Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a4218017-250b-4598-a604-a26ab46f6047.roa
File: a4218017-250b-4598-a604-a26ab46f6047.roa (raw, json)
Hash identifier: VHKxrcjMEqDuHiuH9+Fbkfvz3gXwZov62H9pS9OpjUc=
Subject key identifier: A5:6A:DE:84:45:4E:30:EA:00:83:31:F4:F8:2E:0D:E2:E3:0C:B4:B1
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 09CF2A70BEE1EE23046565DD3D898BC9F7F9A915
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a4218017-250b-4598-a604-a26ab46f6047.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da36:a000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:cf:2a:70:be:e1:ee:23:04:65:65:dd:3d:89:8b:c9:f7:f9:a9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: serialNumber=c744066c70080eef14be3e5404795aa505252ebe4c9e4cd75cf763c034267033, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e5:6a:10:40:ff:38:4e:05:8a:ec:f2:31:fc:
62:af:f3:8e:fe:dc:e3:bb:ed:c9:0f:c0:dd:93:c2:
8a:83:ee:1a:8f:6b:48:20:3c:dc:94:0c:e1:f6:28:
c2:b6:1c:a8:ab:35:f9:45:d2:4f:a9:0e:14:1b:c1:
b5:fa:42:2e:4b:42:3c:92:0d:58:a3:9e:06:48:88:
c1:3d:b5:53:cf:c1:54:dd:65:b4:0f:2e:72:74:a6:
01:29:d5:98:35:b5:b9:58:7f:e3:57:ba:eb:83:80:
40:e2:97:1a:8d:46:e1:4c:2f:44:9b:10:36:b3:4a:
3a:fd:11:ce:87:e8:7c:1e:39:9e:09:95:ad:22:17:
0b:bb:0e:68:81:74:0b:07:48:8d:9f:a9:98:67:2e:
22:4c:44:fd:65:14:49:11:a1:8e:ac:5c:cd:25:13:
16:20:19:60:77:ef:2d:81:a6:77:e8:61:03:d4:18:
f2:3b:b1:40:d5:72:87:83:ec:33:1d:b1:d3:3f:37:
f3:95:64:8e:87:4e:4a:f6:7f:ba:00:d0:0b:26:1a:
43:41:f6:6d:ec:ce:0a:41:30:7c:7d:b3:33:d0:b1:
3e:10:6d:57:32:3c:e6:72:b2:26:d3:25:0c:48:e0:
e6:3b:08:9f:a4:7c:ae:10:a7:d1:ae:0a:da:0e:aa:
af:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6A:DE:84:45:4E:30:EA:00:83:31:F4:F8:2E:0D:E2:E3:0C:B4:B1
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a4218017-250b-4598-a604-a26ab46f6047.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da36:a000::/40
Signature Algorithm: sha256WithRSAEncryption
95:bd:a7:3e:e2:a8:c0:d0:e7:bd:e4:d9:60:e2:7c:5b:96:2e:
77:de:6a:33:95:b1:99:6c:97:35:5f:0a:a6:0c:2b:49:c4:9b:
11:61:54:89:6a:2c:ea:8c:5a:d2:b1:ba:ce:e6:3c:d3:cb:bc:
9e:e7:fd:26:a9:b6:41:3c:f0:16:92:56:2b:89:39:83:2a:18:
94:7f:ea:e8:09:40:59:44:ef:fc:94:db:4d:ca:f6:8b:4a:a9:
1b:2a:13:79:62:8a:43:e8:e7:3d:06:4a:27:9d:18:04:e2:2b:
8f:8a:f0:1e:5b:a5:1d:65:8a:65:4f:b6:3a:fb:bd:fa:7c:1e:
51:c0:57:c5:5f:b3:c6:6d:ed:fc:af:51:28:2a:ba:75:25:13:
9f:38:e7:7d:ce:ed:a9:f1:a0:c2:eb:e1:ae:12:54:0a:31:00:
04:cf:de:83:ad:56:83:a6:65:0e:4c:fe:dd:c0:22:99:be:43:
b1:59:aa:54:54:79:8a:f3:32:b8:b6:88:7b:73:b1:65:71:1c:
12:e1:18:1f:f2:77:31:93:80:9b:ce:be:50:da:fb:9d:25:26:
d9:37:89:ee:4c:56:c5:d6:bb:5c:e1:74:6f:36:69:fb:f8:62:
c6:f9:e5:21:a8:fc:58:11:ec:fc:a7:eb:d9:6d:a1:22:d4:37:
da:ef:4e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:11:51 2025 by rpki-client