Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57969384-e327-4ad9-a3fc-1911445f4510.roa
File: 57969384-e327-4ad9-a3fc-1911445f4510.roa (raw, json)
Hash identifier: RAUtK99GD0DoSVtC2OfYgQ8Ln5Yquadm9X5jkpZvSSM=
Subject key identifier: A6:D7:DA:74:5B:95:FB:4A:23:A3:6C:47:73:34:66:36:CD:FF:9A:AB
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5B8E1B944BBF555221B323D338E55B342E23E0AB
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57969384-e327-4ad9-a3fc-1911445f4510.roa
Signing time: Sat 14 Dec 2024 00:00:00 +0000
ROA not before: Sat 14 Dec 2024 00:00:00 +0000
ROA not after: Sat 18 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da38:c000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:8e:1b:94:4b:bf:55:52:21:b3:23:d3:38:e5:5b:34:2e:23:e0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 14 00:00:00 2024 GMT
Not After : Jan 18 23:59:59 2025 GMT
Subject: serialNumber=52ba64fc4864a4b086f4cc794f02ff981ead8bc0ae50626fe60a30c4c2494cd2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:5b:c6:88:03:05:9a:2a:eb:9f:c5:bb:8c:
2d:b9:fe:d6:fd:10:17:cb:ab:69:90:2c:f5:da:0d:
5a:ab:89:9c:35:51:28:2b:d9:10:63:1c:78:69:32:
14:09:d4:9c:1e:ff:ed:52:44:4d:54:9f:1e:c5:f2:
d9:50:cb:70:2d:b7:ff:65:1a:5b:f1:0f:8c:12:f6:
d8:40:7e:1e:96:26:7c:85:9c:ac:56:56:9c:76:ac:
4a:f3:21:d6:47:53:63:ab:71:a0:1e:f5:55:f7:a8:
98:d7:4d:f2:14:33:84:ef:97:46:1a:e2:44:79:b4:
39:8c:8a:a8:4c:4c:e7:98:59:27:d0:65:ec:22:4b:
94:77:52:c9:97:39:d5:08:bf:50:5b:60:00:cc:b1:
67:24:88:58:30:74:74:d4:e0:93:ca:30:f9:1c:cd:
be:8d:1d:d4:12:49:9a:f1:45:b7:e3:07:a9:a3:f3:
d5:3e:1d:c2:b8:5b:db:90:42:2b:fd:91:ef:82:6a:
0a:ec:34:96:d6:11:da:84:7c:0a:6c:c2:f0:62:1f:
c9:01:d4:8a:b0:89:a2:09:c4:4a:56:5b:cb:24:33:
1f:6c:89:19:73:08:29:a6:49:84:03:8b:48:bd:13:
fb:9e:f3:1d:46:81:f4:23:e6:82:ff:fe:62:c9:15:
3d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D7:DA:74:5B:95:FB:4A:23:A3:6C:47:73:34:66:36:CD:FF:9A:AB
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57969384-e327-4ad9-a3fc-1911445f4510.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da38:c000::/40
Signature Algorithm: sha256WithRSAEncryption
46:8a:42:65:54:f7:c4:1d:69:22:fc:5e:99:7c:6e:05:46:b9:
20:1e:c1:c8:be:c4:29:07:cb:db:27:26:4c:f0:09:0f:87:ed:
d9:58:4f:2e:61:a7:41:4d:02:8f:6d:a6:0b:8a:3d:51:94:d7:
a2:e4:13:24:7a:4c:01:ec:9a:91:69:63:fd:b8:70:24:52:a4:
38:92:90:c6:7c:05:08:f6:4a:df:79:de:94:27:04:44:db:d6:
88:70:6b:03:72:a3:c7:23:f6:c8:c6:cb:66:90:81:85:dc:d4:
c6:90:25:44:e3:8c:e5:73:f2:5c:51:94:77:0c:ab:4b:10:fb:
de:ec:8b:af:e4:a9:37:6b:ac:00:fc:2a:51:a0:0e:14:e1:8a:
8c:db:fa:0f:95:7e:95:c4:38:2b:2c:b4:a0:05:64:8d:c3:93:
58:99:4f:e2:18:1b:70:11:95:38:4d:9e:ac:4c:67:92:a2:e5:
30:00:4e:b1:56:63:c4:af:2b:46:88:e9:88:91:2b:0e:f3:21:
e6:46:07:9d:7b:63:fc:ad:3d:37:34:d6:f7:8b:47:ce:7f:c6:
ea:0e:f1:de:6a:e3:b9:53:25:9c:9e:60:92:bc:7d:96:ad:cf:
e4:e7:e3:8b:80:6e:0f:ae:aa:03:4f:c3:a2:78:e9:99:df:19:
96:8d:e4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:11:51 2025 by rpki-client