Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1540c3fc-a358-468a-8b3b-ad533b744ee9.roa
File: 1540c3fc-a358-468a-8b3b-ad533b744ee9.roa (raw, json)
Hash identifier: HcHpJdlhxf444EXiWoakxNCtBTbwDEKRCprqebr/9Nk=
Subject key identifier: 11:0C:BE:B1:8C:8D:C3:E5:4D:77:33:83:0B:40:C1:1D:B7:53:42:FD
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 44866F3D37980C87D1B0D803949D7C7B2D63EDD1
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1540c3fc-a358-468a-8b3b-ad533b744ee9.roa
Signing time: Sat 14 Dec 2024 00:00:00 +0000
ROA not before: Sat 14 Dec 2024 00:00:00 +0000
ROA not after: Sat 18 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da69:8000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:86:6f:3d:37:98:0c:87:d1:b0:d8:03:94:9d:7c:7b:2d:63:ed:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 14 00:00:00 2024 GMT
Not After : Jan 18 23:59:59 2025 GMT
Subject: serialNumber=7092321c953b2e19d2568e769a4d6cc60d7774796d2739646acb5716f1c985b5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:46:c9:8a:ed:5e:dd:b8:6e:89:73:58:e8:54:
c0:f7:e5:e4:5c:56:61:8a:7c:96:f5:00:e0:9b:a8:
3a:5e:aa:6a:a0:ec:8e:1b:c4:20:e0:06:ac:e8:91:
48:21:6a:d2:ae:f0:48:cf:c4:dd:57:71:e4:86:06:
ec:45:47:b5:be:8a:65:eb:c0:94:ed:59:55:f8:ff:
a4:a9:99:d8:02:7d:9b:20:e8:80:4d:1b:8f:f8:f0:
9e:e1:04:78:f9:75:04:67:31:16:4d:74:5e:e2:10:
b4:03:f9:59:07:02:8e:f8:c7:35:8b:84:22:36:89:
14:79:d9:73:a0:ed:ad:5b:0c:3e:e5:a1:10:5a:b8:
84:0a:f4:0d:7b:73:65:e0:40:09:f2:d7:89:81:96:
82:0a:8d:28:b0:2a:8f:20:16:33:20:10:5a:6f:20:
f1:f8:f9:c0:2a:0b:d2:45:fd:dc:b8:43:38:65:cb:
77:7f:77:87:d1:4f:4c:da:ea:4e:c3:5d:05:a7:21:
76:32:12:79:68:ff:9a:61:2b:5f:68:2b:89:98:8e:
3f:7c:a8:15:8b:9f:73:ea:ea:07:5f:b2:85:9e:35:
e3:2a:c9:7d:1b:92:ff:50:33:b5:ff:45:9c:b4:d0:
9e:17:8e:97:5f:96:03:8e:c2:8b:77:82:30:29:42:
7d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0C:BE:B1:8C:8D:C3:E5:4D:77:33:83:0B:40:C1:1D:B7:53:42:FD
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1540c3fc-a358-468a-8b3b-ad533b744ee9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da69:8000::/40
Signature Algorithm: sha256WithRSAEncryption
0d:7b:22:80:6d:58:26:cb:1b:92:8d:a8:d0:0e:65:43:c9:67:
f2:95:03:54:d3:e5:10:51:f5:35:a4:a5:85:9d:49:37:a4:54:
e8:c2:51:fb:d6:64:a5:1a:44:4a:ba:24:33:fa:de:6a:3f:db:
d0:22:d8:fe:74:f0:81:d2:98:80:42:58:69:7d:1a:e8:6a:3d:
1d:5b:31:b2:9b:be:00:65:88:1c:68:25:75:f0:38:83:e9:50:
3a:28:31:31:2f:b3:f0:43:e2:a9:65:7d:8b:fa:c2:66:df:81:
aa:de:98:25:15:ce:df:72:03:8c:de:66:c5:a3:b1:56:98:7f:
07:d9:7c:38:48:84:26:b4:37:78:58:83:d7:18:60:3f:91:d9:
cb:06:9d:a8:34:68:0a:02:cb:56:7a:bf:00:78:df:10:71:d0:
a0:81:3f:0a:0a:82:aa:44:f4:9e:db:eb:6a:32:ed:fa:f8:67:
e0:42:2d:c3:d3:f4:09:d5:57:d9:d9:29:94:23:4d:84:d5:70:
49:96:31:5c:02:e8:05:c9:27:72:55:ff:ba:ae:2a:c8:0b:4e:
b7:7d:0f:58:e9:77:e8:35:88:be:7a:c2:3b:db:98:51:1e:c3:
3b:7e:52:64:77:c9:95:71:7a:e0:7d:66:13:66:1e:d7:e2:67:
45:07:77:60
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIURIZvPTeYDIfRsNgDlJ18ey1j7dEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTIxNDAwMDAwMFoX
DTI1MDExODIzNTk1OVowejFJMEcGA1UEBRNANzA5MjMyMWM5NTNiMmUxOWQyNTY4
ZTc2OWE0ZDZjYzYwZDc3NzQ3OTZkMjczOTY0NmFjYjU3MTZmMWM5ODViNTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UbJiu1e3bhuiXNY6FTA9+XkXFZh
inyW9QDgm6g6XqpqoOyOG8Qg4Aas6JFIIWrSrvBIz8TdV3HkhgbsRUe1vopl68CU
7VlV+P+kqZnYAn2bIOiATRuP+PCe4QR4+XUEZzEWTXRe4hC0A/lZBwKO+Mc1i4Qi
NokUedlzoO2tWww+5aEQWriECvQNe3Nl4EAJ8teJgZaCCo0osCqPIBYzIBBabyDx
+PnAKgvSRf3cuEM4Zct3f3eH0U9M2upOw10FpyF2MhJ5aP+aYStfaCuJmI4/fKgV
i59z6uoHX7KFnjXjKsl9G5L/UDO1/0WctNCeF46XX5YDjsKLd4IwKUJ9SwIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFBEMvrGMjcPlTXczgwtAwR23U0L9MB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzE1NDBjM2ZjLWEzNTgtNDY4YS04YjNiLWFkNTMzYjc0NGVlOS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAbaaYAwDQYJKoZIhvcNAQELBQADggEBAA17IoBtWCbLG5KNqNAO
ZUPJZ/KVA1TT5RBR9TWkpYWdSTekVOjCUfvWZKUaREq6JDP63mo/29Ai2P508IHS
mIBCWGl9GuhqPR1bMbKbvgBliBxoJXXwOIPpUDooMTEvs/BD4qllfYv6wmbfgare
mCUVzt9yA4zeZsWjsVaYfwfZfDhIhCa0N3hYg9cYYD+R2csGnag0aAoCy1Z6vwB4
3xBx0KCBPwoKgqpE9J7b62oy7fr4Z+BCLcPT9AnVV9nZKZQjTYTVcEmWMVwC6AXJ
J3JV/7quKsgLTrd9D1jpd+g1iL56wjvbmFEewzt+UmR3yZVxeuB9ZhNmHtfiZ0UH
d2A=
-----END CERTIFICATE-----
Generated at Thu Apr 17 17:46:01 2025 by rpki-client