Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/69d558fa-7b2a-4eba-8ad6-808a51dc1498.roa
File: 69d558fa-7b2a-4eba-8ad6-808a51dc1498.roa (raw, json)
Hash identifier: EJAYUiYQWVvG2jtaggKqAz4dALf3PRPL7E7UNOJ0+zc=
Subject key identifier: 7B:0E:38:6C:96:55:8A:FE:87:38:98:AC:45:A5:A3:A1:BF:C5:98:4A
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 3211B0D1FE942EF676C6D5B7842B3AC631FE4659
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/69d558fa-7b2a-4eba-8ad6-808a51dc1498.roa
Signing time: Tue 31 Dec 2024 00:00:00 +0000
ROA not before: Tue 31 Dec 2024 00:00:00 +0000
ROA not after: Tue 04 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da1c:8000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:11:b0:d1:fe:94:2e:f6:76:c6:d5:b7:84:2b:3a:c6:31:fe:46:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 31 00:00:00 2024 GMT
Not After : Feb 4 23:59:59 2025 GMT
Subject: serialNumber=45a1f35cc77e48c65e5250075cfc64078ae0b0e7dbf3c6964b274505a9f6bd84, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:89:e0:82:4e:39:ad:a9:c9:af:d0:c9:37:2f:
98:26:d1:1c:b7:57:28:60:bd:43:6b:23:37:f7:74:
af:a0:c4:ac:b2:0b:42:eb:3e:4c:66:70:d5:02:58:
18:c9:67:b6:67:d2:4e:a3:ac:46:8a:8a:44:a4:f2:
44:da:65:ef:68:52:5a:fc:17:33:fd:fb:e7:07:0a:
4e:59:9b:ac:24:15:da:c6:ed:a8:b1:48:19:17:44:
b3:15:eb:3e:1f:95:db:2a:fa:a1:cb:8a:f5:99:77:
cb:6e:82:34:bd:27:7f:a8:d0:7f:47:80:a3:23:94:
bf:97:e3:24:bb:61:27:ce:7b:60:41:37:ff:70:7d:
4a:6e:0d:3f:d5:51:94:78:e5:b7:8e:4e:ac:c3:32:
f7:e2:a8:c7:51:0e:6c:3b:8d:c9:bd:9c:59:c2:57:
00:e4:87:52:f4:f4:af:99:de:bd:88:d6:c5:35:6d:
e4:5c:91:e8:00:99:eb:e1:87:ad:58:f0:2a:0e:b3:
c4:6c:42:a2:e7:74:cc:bc:59:73:cf:d3:ab:ca:55:
17:e1:8c:7c:f0:73:8c:a2:82:89:d0:ec:ec:22:3c:
f0:66:aa:4d:ee:d0:16:6d:b5:9a:57:ce:d5:4a:89:
75:cc:a6:79:c1:a5:98:40:03:99:1c:7a:9f:b9:18:
4e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0E:38:6C:96:55:8A:FE:87:38:98:AC:45:A5:A3:A1:BF:C5:98:4A
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/69d558fa-7b2a-4eba-8ad6-808a51dc1498.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da1c:8000::/36
Signature Algorithm: sha256WithRSAEncryption
32:26:b5:6f:b5:6a:aa:01:59:ea:f0:dd:c6:09:be:1b:bc:85:
c3:88:0c:5c:f9:7a:3a:6f:ea:db:22:fa:74:a0:97:a7:8e:1a:
5a:ba:73:d8:6d:24:b3:91:61:51:5c:c9:06:e7:33:95:60:36:
8f:49:7e:9b:c1:72:0a:82:53:b3:7a:8f:ad:e5:96:9d:1b:95:
8c:21:71:76:36:3d:56:f8:15:c3:eb:f9:b6:96:a5:ca:ad:bf:
6d:f6:69:4a:ed:79:bc:2a:e3:27:f5:e3:3a:36:de:02:0c:85:
41:ba:db:7e:bf:8e:33:89:10:9b:75:fe:1b:79:7d:d7:2d:2a:
34:d2:dd:53:32:7d:ec:12:c7:e7:d6:e3:a9:35:ec:11:91:03:
cc:8e:82:26:fd:6a:0f:f8:f5:b7:af:04:2f:6f:54:4d:f1:55:
8b:14:03:38:c0:02:41:9a:b4:0a:7d:a1:67:16:5e:1b:e5:05:
a9:6a:a6:9d:9a:ef:01:55:43:b2:42:34:ca:91:2d:f0:4b:af:
c9:90:80:8d:25:a2:04:8e:bf:32:85:77:42:cb:02:e8:0a:96:
ca:4a:14:e2:93:13:10:d5:34:93:f9:45:ac:15:3c:30:0b:6f:
3c:56:29:af:43:a1:17:72:df:af:a3:6e:1d:cb:5c:ca:33:29:
3d:90:30:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:11:51 2025 by rpki-client