Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f473469-1950-4c37-871b-500821ae2950.roa
File: 5f473469-1950-4c37-871b-500821ae2950.roa (raw, json)
Hash identifier: yN2t+eEzBJfY2LUhI3I5/h+VzlGHFVLjJmFxJqACjME=
Subject key identifier: CC:07:B3:36:60:3B:00:39:EC:03:DA:A6:4B:59:E1:43:5D:15:53:26
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 3B72B18E1C251930E6310CC6F586972D9F7C408A
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f473469-1950-4c37-871b-500821ae2950.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf6:2000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:72:b1:8e:1c:25:19:30:e6:31:0c:c6:f5:86:97:2d:9f:7c:40:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: serialNumber=ec8dc676afe7adb0403afe417bf7ef82c07fb3061b085a47ec0049527247fa6d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:c7:17:66:ad:de:7e:76:12:5e:4e:42:76:
1b:95:b9:eb:56:15:22:20:69:37:70:6c:69:fb:47:
39:e8:98:a4:19:29:22:f4:eb:1a:be:10:2b:28:cb:
ee:33:7a:e0:e5:b0:c3:f0:c5:6d:7b:b7:e6:84:b6:
22:e5:65:1e:8c:5c:7d:3e:1b:55:89:38:6b:d2:ed:
4b:55:dd:d3:28:1b:89:b4:01:7f:5f:5d:e9:d8:ed:
4a:52:dd:89:d7:10:33:5b:72:1b:e9:98:c9:ff:74:
62:af:a6:a3:04:40:5b:ce:ae:1b:60:2d:ce:67:d2:
66:ff:1c:b3:ca:8e:33:4f:16:b7:58:f2:54:42:95:
f4:77:71:00:48:87:d0:93:14:04:f0:95:af:51:9a:
57:d1:51:b3:8a:0e:98:45:de:ca:19:2e:1f:c5:00:
2e:23:c7:45:a3:5e:93:1c:db:21:65:db:67:2b:5e:
b8:9d:11:4b:83:84:10:31:cf:df:79:c5:06:c1:58:
03:f5:50:fb:93:32:d7:6a:d4:f1:ad:4a:20:4e:58:
23:69:7a:6e:b3:3f:49:fe:5f:54:54:db:ae:53:70:
6a:62:8e:36:0e:f9:75:2f:d5:3f:20:bb:d4:45:cd:
dc:f9:4a:56:e7:ee:5e:00:b8:16:ca:f0:ee:5c:f0:
99:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:07:B3:36:60:3B:00:39:EC:03:DA:A6:4B:59:E1:43:5D:15:53:26
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f473469-1950-4c37-871b-500821ae2950.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf6:2000::/40
Signature Algorithm: sha256WithRSAEncryption
80:d2:1f:00:e3:28:14:57:e8:5b:9a:98:b1:76:ab:f1:d1:50:
d4:8d:fe:7f:b7:0a:77:01:6d:b8:57:d1:9a:f3:d0:7f:2e:9d:
9c:14:79:ce:f7:1e:66:6a:d5:a6:b7:20:fc:0a:b3:28:1a:a5:
51:1e:2d:04:83:db:a0:27:54:7c:7e:13:11:d3:45:36:81:53:
a1:ef:e2:b0:0c:72:8d:17:13:d5:60:38:c3:bd:bd:3a:b6:45:
1c:5c:f4:74:d0:9b:67:69:bb:5a:ac:07:72:6a:2e:bc:fd:a7:
88:30:66:3c:21:51:64:ec:2a:74:b7:3a:2b:ce:f1:77:bb:57:
d0:13:7a:a1:82:1c:e7:60:74:2a:8b:aa:20:37:c5:57:ab:33:
e1:ee:33:c6:65:f0:14:04:7d:b1:02:8f:85:5b:69:84:73:7f:
34:6d:26:58:63:d8:82:d2:10:74:12:00:46:de:3e:eb:5b:ca:
70:5f:8d:68:61:04:d8:ec:3c:c9:3d:57:cc:95:67:27:46:62:
74:61:95:34:0e:98:84:ac:1c:52:40:34:c1:06:7f:a3:34:72:
55:92:cb:32:d0:c5:c6:14:57:28:52:b9:2c:4f:0a:d4:d2:be:
9a:73:72:b6:80:df:2a:c2:d3:bd:20:13:a6:4b:c1:2d:3e:12:
e7:6f:a6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:11:49 2025 by rpki-client