithRSAEncryption
c1:87:be:93:1c:42:92:30:f2:8e:5e:f7:3d:0c:0f:ed:08:5b:
fa:ba:85:75:2e:7c:bd:36:85:6e:9f:bd:d0:ae:af:9a:5c:c0:
11:87:70:18:e1:97:d5:52:a0:3a:41:d2:8d:74:6b:e7:30:3e:
3e:61:1a:79:11:e8:37:ce:86:10:7c:18:7d:02:e2:8d:6b:4d:
fe:b4:b4:2f:ef:4b:25:78:bf:64:78:dd:9b:10:9a:86:61:c6:
74:41:74:e1:64:7d:c6:3f:13:20:d5:4e:0f:8b:2b:5c:f6:fc:
21:4a:d0:87:cb:b8:25:60:f9:50:56:ff:16:a2:8c:14:85:c5:
17:30:be:7c:2f:af:d4:73:f0:16:e0:54:04:8b:6d:8e:3c:97:
93:7c:8a:99:70:67:ae:04:db:89:91:36:f9:23:f1:8a:92:d8:
77:b2:8f:61:5a:ff:33:db:d9:e0:12:cf:a6:c8:96:83:cb:ee:
f6:c9:83:bc:b1:e5:bb:0b:80:56:f0:c5:2a:a0:a1:b9:fe:07:
94:a1:ab:1a:13:f7:c5:e3:3c:76:42:c8:55:50:80:e1:7b:06:
7f:83:99:2e:49:39:26:16:ed:b8:34:99:a4:73:36:10:7f:27:
c7:dd:0c:13:fb:15:54:76:ef:ea:63:86:52:fa:fa:0a:5d:9b:
d7:24:f0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 03:46:30 2025 by rpki-client