Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1846b071-a17b-49fd-a4e6-836e72a5acfc.roa
File: 1846b071-a17b-49fd-a4e6-836e72a5acfc.roa (raw, json)
Hash identifier: fcQwjAQccddcL5BqsGJILSHdUiteWTRP54uI1S7v8ug=
Subject key identifier: 9D:7B:93:8E:26:CC:87:C7:DB:A3:AB:00:D8:C8:E4:C7:C5:C5:76:84
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 0E7DC77C8D1985E90630D5CE526DE7DE8A5ABB80
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1846b071-a17b-49fd-a4e6-836e72a5acfc.roa
Signing time: Sat 14 Dec 2024 00:00:00 +0000
ROA not before: Sat 14 Dec 2024 00:00:00 +0000
ROA not after: Sat 18 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf4:4000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:7d:c7:7c:8d:19:85:e9:06:30:d5:ce:52:6d:e7:de:8a:5a:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 14 00:00:00 2024 GMT
Not After : Jan 18 23:59:59 2025 GMT
Subject: serialNumber=4785c228cfa9ed1928a83a21081762b0d6f51778028c9d0215ceef7864427212, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:58:47:61:a4:58:03:15:48:f7:3f:2f:a9:60:
e1:0d:66:b4:3f:d9:08:20:33:bd:54:3e:66:14:ae:
fb:8b:55:a3:09:f3:f0:81:cf:91:83:af:f5:d3:ef:
ef:15:40:96:48:32:28:03:50:b0:87:04:7a:1e:0e:
6e:03:6a:c4:32:b1:51:26:bf:11:f5:f9:02:0e:a2:
8f:80:e6:b5:a7:b2:bc:45:54:a6:ef:0b:7e:9d:5d:
fc:35:39:59:e4:f5:7c:a0:6f:c8:93:5d:79:6d:18:
da:80:11:29:cb:ea:c6:5d:42:b0:95:5e:1d:d6:ce:
84:28:90:0d:d2:af:68:94:06:fb:51:00:7d:6c:8f:
49:40:62:08:28:d5:06:a1:89:95:2a:ac:f9:0c:f6:
97:ee:33:d5:c2:0e:03:88:58:b0:9e:37:88:88:f8:
ac:10:59:e5:0d:8e:b1:a3:af:b9:93:3f:6e:ab:36:
94:3c:c5:37:5f:ec:24:ae:1f:46:fd:38:56:72:8c:
51:ec:f5:78:a7:ba:9c:69:b0:c8:2d:fc:b3:84:64:
71:29:5b:ff:75:7c:08:a9:58:12:ed:ea:26:6b:5e:
0c:19:4d:58:73:60:a5:60:b9:c0:4e:e0:c7:24:15:
c0:9e:f7:54:7e:a8:35:27:6f:a3:4b:a5:c3:ae:1c:
7d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7B:93:8E:26:CC:87:C7:DB:A3:AB:00:D8:C8:E4:C7:C5:C5:76:84
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1846b071-a17b-49fd-a4e6-836e72a5acfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf4:4000::/40
Signature Algorithm: sha256WithRSAEncryption
1e:7f:20:e2:a2:21:ae:25:94:6a:63:ac:c8:c4:d6:1b:16:06:
ab:c8:d8:7c:0c:f3:12:2a:f7:03:c0:8b:8f:a2:4a:dc:31:99:
2d:4c:62:b7:75:60:81:ba:75:52:1d:fb:95:8b:27:60:e9:00:
92:c3:33:1f:19:c0:1a:26:2c:d6:49:fd:90:1c:ce:f9:4c:00:
fe:88:8c:bc:26:c0:a1:d4:b7:8f:f7:da:17:a5:18:6b:c9:46:
98:ee:33:3d:51:ec:16:72:57:6f:84:d1:03:be:6a:52:fa:64:
95:22:39:f2:cf:83:92:ac:f7:a3:4f:ad:fa:b9:e3:a1:23:61:
fe:43:7b:aa:62:1d:67:70:48:4e:e5:51:d3:ad:e2:18:12:01:
7d:eb:f5:5e:4f:16:14:c8:a5:89:17:81:ef:c1:42:30:0a:7b:
4e:f2:86:e4:71:88:21:42:b5:6b:10:75:ea:18:63:3f:57:ab:
da:59:52:54:b6:c7:1d:af:05:93:b7:29:da:23:b2:d5:dc:52:
40:19:2a:5d:c0:b1:ca:2f:3f:12:b4:16:6e:b5:25:14:6c:87:
17:b0:71:09:79:a7:15:b6:62:19:2f:31:26:50:91:ca:00:2a:
ee:72:d0:08:8e:3e:8b:d7:63:f9:62:96:92:06:de:8b:3b:d5:
f8:94:dd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:55:31 2025 by rpki-client