Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43415e42-fad6-4a8a-a252-a59b3de45f5c.roa
File: 43415e42-fad6-4a8a-a252-a59b3de45f5c.roa (raw, json)
Hash identifier: WHlQSRoPjh3MVfXnHKWHLr6bZNvIUKvbx3Ze98B8IMY=
Subject key identifier: 9E:18:FC:6F:79:9B:03:80:20:02:93:6B:C9:6E:49:69:02:10:B7:8F
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 58CFDB45A3A3AC0252CA6E5586375A8E646A5FFC
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43415e42-fad6-4a8a-a252-a59b3de45f5c.roa
Signing time: Sat 14 Dec 2024 00:00:00 +0000
ROA not before: Sat 14 Dec 2024 00:00:00 +0000
ROA not after: Sat 18 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da61:c000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:cf:db:45:a3:a3:ac:02:52:ca:6e:55:86:37:5a:8e:64:6a:5f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 14 00:00:00 2024 GMT
Not After : Jan 18 23:59:59 2025 GMT
Subject: serialNumber=c65d81d57bb4f208f2db4001ecaba76f55b6725653122fba29a52337a7611911, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5c:36:c1:4c:d0:8c:2c:1c:0d:8f:66:9f:7f:
14:73:d7:9c:6a:38:bb:02:0c:10:3d:a9:b5:e5:1e:
e6:2f:e0:e1:64:ff:be:12:13:93:38:ba:cb:7e:af:
4e:6d:df:56:25:03:e8:6c:2e:70:d7:bd:38:bb:ae:
82:ce:71:e2:06:12:4a:c0:94:8f:01:d9:60:b5:e9:
f3:a4:c4:50:45:77:9f:d5:84:c6:12:04:2d:78:d2:
71:a1:8e:01:d8:ad:00:29:8a:36:05:00:12:cd:7e:
1b:7d:c0:cf:2b:b1:1e:0f:bd:50:00:9f:7e:3e:c4:
73:59:8b:b4:4c:46:e2:33:29:be:fd:a5:89:bc:70:
f1:19:2d:a2:65:d1:bc:67:57:24:d3:ea:e6:79:11:
90:f1:b8:9f:d6:6e:0e:23:17:78:da:12:3c:b4:c5:
88:f4:54:89:94:70:da:d5:f8:d7:2a:82:93:69:c7:
1d:6b:7b:a7:f7:f8:a9:d4:44:55:83:99:2d:39:10:
6b:94:67:44:e1:17:a6:e1:25:35:35:92:0c:80:84:
72:58:74:b8:66:7c:39:84:77:29:03:9e:41:15:cb:
a6:b7:79:17:d1:e9:bd:47:76:44:9d:18:6c:b8:0d:
16:a6:a0:60:ac:4d:44:7f:82:3b:21:66:47:2d:b0:
7a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:18:FC:6F:79:9B:03:80:20:02:93:6B:C9:6E:49:69:02:10:B7:8F
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43415e42-fad6-4a8a-a252-a59b3de45f5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da61:c000::/40
Signature Algorithm: sha256WithRSAEncryption
07:3d:19:c8:b2:60:43:2f:e0:07:14:1a:4e:4a:90:6e:19:29:
74:82:9d:9d:cb:ae:a5:5f:40:84:aa:9c:bf:01:1a:8f:6c:e9:
67:b5:55:1b:79:43:63:f5:b4:34:88:ac:bc:43:36:e0:9a:d7:
02:f1:c0:8d:63:57:76:84:cf:03:75:a3:e0:34:97:9c:b1:73:
6b:e0:ec:85:04:ff:06:61:cb:15:c5:39:55:e1:d1:72:58:d5:
f2:97:2d:84:76:59:ef:eb:97:d0:19:26:21:a4:9c:26:a5:7f:
d2:38:c9:f3:89:78:e6:b3:e1:18:23:c1:32:61:0d:b6:b6:89:
7e:fa:2f:ca:fa:4b:00:40:45:d5:56:1e:27:a9:f9:17:c1:0e:
e4:c8:cb:f3:74:54:d7:1a:f2:eb:e3:e6:95:51:b4:7c:a2:35:
5d:9a:c1:fb:95:0f:7d:23:a8:b4:42:c4:82:be:3e:c2:46:1f:
d0:87:bd:a3:32:6a:9f:ae:82:e4:16:8e:ac:66:40:11:ee:9b:
ba:25:ee:3b:2e:32:3e:d6:cc:a8:d7:38:c2:56:26:46:5f:1e:
b4:55:ca:5c:cf:f4:d9:dd:17:fd:80:b7:46:df:64:e0:8c:11:
f8:b9:af:fe:33:c6:31:98:fb:68:43:dd:3c:a9:a0:34:c6:55:
31:7b:67:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:36:32 2025 by rpki-client