Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/45941cb3-4852-435f-93d2-9add72a0cc2f.roa
File: 45941cb3-4852-435f-93d2-9add72a0cc2f.roa (raw, json)
Hash identifier: bjmtkoac8EaH7aLqjBnG6kd5kaW/iih4uOPE1Fnedz8=
Subject key identifier: EE:31:BF:D6:46:87:6E:AE:D9:61:A7:F6:06:EF:36:21:8A:B8:D2:8C
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 30FE9E1FA8B65246B759688A8D15B7E0C4DAEAF4
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/45941cb3-4852-435f-93d2-9add72a0cc2f.roa
Signing time: Fri 17 Jan 2025 00:00:00 +0000
ROA not before: Fri 17 Jan 2025 00:00:00 +0000
ROA not after: Fri 21 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da2a:8000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:fe:9e:1f:a8:b6:52:46:b7:59:68:8a:8d:15:b7:e0:c4:da:ea:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 17 00:00:00 2025 GMT
Not After : Feb 21 23:59:59 2025 GMT
Subject: serialNumber=b235aeca12513f889544dad85dc953b3be738b5ade381af16de07a926340a7df, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f9:e6:23:28:b1:a0:fe:6b:7f:a6:0d:c0:45:
e2:eb:ec:cd:b6:23:3e:28:bf:3e:29:0a:b2:99:6d:
0f:67:32:25:9f:01:fb:83:b3:1f:10:52:4d:a3:f1:
12:24:b4:02:e9:e5:76:65:0a:4a:3b:cf:ff:df:d5:
84:d7:f2:e6:e9:40:b9:85:69:38:70:b6:68:01:0b:
5e:6f:6d:bf:b9:4d:0d:22:04:ac:d7:8f:44:30:32:
1c:ef:c0:24:a7:f0:85:00:aa:6e:a1:c5:8a:46:ed:
cc:ef:02:29:b0:9c:e3:be:a9:4e:5f:95:6a:a3:8e:
0f:92:90:22:08:81:7a:83:39:16:fa:6c:00:ff:98:
42:02:b1:ad:63:a4:02:50:b9:b2:a6:d5:43:1f:9f:
21:cc:ba:9a:1e:21:0c:8d:c9:11:f6:84:b2:40:e9:
14:6d:6d:62:96:c7:de:3f:dc:50:7c:ab:0a:c0:27:
ce:9b:48:7a:52:d9:c2:05:0d:99:f5:ed:0b:8d:2d:
68:f9:f6:2a:60:f2:8c:01:0e:b1:d2:f2:3f:7f:59:
d8:1a:22:78:6a:3e:7f:06:1d:2e:31:c7:f0:57:87:
fd:fc:f0:d0:b2:ba:25:81:27:d1:ac:53:49:33:c9:
07:91:a5:cd:56:7a:95:a5:ed:98:0d:ec:f5:9b:82:
be:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:31:BF:D6:46:87:6E:AE:D9:61:A7:F6:06:EF:36:21:8A:B8:D2:8C
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/45941cb3-4852-435f-93d2-9add72a0cc2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da2a:8000::/36
Signature Algorithm: sha256WithRSAEncryption
20:f4:23:09:98:ae:d9:37:85:7d:c8:05:a7:aa:45:7e:02:7b:
6a:ff:16:67:da:c4:23:96:bf:8f:6e:81:1d:bd:22:96:29:8f:
39:03:90:45:c7:ef:96:b8:98:b7:8a:a5:2b:03:6a:f7:96:ca:
63:b0:73:e2:69:5a:05:3e:d6:49:67:ee:dc:72:5d:ff:65:5c:
de:8c:85:16:de:60:57:a0:f8:68:06:8b:3a:af:17:71:f7:ae:
81:87:e0:cb:37:af:62:9c:64:d6:3a:5a:8f:fd:38:78:8e:37:
b9:74:17:d4:ee:26:e1:82:44:10:56:69:01:7c:79:54:b3:98:
33:b9:9c:eb:66:30:43:d2:0c:c0:ab:41:a7:39:e4:5a:d3:ee:
b4:bb:0e:b2:15:6f:41:24:71:e1:5b:b4:fc:72:93:eb:f5:4d:
39:f1:79:c2:91:c4:e1:92:4d:22:99:72:dd:2e:92:85:7b:f3:
1d:fc:31:c4:c1:01:27:af:51:de:16:79:80:5b:37:49:a8:d7:
ff:77:e3:0b:0f:f4:4f:81:62:88:7e:2c:7c:76:5e:35:af:4e:
fa:a9:0d:80:24:6f:d9:d4:56:ce:94:dd:72:2d:f4:91:2e:fe:
f9:3f:1f:ad:90:d3:85:cc:6d:9e:1a:7b:dd:79:6f:e1:b8:38:
47:2d:95:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:09:26 2025 by rpki-client