Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7077df52-66e9-43b0-9179-464c7c4e1603.roa
File: 7077df52-66e9-43b0-9179-464c7c4e1603.roa (raw, json)
Hash identifier: o3UdPzUhsm0gzQEvuWZdVOhbst5jfuXEsSpf5HwgKs8=
Subject key identifier: B7:F5:3E:29:3D:7C:BE:86:83:B1:57:02:B7:BA:6B:52:C7:AC:31:E7
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 7416E654A47DEFFAD60610E13F88DC3E93F8BD29
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7077df52-66e9-43b0-9179-464c7c4e1603.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da61:4800::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:16:e6:54:a4:7d:ef:fa:d6:06:10:e1:3f:88:dc:3e:93:f8:bd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=d2701312293474677d6ca0ca974563e4937d499ed1d99ad2401a78d54a025c66, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2a:73:f1:7f:e4:a2:ec:b5:1c:b6:bc:3d:41:
ae:ba:74:7d:0c:fa:8e:2e:e2:5b:00:bc:42:53:48:
22:6a:fb:c0:87:2e:a6:fe:f5:25:52:49:33:07:bd:
44:7b:2e:5b:9b:30:59:b4:99:d3:63:5f:0c:48:d4:
0b:12:99:84:a7:b3:9c:a9:7f:50:14:b3:95:64:02:
4c:ea:38:8f:26:94:1a:89:91:19:d6:a1:f8:87:ac:
4a:c5:85:24:b6:70:b7:a7:0f:23:f2:b1:d1:13:46:
71:46:23:28:6f:eb:06:1e:be:17:33:95:55:ee:19:
cf:94:34:73:fe:d2:e2:d0:48:bf:44:e9:7d:38:78:
bc:93:4a:1e:ac:66:e5:86:46:b4:45:7e:44:92:0b:
bf:ef:b6:e7:8c:33:01:d7:61:96:12:0b:af:66:56:
2e:69:94:c8:bb:97:b5:18:2d:04:7c:3b:a7:cb:5a:
10:76:27:2d:b9:b1:c0:47:9b:fe:35:15:f6:8c:bd:
ce:4d:42:27:25:48:5b:ed:c2:d2:e1:ef:69:32:a5:
e4:e1:4a:eb:90:98:85:3d:1f:79:4b:91:1b:29:d7:
0a:4d:6f:57:87:59:c8:db:0b:32:e9:5c:3c:42:0b:
85:72:41:d8:84:5a:6c:66:99:95:8a:14:a4:37:73:
25:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F5:3E:29:3D:7C:BE:86:83:B1:57:02:B7:BA:6B:52:C7:AC:31:E7
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7077df52-66e9-43b0-9179-464c7c4e1603.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da61:4800::/40
Signature Algorithm: sha256WithRSAEncryption
12:f0:67:80:6e:b8:0b:b3:97:a4:82:fa:12:06:2e:1d:b7:1a:
43:c4:be:46:ca:9d:bc:1b:bc:9f:8b:44:46:25:c5:fb:e8:93:
7c:42:61:08:00:60:c6:c8:d6:dd:3d:9e:4f:1d:6e:c3:7f:66:
54:6b:8f:c3:b5:21:cf:76:00:a9:08:66:e1:d4:18:4f:2b:3f:
69:5a:ac:8b:ed:81:9b:12:f6:e4:79:be:ac:7b:e4:13:c9:e0:
3d:9f:6f:8f:6c:f4:87:95:ec:4a:df:bc:3d:48:fe:3c:a3:63:
94:9a:2d:0a:22:6d:e5:03:bc:c9:ab:1d:87:ef:a7:3d:db:93:
50:f4:0a:b4:81:9f:36:0d:5c:9f:bf:cb:31:35:f6:65:de:b0:
a0:82:e7:54:1a:e0:5f:8c:7d:41:77:5f:a1:ff:cc:0a:3a:1b:
ec:bd:a3:aa:dd:3f:08:fe:b1:46:4d:25:86:9b:0d:09:ff:0d:
c8:a8:7e:73:30:97:99:22:61:45:8f:e0:8a:33:18:2d:83:50:
2c:4b:4e:08:7d:3b:3f:da:d2:26:3e:62:54:50:1e:6f:c8:78:
55:98:34:f5:56:8c:64:cd:ac:47:6f:9d:e1:96:18:6d:19:69:
92:f1:66:f3:a0:65:cc:fd:a7:75:6c:2b:29:2e:bb:9c:91:9c:
14:c4:88:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:16:35 2025 by rpki-client