Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/22fa329b-ec37-40dd-997f-24f4559e0eff.roa
File: 22fa329b-ec37-40dd-997f-24f4559e0eff.roa (raw, json)
Hash identifier: 9P6Ldk+YLSzbxvgRuUJfm+Q/zWRQdLal5Uoz6fBa2F4=
Subject key identifier: 72:85:DA:78:26:EF:EC:2A:F2:05:29:F5:C3:DD:CA:37:EE:92:65:7C
Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Certificate serial: 1EB449C5145A7A222B334E758EDE7BF98384D9D7
Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/22fa329b-ec37-40dd-997f-24f4559e0eff.roa
Signing time: Wed 25 Dec 2024 00:00:00 +0000
ROA not before: Wed 25 Dec 2024 00:00:00 +0000
ROA not after: Wed 29 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 103.8.172.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 00:09:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:b4:49:c5:14:5a:7a:22:2b:33:4e:75:8e:de:7b:f9:83:84:d9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Validity
Not Before: Dec 25 00:00:00 2024 GMT
Not After : Jan 29 23:59:59 2025 GMT
Subject: serialNumber=fe2b1f2cf9e87c31f220eac12ca02b99a3a5a119a1553d89ad372507ec9ef90c, CN=bb9a9116-f615-462e-a680-5266b327e0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a1:ff:82:c6:54:b6:70:dd:ad:60:97:bf:3b:
7c:df:31:fb:09:6a:12:ab:0f:a7:b4:ad:31:a6:d5:
9e:6b:ef:ec:cc:18:d5:67:c5:58:33:79:12:59:31:
89:14:30:44:85:84:53:30:ad:95:ab:e6:f8:14:c5:
07:8f:18:d4:2a:61:fb:51:7b:82:7d:a6:64:51:8f:
9f:16:73:42:93:6d:c3:c4:fe:46:02:b6:3d:10:0a:
66:27:8f:fa:64:0b:45:22:16:b0:ef:fe:da:aa:76:
6d:70:9f:a8:b7:f9:89:db:36:da:aa:22:33:ab:be:
32:46:b9:90:33:87:4a:12:9c:29:08:c4:90:9b:aa:
5a:30:c7:21:a3:dc:0b:1d:b8:70:ed:54:8a:6f:d7:
55:47:15:c1:3b:1f:0e:ef:6f:e4:17:27:79:e9:29:
db:98:34:7e:48:69:1d:d6:a5:4a:25:c5:6e:5b:11:
e5:01:63:41:a2:6a:d1:58:73:85:85:c0:47:8d:26:
82:c5:e4:5a:cb:77:56:56:9e:7c:ab:be:ec:fd:11:
3c:53:67:97:00:b9:40:89:52:3e:de:b4:af:13:65:
05:19:72:21:63:c0:7e:96:4d:70:85:62:08:39:02:
55:dc:ee:8f:02:28:14:08:45:6f:14:b5:10:f7:e2:
3f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:85:DA:78:26:EF:EC:2A:F2:05:29:F5:C3:DD:CA:37:EE:92:65:7C
X509v3 Authority Key Identifier:
keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/22fa329b-ec37-40dd-997f-24f4559e0eff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.8.172.0/22
Signature Algorithm: sha256WithRSAEncryption
03:0b:ca:5a:5d:c3:bc:6c:2d:26:22:e3:ad:65:ee:26:a6:1b:
7a:08:16:1c:3a:8a:33:ac:0c:0b:e7:0e:5a:c7:67:38:75:7b:
d0:5e:95:e6:c8:43:db:d4:77:e1:95:87:c6:aa:0d:af:43:04:
40:33:87:c5:d0:bc:40:31:3e:35:65:39:7f:eb:f0:b8:9f:c8:
f4:fc:6f:83:5d:9b:0e:c4:f7:05:fb:a1:34:9e:09:3f:22:27:
18:a4:25:75:bb:2e:c2:14:a6:c2:ae:8b:ff:66:ae:30:6b:b4:
f8:6e:86:81:d1:0a:d5:d2:e3:01:f0:dc:e1:cf:12:fc:47:8a:
98:06:e8:6c:a6:ea:27:6f:8a:c0:29:fe:ed:c3:12:82:e9:7a:
40:08:d4:eb:dd:54:ac:41:e9:93:bf:5f:2b:bc:fd:b8:70:32:
1e:f5:d0:89:f6:83:69:65:9e:41:3c:18:09:9f:05:89:3b:db:
7c:90:ce:2c:1c:40:f1:bd:62:fd:24:6b:90:d9:b3:cc:40:2b:
98:30:3a:81:71:e0:e4:3a:e9:7d:dc:42:16:aa:18:ae:64:89:
ea:10:7f:4f:33:7b:20:99:fa:5e:6f:5b:70:99:7c:7c:36:96:
da:79:b7:d1:ad:c5:19:de:41:8b:7d:b9:54:06:50:a7:46:81:
83:67:83:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 15 03:09:41 2025 by rpki-client on console.sobornost.net