Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f40cdaa-497a-4790-af3e-5d7c49fa49f3.roa
File: 0f40cdaa-497a-4790-af3e-5d7c49fa49f3.roa (raw, json)
Hash identifier: UlOjODCYWZ+4dJI6U2DHrMmuuAfooANDDpGxxP9Oa7E=
Subject key identifier: 57:0B:8F:D7:D9:44:C9:D8:74:FF:FD:E0:90:C6:4F:1B:EB:7E:CB:C7
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 448B10BD832EBC9126B30C89B7A1F44F8DAC565C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f40cdaa-497a-4790-af3e-5d7c49fa49f3.roa
Signing time: Wed 18 Dec 2024 00:00:00 +0000
ROA not before: Wed 18 Dec 2024 00:00:00 +0000
ROA not after: Wed 22 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da00:b000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:8b:10:bd:83:2e:bc:91:26:b3:0c:89:b7:a1:f4:4f:8d:ac:56:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 18 00:00:00 2024 GMT
Not After : Jan 22 23:59:59 2025 GMT
Subject: serialNumber=6a6085752a23d0db1fd9939cefe4f6ed156d79f32d8a8fa042f4ac598ab24e71, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ff:e6:65:12:bc:54:f8:da:a0:fd:18:2b:d6:
35:cb:f5:69:55:1b:ba:e2:e1:88:67:5d:a6:6e:bd:
71:d3:6b:19:40:e0:1f:2c:c2:62:6a:8b:2c:1a:45:
ce:49:5c:c4:84:36:4d:53:46:74:64:89:78:bb:31:
aa:d9:07:37:d0:d7:32:92:00:02:80:0b:1e:26:62:
bc:48:ee:6b:db:3e:68:a2:4c:58:0d:90:68:25:04:
57:2d:4b:a8:f6:61:16:3c:f6:21:1f:47:86:dd:42:
37:e8:dc:e5:60:47:b3:f0:bf:f9:8a:7f:25:b0:f1:
02:34:98:12:6f:e0:d8:fb:d4:83:d9:82:34:f6:bd:
6b:38:83:0c:bd:c0:04:29:ec:e8:5d:14:f3:6d:99:
ad:50:0d:20:01:df:d3:42:08:cc:fb:82:6b:0a:23:
90:60:3b:4c:80:fb:0f:57:fe:21:ab:3f:54:7a:66:
a6:79:4c:1b:96:63:56:aa:69:be:8d:1a:41:e6:5e:
86:d6:cd:b8:6e:42:e3:fb:b7:bd:b5:2d:10:17:a6:
9b:af:e6:3e:fc:82:4a:9e:5f:5e:04:f8:fb:17:ba:
9a:f0:ec:d8:b9:22:f4:a9:c5:eb:5f:62:12:58:d1:
9d:81:46:c7:e1:21:35:8b:06:a0:77:9f:da:6d:bc:
1a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0B:8F:D7:D9:44:C9:D8:74:FF:FD:E0:90:C6:4F:1B:EB:7E:CB:C7
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f40cdaa-497a-4790-af3e-5d7c49fa49f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da00:b000::/40
Signature Algorithm: sha256WithRSAEncryption
28:f0:cc:42:5b:0e:34:3e:5e:cc:c5:1d:ae:84:e9:30:1d:f4:
43:ec:90:50:4b:b3:c7:52:6b:02:4b:ed:be:03:7b:46:a7:82:
e8:fe:ea:5d:12:94:31:a6:4d:cb:d5:66:9e:1e:5a:f4:a5:b5:
45:e5:fb:70:df:26:bb:bb:d9:3f:46:ca:3e:b0:c5:f5:ed:cc:
2c:1d:c3:0f:ca:af:79:cf:64:21:a8:8a:73:f0:67:58:4a:08:
39:29:a0:5b:d1:2c:d5:e9:df:2e:b9:ce:6f:ed:1c:f0:9f:12:
94:2f:96:25:e1:ed:fd:b9:98:e0:3e:1a:e8:4f:e1:7b:53:f9:
83:a6:16:e8:b3:9a:d2:56:f5:66:37:37:00:e9:7e:40:94:10:
8e:eb:ff:ca:75:1d:96:9b:8b:65:a3:81:49:9a:ee:4d:6a:0f:
fc:c1:01:68:df:43:2b:d8:5b:c2:1a:33:bb:28:6e:f7:59:57:
5f:c1:ff:0e:cf:9a:81:b1:06:d0:50:95:ac:98:d2:86:0b:a6:
b8:08:17:93:21:51:79:c3:07:02:35:c2:5d:cc:09:02:b2:34:
3d:9e:b6:5b:bf:13:7a:68:7b:52:7c:9f:1b:eb:e6:c1:8a:99:
a1:f2:d4:24:db:da:53:f5:bb:73:4a:77:ff:fe:c0:34:53:87:
be:9c:2a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:36:30 2025 by rpki-client