Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/1738e1ca-e725-4f75-8dfb-04b89ee349d9.roa
File: 1738e1ca-e725-4f75-8dfb-04b89ee349d9.roa (raw, json)
Hash identifier: oX3Ki8KcrkQSHk5Yqze9FFvMZK5OvSjL0p97wSQzBlk=
Subject key identifier: 54:73:75:97:CC:0F:6B:AF:B0:A7:B6:1B:39:85:C2:A4:2F:BC:70:9B
Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Certificate serial: 56D6B2B19FC0D42A786BC16FE1B6295376AEB2C6
Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/1738e1ca-e725-4f75-8dfb-04b89ee349d9.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2403:b300:1090::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 20 Dec 2024 01:38:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:d6:b2:b1:9f:c0:d4:2a:78:6b:c1:6f:e1:b6:29:53:76:ae:b2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=1b1aa00081fbc8c6b651ca485259fddb6105e346071c1072cec8afa03287a198, CN=bb9a9116-f615-462e-a680-5266b327e0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:27:fc:4e:be:e6:de:2e:3a:84:58:14:88:65:
29:48:37:5d:32:e5:02:dd:b6:5c:a3:9f:c0:62:90:
75:6d:7c:7f:8b:23:c7:c7:91:a5:9f:6a:2c:c6:a8:
dd:9e:99:18:81:01:e8:75:34:1b:7b:68:50:93:b8:
f5:f5:39:57:e4:23:72:d5:3e:9e:a0:a0:c3:b0:0e:
9f:3d:02:aa:51:38:42:c2:d9:cd:be:6c:6b:da:ed:
e8:81:10:df:80:f0:0d:55:9e:70:4e:da:40:e3:a2:
6d:89:ed:9d:b1:2d:2b:d3:32:fe:bf:2a:ea:a7:d3:
c8:df:d1:63:15:76:c9:a6:34:87:ba:98:2d:67:6f:
36:87:b5:d0:51:78:a9:99:8a:7c:fe:4f:14:76:75:
6d:25:5b:05:2a:dd:2d:17:98:90:fc:ce:9d:78:83:
a9:f6:d4:ae:3f:c1:12:68:94:9c:80:18:d1:d0:56:
26:b4:47:b4:08:45:70:02:df:78:ca:0c:e7:bb:9b:
8e:56:85:7b:c0:7a:b9:60:72:0d:74:b1:04:21:a2:
c9:da:f1:57:f3:c1:75:c1:ae:ab:67:ef:40:6a:68:
45:b1:66:36:32:59:4d:2b:07:bd:fb:d0:76:a1:f5:
48:37:27:8f:9c:b0:2f:e4:01:dd:d7:13:d2:e5:40:
be:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:73:75:97:CC:0F:6B:AF:B0:A7:B6:1B:39:85:C2:A4:2F:BC:70:9B
X509v3 Authority Key Identifier:
keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/1738e1ca-e725-4f75-8dfb-04b89ee349d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:b300:1090::/48
Signature Algorithm: sha256WithRSAEncryption
6d:c5:32:36:cb:b6:54:7d:ce:99:21:3e:cd:f1:28:43:26:de:
fd:a0:b2:c6:2c:17:fc:17:22:a1:3c:91:b6:8e:e9:05:b5:19:
46:9e:c0:57:96:a3:a3:da:84:20:ac:ae:5a:69:42:e0:a0:b0:
33:b5:51:78:fc:41:67:41:12:47:e5:5e:28:bf:12:dd:d2:be:
99:1d:d7:8b:35:d4:f6:e4:be:52:78:b3:ff:eb:e1:08:6d:11:
d2:2a:bf:27:a9:b8:49:52:e2:ec:a5:0e:d5:e1:4e:3e:76:78:
fc:0d:6e:bb:be:17:35:c5:3e:2d:45:ae:7d:b9:9f:0c:87:a4:
21:d7:98:b2:ca:61:08:37:02:3d:d2:bc:b8:46:1c:69:30:97:
d5:e1:c2:60:4e:c1:24:08:fe:f5:d7:58:c0:dc:2a:d3:8f:1f:
35:e4:71:c7:d4:6d:b8:a8:99:e9:ff:ef:e1:78:dc:2f:1f:5b:
96:30:af:c0:ab:05:94:c4:47:88:ca:ff:be:c3:ba:59:a4:86:
c8:1e:84:fb:97:f6:5d:9f:33:b6:38:ba:84:d0:1f:56:3a:b8:
42:bc:b0:b2:48:72:26:77:ed:80:5e:b5:32:75:1f:d6:cc:ea:
7f:9b:40:fb:c6:38:be:e8:79:9f:67:41:89:d9:79:fd:a2:ae:
bd:71:d4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 20 03:50:07 2024 by rpki-client on console.sobornost.net