Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6ed34926-31bd-49ab-b531-b3408fabe42d.roa
File: 6ed34926-31bd-49ab-b531-b3408fabe42d.roa (raw, json)
Hash identifier: arDYs+9OEEfwZDiMPH7OZDUMEd7gGk2fwSXW9jle4Yo=
Subject key identifier: 4E:98:7E:68:9A:39:2C:49:60:DA:7B:31:2B:92:FE:F2:5E:3B:79:97
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 47D91027F24840EA7FA360E513A8A2C279CBB4FB
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6ed34926-31bd-49ab-b531-b3408fabe42d.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da60:9080::/46 maxlen: 46
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:d9:10:27:f2:48:40:ea:7f:a3:60:e5:13:a8:a2:c2:79:cb:b4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=fcfcfd66e714556adbfe616c1aef367882765ba112276c75b15264f07c7a8149, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8b:f1:e0:7d:5d:10:25:82:76:49:44:ea:ed:
7c:91:0f:3b:93:fb:2c:a4:54:9e:7f:94:7c:c9:0d:
b6:e7:34:9a:3d:0f:97:7d:08:b2:a1:f3:7a:1a:79:
a7:df:0b:f2:cb:b9:8d:17:55:9d:9e:f1:53:77:94:
14:37:4d:c9:49:ad:44:da:be:49:05:8f:0c:7d:f3:
24:5d:4e:c3:be:f9:b1:ea:14:b6:3a:6a:4c:c7:f4:
35:4b:89:c1:ae:64:51:8e:77:f6:25:99:2a:84:b9:
e8:72:29:8a:d8:3e:77:46:4b:ae:23:36:6a:00:91:
15:46:d9:b6:64:2c:11:f4:53:1a:7f:e9:40:cf:10:
2d:e4:df:72:aa:b5:6e:f1:2e:36:27:d6:d4:d0:3f:
ac:64:0d:e3:7b:02:5e:37:42:39:8d:b4:7a:a8:d9:
49:0f:df:3b:93:1b:00:4f:cf:cb:17:44:e2:e1:d5:
6f:06:52:3b:9d:4f:6c:3f:3c:e8:1b:9a:af:41:2d:
ef:6d:d4:ec:03:95:cb:44:13:48:6e:bc:ce:fb:dc:
12:19:f8:7b:0d:54:92:08:b2:bd:00:ac:d0:dd:38:
e9:0d:37:46:f3:cb:68:c8:b5:ac:00:f6:7c:fa:dc:
83:26:87:81:c8:ec:f0:88:df:53:9b:cd:c6:f7:38:
fe:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:98:7E:68:9A:39:2C:49:60:DA:7B:31:2B:92:FE:F2:5E:3B:79:97
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6ed34926-31bd-49ab-b531-b3408fabe42d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da60:9080::/46
Signature Algorithm: sha256WithRSAEncryption
54:ad:ad:66:5c:2a:3e:97:d2:20:92:5b:ba:fd:82:d4:34:c2:
6d:6e:3e:e7:1a:0a:21:be:1b:90:2c:3a:56:8d:4c:43:e4:4e:
43:49:a6:12:77:44:80:93:bb:0f:a4:bc:2f:a0:50:8e:bd:1b:
d7:db:81:59:69:c6:d5:24:2b:15:10:4c:88:0b:5c:f6:0d:d9:
83:a9:05:19:2a:85:47:95:dd:01:e6:2a:c3:f9:7e:9f:63:aa:
67:ef:1a:fd:73:61:bb:d7:6a:06:06:41:f6:23:24:70:3a:ab:
95:ed:34:b4:71:36:12:10:21:50:e3:e6:b5:74:e8:8c:27:89:
fa:c9:d2:02:7e:b6:24:82:14:69:91:43:0d:88:62:86:07:7c:
34:8b:05:67:d6:51:64:cd:b6:4c:e3:06:9c:e2:d5:50:02:ff:
33:3b:2d:f3:22:48:51:eb:18:b4:10:9e:97:91:e3:b6:ec:06:
80:37:96:fa:4c:9b:d9:4b:60:8a:74:ca:5e:1c:71:d9:27:3c:
dc:a6:fd:c5:82:3b:a4:56:2c:14:a1:78:66:61:c1:13:58:96:
93:7d:f1:1a:1a:bd:92:48:49:49:a2:b9:3d:14:83:d5:c3:3c:
39:61:e6:a0:d5:96:3d:0e:3c:83:12:28:f9:60:ca:b1:44:0a:
2a:41:54:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:16:35 2025 by rpki-client