Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2639bf0c-c600-4558-856f-20c495695807.roa
File: 2639bf0c-c600-4558-856f-20c495695807.roa (raw, json)
Hash identifier: DybtGAPHU57nIDk5jKeFmJV3vw0Rt4Vz5seLkwNrDlg=
Subject key identifier: 48:E2:7F:49:7E:0D:5D:CB:EE:E0:F9:B7:E4:D4:A0:2A:A2:5B:E0:4E
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 3E4D3F86B44E961C5DD5A7BF80514B1C1532C4BA
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2639bf0c-c600-4558-856f-20c495695807.roa
Signing time: Wed 18 Dec 2024 00:00:00 +0000
ROA not before: Wed 18 Dec 2024 00:00:00 +0000
ROA not after: Wed 22 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 43.208.0.0/13 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:4d:3f:86:b4:4e:96:1c:5d:d5:a7:bf:80:51:4b:1c:15:32:c4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 18 00:00:00 2024 GMT
Not After : Jan 22 23:59:59 2025 GMT
Subject: serialNumber=3187be999b13a7fa13cc91640c53bd0797c442a0d3cd4f7d98daf5252bb0fe98, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a0:a5:e0:2d:c1:73:90:4d:45:f7:75:f7:d3:
9b:f3:ca:f9:84:6f:8b:22:6c:9b:94:6f:c7:31:ac:
11:c4:62:c8:1a:be:33:ca:b6:69:92:7f:ac:1e:c8:
46:b2:46:bb:58:8f:96:a8:23:d0:8e:39:ea:bf:62:
bd:a3:21:05:9c:f2:11:31:af:1f:3a:f2:94:78:c3:
74:9f:72:d0:8c:6e:42:31:68:20:58:43:e8:eb:9a:
8a:75:3a:64:95:aa:0f:25:a5:9f:e5:c9:80:03:32:
dd:54:ed:4d:eb:dd:df:f7:fb:b9:f6:32:ba:ff:e5:
1f:3e:11:e0:32:02:b6:04:aa:95:20:67:7e:82:5a:
48:dd:60:4a:78:f6:2e:ef:d7:26:3b:f1:05:d7:df:
37:74:6e:90:67:46:4f:f9:ec:05:19:b8:31:81:3e:
55:b8:f2:af:02:fa:24:eb:b1:86:52:11:9f:15:af:
f7:19:28:a6:01:c4:eb:ee:8f:f6:14:c3:d9:04:b3:
f0:64:07:79:31:2f:4d:29:6f:c3:ac:d5:23:73:70:
fe:53:a8:be:92:e8:84:7e:6d:85:49:79:c9:5a:80:
61:ec:ae:ea:e6:0f:bd:c1:ed:2c:82:c4:7d:f5:9d:
92:b7:21:93:7c:e9:f2:47:b3:4e:9c:8b:d7:8c:0f:
e1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E2:7F:49:7E:0D:5D:CB:EE:E0:F9:B7:E4:D4:A0:2A:A2:5B:E0:4E
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2639bf0c-c600-4558-856f-20c495695807.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.208.0.0/13
Signature Algorithm: sha256WithRSAEncryption
a7:a1:17:61:58:51:31:13:3d:85:38:a8:3c:31:68:ad:4f:b0:
55:f3:d8:48:59:76:4b:68:68:29:a1:00:c4:f4:d7:85:1a:9c:
1c:7b:e9:5b:97:1e:35:08:8c:28:b9:76:b8:77:dd:27:79:e7:
c3:32:44:55:ba:41:32:eb:96:96:0a:17:b9:cf:44:8e:be:28:
8a:07:31:fc:0b:ce:62:27:d5:65:0c:26:9c:73:78:28:fa:19:
bf:67:1c:89:70:f5:1b:06:4a:02:e9:1e:0c:f4:1f:b0:3a:c7:
37:3d:62:69:3e:7f:ce:9e:36:98:f4:52:c8:71:d8:0a:23:12:
cd:4c:33:1d:f6:2b:4b:2b:3e:08:09:7c:3c:e6:c5:08:79:c6:
1f:d8:8d:a1:ea:11:74:17:e6:77:b4:d1:06:2d:bc:f2:34:db:
d5:3c:9a:d8:c9:ec:3a:55:36:5f:77:2b:f8:e6:ed:01:ea:4d:
03:46:fe:4e:b2:5b:d3:7e:03:46:29:8d:78:c1:dd:52:42:b0:
1f:5e:ba:10:2c:fc:35:55:95:aa:dc:c6:29:5b:e1:3e:4a:82:
2b:a4:ab:6d:d6:d6:44:0c:5a:e7:5f:9f:c5:69:0e:f9:8d:2c:
70:55:94:3d:01:25:b4:6b:95:db:ce:a9:ae:10:63:f1:07:e7:
84:e2:63:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 17 18:09:26 2025 by rpki-client