Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/147e9861-7a92-4115-8ee5-733f7adc3c8e.roa
File: 147e9861-7a92-4115-8ee5-733f7adc3c8e.roa (raw, json)
Hash identifier: a1dv5fJkaer0XXh1VBupc5zLDRyT4i+iAMX0ODwTlII=
Subject key identifier: FE:5E:F1:E3:72:D2:54:DF:ED:F2:6D:E4:9C:95:FD:3F:FD:44:DC:73
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 043759C6788D2CA8598D06D0A1E79147E435FF37
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/147e9861-7a92-4115-8ee5-733f7adc3c8e.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da70:4800::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:37:59:c6:78:8d:2c:a8:59:8d:06:d0:a1:e7:91:47:e4:35:ff:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=d9baf73b6f9319652705ba84de3d0bc532a5eef228e406692080f017698cd192, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:8d:8a:3e:f3:39:b7:72:22:9a:cf:60:aa:
45:86:fa:e9:98:b6:89:26:48:72:90:16:57:6a:86:
b0:2c:43:26:34:02:3f:20:1e:a5:ef:6c:77:e3:76:
7d:b0:89:76:57:06:89:6b:17:40:b9:ca:e3:a4:75:
e0:9c:8e:bc:17:c1:2f:44:c8:92:82:bf:05:f8:b4:
4b:d0:4f:1e:fd:ca:96:15:35:6c:21:46:d3:a7:7d:
9d:13:d4:03:c1:5c:06:d2:ea:d9:df:65:64:ea:8f:
45:98:cb:44:ec:d4:ed:21:23:48:37:a4:bb:c7:77:
47:09:c7:b2:30:55:a4:e6:9e:a3:67:1c:09:b9:e0:
c7:2a:da:cb:cb:b7:25:34:43:44:2f:e4:a5:2a:b1:
8f:8d:ff:25:13:75:40:70:c6:00:88:09:e4:6f:3e:
7e:5d:6c:3a:09:32:8e:3d:24:fc:cc:5b:8a:13:38:
8b:f1:46:dc:22:63:b6:78:31:ef:1e:87:8b:62:f2:
ac:5b:3c:fb:23:71:2f:10:33:c1:82:68:7c:d3:1a:
b8:ed:08:42:83:ca:9e:ac:07:8d:66:9b:d8:62:b2:
98:71:69:d7:00:89:48:5a:ee:44:75:ee:c1:38:a1:
68:6d:17:47:bb:9a:ae:14:b9:bc:5b:d1:95:86:9d:
f4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5E:F1:E3:72:D2:54:DF:ED:F2:6D:E4:9C:95:FD:3F:FD:44:DC:73
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/147e9861-7a92-4115-8ee5-733f7adc3c8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da70:4800::/40
Signature Algorithm: sha256WithRSAEncryption
c9:9b:ee:11:a8:a1:51:34:ec:21:1c:19:7b:8f:92:7d:ee:f5:
8c:ef:fd:58:a9:d7:43:94:d4:2f:98:38:cf:be:69:86:31:20:
3a:e6:e6:79:2c:69:62:92:94:9e:aa:ce:69:ef:d9:bc:ee:2d:
a8:16:ac:53:12:10:33:dc:ab:ac:16:38:2a:f2:1e:5e:08:63:
a7:09:5d:95:5a:2d:74:f6:f9:aa:69:91:39:3a:e3:7a:6b:8f:
2b:06:89:88:3f:ae:a1:4d:15:bc:8d:32:e6:58:2a:b5:7d:72:
8e:b7:fc:7a:63:94:12:61:70:fa:01:26:c9:58:23:ba:46:0c:
12:5d:48:70:de:62:10:90:14:ba:73:6f:b0:03:f7:10:2a:8e:
ce:4c:45:b4:28:8a:54:9e:7f:9f:c7:d9:51:53:43:53:89:d6:
2e:ab:30:2f:4c:dd:7a:e8:d0:3a:2c:6b:fd:49:70:67:d4:d3:
45:59:e1:d9:d3:5f:b3:ba:73:22:2a:8b:d7:44:00:2f:5a:47:
f7:56:34:c8:25:84:90:f0:3a:e7:b2:98:67:ff:d7:d4:6d:cf:
f4:ca:10:1d:ab:20:f2:e1:6d:31:9d:e7:59:56:61:d4:b2:e8:
f0:42:84:42:04:62:ec:9e:c0:f8:a4:54:1a:4a:10:a4:7b:d3:
e0:c2:93:10
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUBDdZxniNLKhZjQbQoeeRR+Q1/zcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAZDliYWY3M2I2ZjkzMTk2NTI3MDVi
YTg0ZGUzZDBiYzUzMmE1ZWVmMjI4ZTQwNjY5MjA4MGYwMTc2OThjZDE5MjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk6Nij7zObdyIprPYKpFhvrpmLaJ
JkhykBZXaoawLEMmNAI/IB6l72x343Z9sIl2VwaJaxdAucrjpHXgnI68F8EvRMiS
gr8F+LRL0E8e/cqWFTVsIUbTp32dE9QDwVwG0urZ32Vk6o9FmMtE7NTtISNIN6S7
x3dHCceyMFWk5p6jZxwJueDHKtrLy7clNENEL+SlKrGPjf8lE3VAcMYAiAnkbz5+
XWw6CTKOPST8zFuKEziL8UbcImO2eDHvHoeLYvKsWzz7I3EvEDPBgmh80xq47QhC
g8qerAeNZpvYYrKYcWnXAIlIWu5Ede7BOKFobRdHu5quFLm8W9GVhp30ZQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFP5e8eNy0lTf7fJt5JyV/T/9RNxzMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzE0N2U5ODYxLTdhOTItNDExNS04ZWU1LTczM2Y3YWRjM2M4ZS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAbacEgwDQYJKoZIhvcNAQELBQADggEBAMmb7hGooVE07CEcGXuP
kn3u9Yzv/Vip10OU1C+YOM++aYYxIDrm5nksaWKSlJ6qzmnv2bzuLagWrFMSEDPc
q6wWOCryHl4IY6cJXZVaLXT2+appkTk643prjysGiYg/rqFNFbyNMuZYKrV9co63
/HpjlBJhcPoBJslYI7pGDBJdSHDeYhCQFLpzb7AD9xAqjs5MRbQoilSef5/H2VFT
Q1OJ1i6rMC9M3Xro0Dosa/1JcGfU00VZ4dnTX7O6cyIqi9dEAC9aR/dWNMglhJDw
OueymGf/19Rtz/TKEB2rIPLhbTGd51lWYdSy6PBChEIEYuyewPikVBpKEKR70+DC
kxA=
-----END CERTIFICATE-----
Generated at Thu Apr 17 18:09:26 2025 by rpki-client