Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57e0c688-3325-48df-8172-01b8157e560c.roa
File: 57e0c688-3325-48df-8172-01b8157e560c.roa (raw, json)
Hash identifier: TRzY0+imaVWySCDOtcAd1U1zaOqZuy+jTWNw8KYBjaE=
Subject key identifier: BF:02:9C:FF:F0:C9:3A:B9:7F:16:24:E3:24:51:EB:2A:71:F4:89:CA
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 6E78791A1370178C65739FD9E3E0CC1FE9961DF8
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57e0c688-3325-48df-8172-01b8157e560c.roa
Signing time: Sat 14 Dec 2024 00:00:00 +0000
ROA not before: Sat 14 Dec 2024 00:00:00 +0000
ROA not after: Sat 18 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da00:c000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:78:79:1a:13:70:17:8c:65:73:9f:d9:e3:e0:cc:1f:e9:96:1d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 14 00:00:00 2024 GMT
Not After : Jan 18 23:59:59 2025 GMT
Subject: serialNumber=cede0b97202f4b35c2674962d4dfb86535625ba9833a127f7d73cbf39794bb58, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:ad:5b:71:48:69:9b:b1:cd:b7:44:a6:15:
7f:dd:8a:ad:4f:af:38:3a:03:9b:82:d0:3b:27:fb:
20:f6:c9:fe:ef:51:53:e9:b9:7d:86:aa:49:92:31:
ab:35:21:06:1c:db:ca:42:77:03:ae:f4:96:1d:45:
d3:a1:61:c9:8c:98:4c:8c:ed:e8:30:75:00:14:8d:
9d:2d:5c:55:f2:db:36:06:31:e5:51:41:6c:c1:06:
d2:63:65:ac:d9:43:99:c1:b6:4b:d7:fb:b5:b0:f3:
50:2d:ba:2f:38:f7:cc:3f:3c:8f:e8:1a:ae:8c:fc:
77:bf:9d:d9:73:41:26:28:f8:b8:1d:8b:2c:70:c8:
e0:12:80:18:e4:bb:e1:d5:1f:54:4f:ba:66:6b:dc:
8f:e9:f9:7f:f8:5a:b6:f6:3f:a1:1d:64:ad:03:27:
de:9c:19:a9:ff:90:89:0f:f0:9d:1b:a7:5d:67:cc:
4a:f6:9a:58:dd:c2:9f:c6:5f:f0:bc:a2:7d:63:c7:
42:0f:f7:70:e4:33:44:a3:b6:15:b9:7b:71:2c:ce:
ed:1a:d0:9d:55:8c:c9:af:4e:e5:03:d6:0e:55:52:
1d:06:f4:66:b5:e8:d1:b4:96:b3:1a:e0:c7:b9:34:
38:4a:ae:cf:7f:7d:35:a4:e9:6f:9b:21:78:6e:29:
b2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:02:9C:FF:F0:C9:3A:B9:7F:16:24:E3:24:51:EB:2A:71:F4:89:CA
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57e0c688-3325-48df-8172-01b8157e560c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da00:c000::/40
Signature Algorithm: sha256WithRSAEncryption
2f:e1:59:c7:23:16:f2:07:a3:d3:60:d2:08:ca:c3:cd:94:24:
2d:17:0e:3a:2a:45:b8:ce:2d:88:07:b6:e4:ef:c4:27:dc:c7:
73:af:5f:a2:28:60:b3:db:59:d2:59:92:d0:d8:d1:a5:20:ac:
8f:07:1e:41:b1:44:b8:16:45:b8:77:f7:cf:87:e4:9b:2c:12:
cf:6e:ad:3d:1d:0a:0c:0b:f7:0b:de:e2:4e:43:df:84:2e:57:
18:09:0f:ce:e0:5f:9e:e7:0c:0b:d4:bd:ce:ac:50:51:e0:2a:
45:9d:60:e7:14:c9:15:a8:50:95:cd:b9:a6:b0:c8:ce:05:0b:
83:6e:95:e5:bc:37:8e:fa:b5:68:23:d0:7c:30:a3:06:7d:64:
53:b1:d6:d2:0c:62:38:57:e6:52:a7:ed:be:4a:75:f0:47:11:
c4:d4:83:ba:f8:68:26:57:5a:dc:73:05:04:16:a3:9c:df:52:
a1:f6:dd:a1:d9:1e:da:6d:86:93:7a:ec:01:10:ec:1b:43:0f:
5c:d2:95:2c:d6:ce:8c:dd:82:26:53:4e:58:9c:09:73:e4:95:
39:0d:e7:68:67:71:a7:1f:ea:ba:7a:a6:f3:52:41:e1:d8:99:
eb:98:b7:41:90:7b:30:7f:92:fc:73:8f:74:91:2e:20:c0:2f:
91:49:f2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:09:24 2025 by rpki-client