Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9cbddca6-6793-4da6-9b50-c00c91bb2814.roa
File: 9cbddca6-6793-4da6-9b50-c00c91bb2814.roa (raw, json)
Hash identifier: UuRRrCyEsMgAH8THLFyxW3G+hw7Hmm0JS3hZTLa72ac=
Subject key identifier: B5:A8:66:5E:07:60:BC:5D:3B:08:02:88:50:0D:4F:13:7E:93:E3:CD
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5ADFA6DB484B97F5D0B031CC40B7455A4D29F90B
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9cbddca6-6793-4da6-9b50-c00c91bb2814.roa
Signing time: Sat 14 Dec 2024 00:00:00 +0000
ROA not before: Sat 14 Dec 2024 00:00:00 +0000
ROA not after: Sat 18 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf4:4800::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:df:a6:db:48:4b:97:f5:d0:b0:31:cc:40:b7:45:5a:4d:29:f9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 14 00:00:00 2024 GMT
Not After : Jan 18 23:59:59 2025 GMT
Subject: serialNumber=d23ce637a2f0419f17c93ecf632c81cc49747b99180cb8836cd40352d7ba3f05, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cc:82:fe:98:38:a0:09:ba:97:44:a1:4f:38:
94:80:43:c5:1a:a3:97:24:f3:23:70:6b:b7:d0:d4:
35:cd:e1:00:ca:af:2b:97:b2:26:e5:f0:c8:9e:5a:
43:cf:30:ec:87:00:76:62:8e:6a:19:73:ff:02:d4:
3a:e4:ec:13:ca:73:e2:b1:00:0e:5e:d8:ab:4d:1e:
90:93:29:7b:9f:c8:af:8d:de:9b:43:a4:e9:a4:58:
ea:15:1e:76:a5:13:4c:70:09:32:90:cf:ea:e9:3b:
38:dd:52:60:5f:15:53:f9:42:6f:34:e6:83:f0:fa:
5e:a3:ea:1a:14:9e:4e:3a:89:5d:69:ce:47:d0:4a:
8e:38:50:9b:ac:fd:52:4a:c6:b2:85:ea:f9:cd:3f:
ea:db:b5:57:66:8d:c5:2a:af:b3:54:c9:f9:56:25:
c8:2e:d8:41:f0:28:b1:c2:f7:5b:ee:ff:11:49:33:
c7:3b:3e:f1:e2:20:7f:54:6b:cf:60:07:a3:91:0f:
0d:8e:18:aa:57:fe:02:37:ff:08:9b:48:1c:2c:53:
68:b1:ee:12:d6:1b:2d:4d:da:bb:3a:c2:1f:70:ff:
9a:90:23:03:4e:71:f0:27:f7:0d:97:04:db:ca:8d:
e8:0d:b1:ed:86:1c:4c:dd:f2:aa:90:ef:f4:78:92:
1e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A8:66:5E:07:60:BC:5D:3B:08:02:88:50:0D:4F:13:7E:93:E3:CD
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9cbddca6-6793-4da6-9b50-c00c91bb2814.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf4:4800::/40
Signature Algorithm: sha256WithRSAEncryption
5b:06:89:00:39:6a:8a:51:ab:1e:94:f5:b6:29:17:da:b8:f8:
69:33:a1:c8:f5:24:17:e3:11:62:b3:bc:a4:d2:44:a8:07:74:
b2:18:65:cc:7d:d7:eb:a3:8e:b6:e3:94:10:1d:23:92:bd:7f:
e6:e1:ef:10:65:b0:e4:c0:79:23:04:e6:16:79:9b:96:50:53:
41:ff:c2:b8:6e:37:78:fc:37:7d:8d:8b:40:02:2d:ef:bf:9e:
be:c7:d5:c5:5d:bb:4d:23:e5:ad:3e:17:69:3d:0d:bc:43:13:
6a:4a:f9:10:dd:fa:a6:df:53:17:14:2d:2c:61:56:7d:1e:b4:
79:3e:bf:f2:8a:ce:e9:f8:ed:ac:d1:a6:b3:b9:87:f1:e5:f8:
e1:57:61:c4:b8:01:51:07:bd:0a:1d:56:68:a6:ad:81:08:9a:
92:14:5d:3c:2a:b1:cd:d9:4d:c3:ec:9c:51:5b:1b:33:cf:c8:
9d:bb:ca:09:92:da:e0:f2:a9:0c:a3:ce:27:3f:c0:af:17:42:
4c:51:75:0a:36:ba:d8:49:ed:b3:32:59:6c:9c:d9:9d:ab:ac:
f5:62:56:17:90:be:c9:9f:50:75:d4:35:d6:e8:0a:8c:fd:ae:
8f:ae:87:e6:bf:6e:02:59:0d:8d:c3:dc:7b:2c:44:a0:60:a0:
c5:bc:c4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:04:51 2025 by rpki-client