Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/070df6c1-fe53-42de-bd43-6c90240558c7.roa
File: 070df6c1-fe53-42de-bd43-6c90240558c7.roa (raw, json)
Hash identifier: l62AwRhOZAl6cEMk76Ws84e/yW6nlDqMv5SA8y7tayM=
Subject key identifier: 87:BE:97:7B:5E:BC:B9:71:87:86:2A:E9:16:DE:21:2D:76:4A:EE:B0
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 525F0D07863F772F0385843B676394684A2E88D2
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/070df6c1-fe53-42de-bd43-6c90240558c7.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da60:c000::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:5f:0d:07:86:3f:77:2f:03:85:84:3b:67:63:94:68:4a:2e:88:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=ee42ac54fc0710e2db4e7e045f40cd8732b476dc87880ec34860d92a20b44f08, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fc:52:9c:08:47:4a:3d:ff:16:fd:91:48:39:
df:11:73:4a:1f:98:31:5a:02:62:4f:5c:3c:fd:11:
5f:42:e8:e2:6f:fe:da:a8:c3:70:bc:7c:d3:fb:74:
43:8b:ab:56:36:01:42:7e:a9:5a:0a:c0:39:95:12:
bc:48:4a:0e:0a:3e:71:af:c0:c7:e8:72:2a:18:d0:
78:87:4d:27:06:f1:b9:89:4b:3e:dc:c7:58:3d:14:
de:1a:74:1b:46:fc:31:c7:c3:3b:8f:f6:6f:5b:f9:
95:09:92:da:3b:19:e5:35:a9:c1:10:01:54:b0:8b:
09:1c:5a:4a:f5:f1:17:f4:1e:5c:9f:9e:5d:ac:76:
2a:b2:d3:64:92:83:62:19:72:3f:70:0d:3c:4a:c4:
90:47:58:f1:7c:4a:6f:b8:b0:83:58:51:9e:5d:14:
95:ea:82:79:76:b9:d2:d7:35:19:df:97:7b:ca:fa:
ec:c6:bf:52:a8:3a:3c:5b:97:22:11:55:0b:aa:ac:
95:25:99:68:01:7b:4f:78:7a:65:a1:0e:e9:9c:1a:
8d:07:da:71:cd:df:c6:d1:5c:62:d4:89:81:9b:46:
11:db:40:c7:32:f5:45:07:ba:df:c2:f2:54:7f:45:
47:e2:fc:26:5f:46:de:d0:4c:e4:b2:35:42:ab:50:
a1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BE:97:7B:5E:BC:B9:71:87:86:2A:E9:16:DE:21:2D:76:4A:EE:B0
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/070df6c1-fe53-42de-bd43-6c90240558c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da60:c000::/40
Signature Algorithm: sha256WithRSAEncryption
ab:46:a8:1d:b4:0e:26:c4:37:f8:b4:29:e5:ce:f1:7e:d9:0c:
02:10:57:65:07:4f:7f:5a:c8:5d:d8:52:bf:17:d3:39:5d:72:
ec:3b:e7:a9:0a:10:8c:03:35:c6:d3:27:c8:22:19:95:4b:ba:
23:c0:d0:ad:d5:ad:7c:71:1d:92:b6:12:e5:30:e5:cb:22:5e:
3c:70:71:84:dd:e4:f8:7d:47:1c:b2:f5:5d:3c:dc:b4:89:92:
b2:f1:ed:c5:4e:71:46:10:a3:9a:99:0a:67:78:72:cb:cd:2f:
50:7b:ec:5d:b1:9a:4e:4d:1f:f5:55:fd:db:13:1b:77:c0:20:
2b:34:71:91:b7:97:3a:ed:55:5a:70:ae:2e:78:33:06:15:71:
5a:91:10:89:0a:27:0f:52:fa:37:3f:8f:35:6d:3f:c2:2c:d3:
1b:42:08:ad:15:2b:a5:46:f8:28:76:ca:8e:a6:d6:2a:29:6e:
20:cb:46:61:1f:d0:49:44:78:3d:4a:27:3d:dd:6e:88:83:cc:
da:29:6a:07:e6:e2:1f:59:83:73:4f:32:3e:14:a0:c6:de:d0:
ba:ed:05:4e:68:84:39:43:c2:73:f1:89:3c:28:0e:c7:ef:93:
68:64:36:0d:9f:14:a3:ed:53:4f:59:bd:41:ab:3b:52:dd:cf:
4a:28:c4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:09:27 2025 by rpki-client