Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/771d4001-b963-4406-aac7-3fc89353fac8.roa
File: 771d4001-b963-4406-aac7-3fc89353fac8.roa (raw, json)
Hash identifier: 4HC2V7hHXknXGB4gyefCkHwG4s/AboPZzNK9WHd5DpY=
Subject key identifier: 8C:A2:32:72:2C:77:41:C0:59:80:AD:62:A8:56:4E:07:DF:CB:F0:50
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 19098538F563F6F9E6167A250DE44D6C8A736354
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/771d4001-b963-4406-aac7-3fc89353fac8.roa
Signing time: Wed 18 Dec 2024 00:00:00 +0000
ROA not before: Wed 18 Dec 2024 00:00:00 +0000
ROA not after: Wed 22 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da70:1000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:09:85:38:f5:63:f6:f9:e6:16:7a:25:0d:e4:4d:6c:8a:73:63:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 18 00:00:00 2024 GMT
Not After : Jan 22 23:59:59 2025 GMT
Subject: serialNumber=d5adbc6b675ddc53fe289e0c4352e555c8f807afb7fbd7a79c4093ce1b9c7d52, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ed:4b:56:88:38:55:00:ff:72:50:52:ab:5f:
18:39:51:f3:9b:bb:0a:2f:22:15:b5:f8:6c:a4:55:
bf:da:3c:b2:0a:de:5b:8b:50:f6:34:66:b3:8b:89:
5d:43:73:90:2c:28:03:0b:30:17:c0:c0:be:66:85:
f0:9d:0b:40:a2:e6:3d:1d:c0:f9:cc:ec:a0:9a:21:
fc:8c:72:33:8d:b1:f9:73:4f:e9:1d:d6:d1:c4:e4:
9a:15:82:57:03:24:a7:a0:23:84:fc:5f:9b:f0:47:
6e:49:dd:71:f4:9b:70:9a:37:a6:dc:86:d7:89:a9:
49:39:f1:48:2d:c3:92:53:f7:e5:28:4d:47:e4:a0:
b7:48:23:b8:70:8f:96:98:26:69:a5:46:87:9a:45:
53:78:19:31:b3:0c:ff:e3:a7:12:bb:5e:b0:ac:b0:
00:f2:9a:16:22:98:80:8d:79:96:db:56:11:4e:bb:
a0:8d:ee:49:f1:7c:c0:b7:e3:cb:c5:d0:42:2f:f0:
1c:71:6d:9a:25:fa:db:64:1a:5b:4b:1a:ac:bc:a7:
f5:7c:90:3b:2c:a3:4f:40:ed:aa:2e:a9:f5:b0:5f:
0b:53:bc:47:cc:6f:7e:3e:50:c5:fc:12:0e:07:f7:
88:51:f3:51:1d:62:a6:89:55:60:83:f3:3c:1d:9e:
5d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A2:32:72:2C:77:41:C0:59:80:AD:62:A8:56:4E:07:DF:CB:F0:50
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/771d4001-b963-4406-aac7-3fc89353fac8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da70:1000::/40
Signature Algorithm: sha256WithRSAEncryption
31:19:02:60:e4:be:23:17:71:ef:1b:bd:31:75:08:2b:79:4a:
dc:46:8b:2e:fe:db:3f:ed:7a:34:bb:19:44:b1:92:39:af:65:
71:c5:42:2a:bb:82:d2:74:1a:31:ea:a0:11:83:31:38:ae:23:
2a:cc:97:3c:92:d9:9b:21:7d:a9:b9:61:f9:64:1e:31:c1:4a:
d2:a3:ce:32:83:79:2c:df:a2:68:ab:7a:af:12:39:9a:3c:55:
8f:c8:af:bc:35:4d:85:34:e1:55:b0:8e:cc:fb:dd:75:4c:f6:
e9:45:52:59:b4:fe:3e:89:81:0d:74:4a:5b:be:95:9e:ac:60:
c8:5a:25:18:60:e0:8b:9d:61:99:6b:3f:f3:40:0b:e7:70:a4:
b7:01:ea:4e:d3:2e:12:f2:e6:a0:b2:ff:35:81:2e:b6:1d:d1:
33:76:31:68:03:1c:4d:81:ef:73:04:99:e3:af:9b:a3:b6:f2:
67:d5:7c:88:5d:e1:b7:04:85:f8:07:35:da:a7:d0:e4:83:21:
de:dd:73:0c:e1:6f:dd:be:37:ec:a7:e7:d3:9e:e0:b9:40:73:
df:d1:cf:29:48:1e:fb:ca:47:10:69:9a:bc:c3:6e:d8:eb:f9:
43:06:bb:ae:75:da:26:7c:8d:72:ad:74:70:10:ea:d5:39:cc:
fe:ce:d3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:46:01 2025 by rpki-client