Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e2b2125-d90e-4a65-ae70-72ed13b2018b.roa
File: 9e2b2125-d90e-4a65-ae70-72ed13b2018b.roa (raw, json)
Hash identifier: UslxZyYun44uvW5zTdcH0Nh+CzjcICjJyNNMnoc+/+I=
Subject key identifier: 74:B1:C4:9D:F9:E9:F8:35:D6:8F:0D:3E:11:99:99:26:BA:75:19:E3
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 41C6CAA497BB0BF59049E3814336C0A434CF5E9A
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e2b2125-d90e-4a65-ae70-72ed13b2018b.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 43.220.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:c6:ca:a4:97:bb:0b:f5:90:49:e3:81:43:36:c0:a4:34:cf:5e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=ccb3d4b6a870296ec4c51c1efc1672861a8f056faed6e854f4e892bd64d3e20a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:da:e1:4c:b9:86:17:ca:82:7a:a0:64:a9:
13:b2:92:5e:bb:f4:ef:d1:85:f1:75:e8:79:7c:1f:
bc:8b:37:fb:57:13:93:18:dd:01:e7:98:50:3e:18:
ff:a7:50:4b:78:9f:95:c3:07:52:e2:16:9b:d6:a1:
62:df:ef:cc:64:52:eb:82:c0:f0:b6:03:52:1c:c0:
19:dd:ba:84:9e:f6:6e:d7:90:f7:9c:70:7b:70:da:
12:b1:01:ea:f2:fa:a8:44:17:61:54:80:63:a3:2e:
a4:33:b4:a7:6a:82:30:4b:56:aa:3f:e5:d0:6a:69:
c2:a5:ba:32:3c:d1:85:fe:d8:f0:39:1d:57:92:15:
c0:f5:d1:37:bf:03:26:9d:26:50:ea:81:46:62:45:
f3:87:b8:d2:98:85:a8:5f:90:69:dc:73:f9:9b:f3:
96:b4:16:a8:c4:e5:97:09:2e:58:f5:17:fb:0f:ff:
a5:58:63:af:5d:b6:6c:d3:06:7b:79:79:ed:b7:8e:
0d:ed:8a:a2:ba:73:11:de:41:d0:49:2f:59:8e:b9:
90:7d:4f:5d:06:41:a0:fd:90:48:ba:8e:00:ae:ed:
32:52:d4:d6:5a:8f:88:f3:97:13:8c:6e:0b:01:e2:
7d:66:55:6b:29:37:4e:a7:d0:2e:9d:6b:04:64:2b:
e5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B1:C4:9D:F9:E9:F8:35:D6:8F:0D:3E:11:99:99:26:BA:75:19:E3
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e2b2125-d90e-4a65-ae70-72ed13b2018b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.220.0.0/15
Signature Algorithm: sha256WithRSAEncryption
a0:d5:cb:ec:70:5d:6f:7d:d5:bd:66:e0:fb:48:17:72:89:08:
d9:a0:35:63:b5:61:8e:18:8f:8b:75:20:36:fe:b8:d0:8e:35:
d4:81:c9:2f:73:cf:1e:8f:5d:b1:2e:ec:0e:c7:ab:09:f7:3f:
40:78:b7:85:5f:96:bd:a3:01:0e:32:75:d3:50:af:7d:8c:4e:
23:0d:6d:da:17:e2:33:44:82:8c:80:cf:f1:81:a8:0c:84:13:
23:de:18:28:3c:b7:5f:0e:38:74:0b:4a:e9:47:9b:40:1f:c0:
34:68:6c:3c:be:af:cd:b4:7c:e5:94:92:01:b7:14:67:04:f1:
45:93:f1:5d:07:3f:ee:bb:04:d2:85:20:23:e5:39:e2:b9:5b:
55:95:92:a9:e9:3c:6d:b4:30:59:cb:99:83:36:58:74:04:8f:
7b:14:1d:38:9c:29:42:36:89:10:c1:25:b0:8d:14:c4:6f:91:
df:4b:94:95:ee:c4:6e:97:61:ee:43:2b:c8:fb:ee:d9:95:bc:
3c:c5:8c:ef:ec:76:23:98:f9:8e:57:91:da:03:2a:be:7c:2f:
54:dc:3e:a7:10:e0:5a:54:ec:a2:02:cb:6c:e1:3a:04:24:58:
d8:13:8a:aa:cb:41:be:45:48:62:34:63:03:67:3f:95:79:7f:
bb:13:4b:09
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIUQcbKpJe7C/WQSeOBQzbApDTPXpowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNjAwMDAwMFoX
DTI1MDIxMDIzNTk1OVowejFJMEcGA1UEBRNAY2NiM2Q0YjZhODcwMjk2ZWM0YzUx
YzFlZmMxNjcyODYxYThmMDU2ZmFlZDZlODU0ZjRlODkyYmQ2NGQzZTIwYTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyLa4Uy5hhfKgnqgZKkTspJeu/Tv
0YXxdeh5fB+8izf7VxOTGN0B55hQPhj/p1BLeJ+VwwdS4hab1qFi3+/MZFLrgsDw
tgNSHMAZ3bqEnvZu15D3nHB7cNoSsQHq8vqoRBdhVIBjoy6kM7SnaoIwS1aqP+XQ
amnCpboyPNGF/tjwOR1XkhXA9dE3vwMmnSZQ6oFGYkXzh7jSmIWoX5Bp3HP5m/OW
tBaoxOWXCS5Y9Rf7D/+lWGOvXbZs0wZ7eXntt44N7YqiunMR3kHQSS9ZjrmQfU9d
BkGg/ZBIuo4Aru0yUtTWWo+I85cTjG4LAeJ9ZlVrKTdOp9AunWsEZCvliQIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFHSxxJ356fg11o8NPhGZmSa6dRnjMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzllMmIyMTI1LWQ5MGUtNGE2NS1hZTcwLTcyZWQxM2IyMDE4Yi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL
BAIAATAFAwMBK9wwDQYJKoZIhvcNAQELBQADggEBAKDVy+xwXW991b1m4PtIF3KJ
CNmgNWO1YY4Yj4t1IDb+uNCONdSByS9zzx6PXbEu7A7Hqwn3P0B4t4Vflr2jAQ4y
ddNQr32MTiMNbdoX4jNEgoyAz/GBqAyEEyPeGCg8t18OOHQLSulHm0AfwDRobDy+
r820fOWUkgG3FGcE8UWT8V0HP+67BNKFICPlOeK5W1WVkqnpPG20MFnLmYM2WHQE
j3sUHTicKUI2iRDBJbCNFMRvkd9LlJXuxG6XYe5DK8j77tmVvDzFjO/sdiOY+Y5X
kdoDKr58L1TcPqcQ4FpU7KICy2zhOgQkWNgTiqrLQb5FSGI0YwNnP5V5f7sTSwk=
-----END CERTIFICATE-----
Generated at Thu Apr 17 18:11:48 2025 by rpki-client