Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b910bf1-63f0-4757-9406-0c92d9c76a67.roa
File: 5b910bf1-63f0-4757-9406-0c92d9c76a67.roa (raw, json)
Hash identifier: ZQ63q7xvU06OAubfludcSfylcPy/oi7dUic1EbbnkRs=
Subject key identifier: E6:DC:44:C9:F5:6C:23:15:F9:07:AC:AE:28:FB:51:52:4B:39:7D:11
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5DCE2226CE7B63DA010F10E79E860299EB1DDB2A
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b910bf1-63f0-4757-9406-0c92d9c76a67.roa
Signing time: Wed 01 Jan 2025 00:00:00 +0000
ROA not before: Wed 01 Jan 2025 00:00:00 +0000
ROA not after: Wed 05 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf7:8080::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ce:22:26:ce:7b:63:da:01:0f:10:e7:9e:86:02:99:eb:1d:db:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 1 00:00:00 2025 GMT
Not After : Feb 5 23:59:59 2025 GMT
Subject: serialNumber=0005171370d52eaaaf511896872d72acd8e6874e76198231afa603c1d0a8f664, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8c:ca:69:74:dd:04:d8:53:92:3f:02:df:ee:
3e:fa:ff:74:10:40:2e:fa:f8:5b:6c:67:c4:55:99:
a3:d9:57:5a:6d:6a:50:d4:71:e9:e4:24:ff:d6:51:
9a:ab:5a:c7:ed:e7:4a:97:44:dc:fd:5c:fc:ed:81:
af:d1:00:6a:1c:47:4c:fe:7a:da:a0:c0:4e:05:21:
89:59:ae:15:43:ec:20:31:5a:22:2e:1f:2c:d1:3c:
8c:54:cd:e1:2a:77:6f:bc:de:25:54:d9:5b:cb:c0:
f8:94:a9:bd:bd:77:d1:5f:13:65:dc:0e:96:cb:93:
23:32:eb:ae:68:7b:d4:27:51:27:e1:03:e9:60:7e:
ba:7d:f9:bf:24:78:c3:92:61:f7:03:3a:b7:08:95:
df:f3:38:bd:45:7e:60:35:d7:e6:66:2f:21:d6:ab:
29:9a:1a:4b:5a:8d:f2:c1:0c:8f:0a:7a:58:f7:f3:
4c:73:95:87:7d:5f:35:b5:36:de:72:21:96:f7:68:
8f:b4:4d:b4:59:82:70:94:e8:4c:d6:2b:86:eb:14:
4a:ed:d6:a7:c4:2a:07:78:91:99:6b:f1:f5:93:54:
3f:e3:3e:aa:e6:a1:8c:cc:0b:bf:65:3c:a5:71:df:
4f:48:40:32:99:71:79:fd:fb:20:89:ff:b3:f6:b3:
14:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DC:44:C9:F5:6C:23:15:F9:07:AC:AE:28:FB:51:52:4B:39:7D:11
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b910bf1-63f0-4757-9406-0c92d9c76a67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf7:8080::/48
Signature Algorithm: sha256WithRSAEncryption
89:da:cb:ce:69:be:2e:c4:0e:2e:dd:76:84:f9:4d:67:32:85:
05:13:8b:5d:68:2f:e6:87:c4:45:be:f6:37:6f:24:37:16:96:
fd:f6:00:f5:21:46:3a:80:a4:0e:3b:c3:61:02:a8:1a:1b:f5:
2a:27:16:73:c3:47:90:16:b4:d5:71:21:e0:a1:4d:7d:9e:ec:
99:8e:8f:b9:f2:5e:97:a8:4f:73:c6:70:09:97:89:cf:44:3a:
b4:70:d6:87:9f:dc:d8:f8:ea:fe:c5:f9:83:57:d2:26:c9:33:
b9:2a:1e:5a:18:dd:a7:29:c9:f5:fa:1f:08:3b:20:4b:9c:6f:
48:7e:79:8f:5a:a4:ee:73:77:c9:a8:25:28:8a:c2:91:df:46:
0c:9c:b7:10:ac:73:60:ec:69:a3:eb:00:2b:b3:8f:24:4e:fc:
f5:ec:de:59:a6:6a:83:11:ae:84:79:11:d7:0d:35:75:ad:9a:
8d:ea:0b:35:de:6d:08:54:76:45:25:93:df:30:62:45:76:42:
e9:f8:0c:a8:b5:2a:2c:c8:dc:77:d9:53:e5:37:be:5e:a2:41:
a6:39:65:77:23:91:13:fa:e8:a8:d2:96:bd:cf:8a:59:47:ab:
3d:5a:24:98:3c:75:37:5e:6b:aa:cf:72:82:33:0c:8c:77:30:
da:e3:ff:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:57:44 2025 by rpki-client