Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3c76877a-5443-4688-b68c-42e8c8278190.roa
File: 3c76877a-5443-4688-b68c-42e8c8278190.roa (raw, json)
Hash identifier: l6wkbsrz4gQ/tBahKzSjlPZeHhG9WJ1fKYPNvL2Ggwg=
Subject key identifier: 81:80:66:56:99:BF:8B:B0:41:C0:85:32:69:8D:4C:6A:8B:67:36:D7
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 0ACAC87E2247A297A7F2AD6FD3EFAEDA6AC16815
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3c76877a-5443-4688-b68c-42e8c8278190.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf7:2800::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ca:c8:7e:22:47:a2:97:a7:f2:ad:6f:d3:ef:ae:da:6a:c1:68:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: serialNumber=0b682c8da3f8d942488baba039198b01cd3224a9b4464ac61073203e5e0e17be, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a8:38:dd:db:3a:f7:8e:5f:57:d0:03:cd:2b:
d9:fd:42:b5:dc:a0:19:85:5b:b7:71:f7:13:4a:9a:
99:bf:55:47:23:f3:e6:e4:4a:e2:7d:1c:6c:77:2f:
f4:f4:67:b9:bd:84:c4:9b:77:0c:17:1f:eb:a3:c4:
e0:57:fc:a7:17:e8:43:60:e8:8e:bc:fa:a9:e5:76:
a7:8d:6e:72:b2:23:88:bc:38:ce:e5:f0:26:8a:41:
92:87:d2:a6:7f:2c:41:2d:49:7b:df:9a:5b:8f:0c:
86:77:99:c9:39:3f:77:04:08:01:64:98:92:fb:0d:
d7:d6:bf:4d:39:d1:f7:1f:24:63:b3:dd:e8:73:5b:
1b:91:94:49:73:73:cb:f4:cc:a7:85:36:a3:0f:ba:
67:5c:bc:ef:e0:d1:a4:5b:19:d3:67:66:f1:d9:b0:
5c:da:c4:2c:cd:23:ca:e6:63:69:e5:7b:68:9d:56:
f4:51:8f:9a:4a:e3:af:0b:ed:cb:a4:92:14:d6:03:
ca:99:7a:7a:30:29:5c:3d:8c:c0:ea:82:2b:47:75:
1b:df:56:9d:b4:aa:12:ad:64:8a:7b:95:44:3d:75:
d0:d1:22:c2:e2:4d:c3:fd:db:74:43:fb:53:1c:76:
57:7a:e7:5e:d5:15:ba:82:37:cb:6a:5b:22:e8:14:
8d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:80:66:56:99:BF:8B:B0:41:C0:85:32:69:8D:4C:6A:8B:67:36:D7
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3c76877a-5443-4688-b68c-42e8c8278190.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf7:2800::/40
Signature Algorithm: sha256WithRSAEncryption
80:66:70:be:77:6b:2f:f8:56:3f:03:0f:4f:d6:52:4c:3b:fc:
b5:da:f1:f5:63:d0:73:4a:57:5a:83:51:e1:bb:58:8c:04:c1:
cb:d4:a1:af:28:b7:65:25:ec:2e:f0:e7:00:0c:06:09:17:bf:
c5:07:fe:3e:b8:76:72:fa:eb:3d:25:5d:c2:1b:81:3d:10:12:
f4:e7:14:c1:bf:e9:99:04:4a:f4:3d:6f:6d:f9:b9:6e:c0:a0:
a7:a9:18:f5:25:aa:79:7a:d0:37:78:2f:77:32:e9:48:57:f9:
8c:85:d4:c2:5e:25:ed:38:e6:55:5f:7e:6c:36:ad:c9:a7:3a:
9a:e5:73:2d:f7:82:ef:83:23:c9:24:f4:c4:98:63:44:2d:cf:
80:fa:60:fc:cc:86:ae:37:62:dd:19:e8:a7:25:37:2a:67:d4:
dd:44:45:b2:f0:2d:43:51:99:66:92:b7:18:38:14:73:0e:ef:
d2:74:43:01:54:b3:96:7e:31:49:78:80:f3:ec:1f:22:0a:60:
30:21:36:cc:0e:d4:e2:03:c4:e8:12:c2:4a:3d:ec:d5:4b:0e:
94:7d:d0:36:30:de:36:ec:f9:32:7f:9f:06:5a:f2:3e:28:18:
73:e3:43:4d:9e:36:28:08:91:7d:4a:bb:af:8a:a2:cf:88:17:
b0:53:a7:f9
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUCsrIfiJHopen8q1v0++u2mrBaBUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTIxNjAwMDAwMFoX
DTI1MDEyMDIzNTk1OVowejFJMEcGA1UEBRNAMGI2ODJjOGRhM2Y4ZDk0MjQ4OGJh
YmEwMzkxOThiMDFjZDMyMjRhOWI0NDY0YWM2MTA3MzIwM2U1ZTBlMTdiZTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqg43ds6945fV9ADzSvZ/UK13KAZ
hVu3cfcTSpqZv1VHI/Pm5ErifRxsdy/09Ge5vYTEm3cMFx/ro8TgV/ynF+hDYOiO
vPqp5XanjW5ysiOIvDjO5fAmikGSh9KmfyxBLUl735pbjwyGd5nJOT93BAgBZJiS
+w3X1r9NOdH3HyRjs93oc1sbkZRJc3PL9MynhTajD7pnXLzv4NGkWxnTZ2bx2bBc
2sQszSPK5mNp5XtonVb0UY+aSuOvC+3LpJIU1gPKmXp6MClcPYzA6oIrR3Ub31ad
tKoSrWSKe5VEPXXQ0SLC4k3D/dt0Q/tTHHZXeude1RW6gjfLalsi6BSNbQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFIGAZlaZv4uwQcCFMmmNTGqLZzbXMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzNjNzY4NzdhLTU0NDMtNDY4OC1iNjhjLTQyZThjODI3ODE5MC5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba9ygwDQYJKoZIhvcNAQELBQADggEBAIBmcL53ay/4Vj8DD0/W
Ukw7/LXa8fVj0HNKV1qDUeG7WIwEwcvUoa8ot2Ul7C7w5wAMBgkXv8UH/j64dnL6
6z0lXcIbgT0QEvTnFMG/6ZkESvQ9b235uW7AoKepGPUlqnl60Dd4L3cy6UhX+YyF
1MJeJe045lVffmw2rcmnOprlcy33gu+DI8kk9MSYY0Qtz4D6YPzMhq43Yt0Z6Kcl
Nypn1N1ERbLwLUNRmWaStxg4FHMO79J0QwFUs5Z+MUl4gPPsHyIKYDAhNswO1OID
xOgSwko97NVLDpR90DYw3jbs+TJ/nwZa8j4oGHPjQ02eNigIkX1Ku6+Kos+IF7BT
p/k=
-----END CERTIFICATE-----
Generated at Thu Apr 17 18:04:49 2025 by rpki-client