Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9d7c5f5-36de-4340-a315-95bb96771dbe.roa
File: a9d7c5f5-36de-4340-a315-95bb96771dbe.roa (raw, json)
Hash identifier: rPhNVQpOIzolzmfDTKS3FxMi2dOqXjWhNXCzXild9XI=
Subject key identifier: 69:EC:A5:B3:7D:43:1F:1C:97:A6:89:56:27:DA:AD:58:26:83:1E:5A
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 41216C34CC93E9D4B774ED4B76D63824CFEA2AB9
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9d7c5f5-36de-4340-a315-95bb96771dbe.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 27.0.0.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:21:6c:34:cc:93:e9:d4:b7:74:ed:4b:76:d6:38:24:cf:ea:2a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=a2066e10761601558b999a25ac75e16732f234b6992cc683017656aa365034c3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:76:95:b1:be:db:bf:ef:92:01:cb:c4:10:
c8:cd:ae:0e:f1:8e:57:60:f4:86:10:6e:3e:d6:0d:
d6:bf:5c:21:8f:82:2f:25:ed:e1:01:59:1d:3c:55:
13:9a:e4:6e:2b:6f:14:8c:b8:d1:5c:ab:19:8b:e0:
d5:17:83:88:0a:88:38:ee:23:c7:4c:8e:8e:c7:cb:
ce:32:2e:9e:73:4c:a4:1f:4d:8e:9a:26:fb:fe:8e:
41:3c:02:05:08:7c:f4:1a:92:97:2d:26:7b:21:b7:
cc:3b:8c:ff:be:83:08:f4:6c:0e:ec:1b:4a:24:50:
49:09:9c:a9:3e:07:a0:7f:ea:70:49:70:2c:8a:8e:
be:65:ea:3b:f0:e6:d3:1e:c3:62:29:5f:3c:9e:b5:
f1:ca:8c:cc:82:35:f4:ed:aa:ce:32:4d:cf:aa:ed:
39:19:59:4d:6f:d8:4c:52:c4:55:d6:b3:d3:2a:f3:
82:ff:b4:2d:75:03:4e:e6:8b:3c:03:f8:5d:64:2a:
6b:28:d3:a2:69:d7:18:aa:0a:67:91:5b:1c:5c:5c:
89:1a:1c:be:c5:ba:09:b7:0b:a4:8f:ee:2f:3b:52:
cb:37:d1:fc:ea:ca:b2:7d:57:24:70:d2:10:e1:f4:
14:0f:7f:87:6c:40:c9:0d:6e:5a:d9:16:6d:57:b0:
cf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EC:A5:B3:7D:43:1F:1C:97:A6:89:56:27:DA:AD:58:26:83:1E:5A
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9d7c5f5-36de-4340-a315-95bb96771dbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.0.0/22
Signature Algorithm: sha256WithRSAEncryption
58:e0:09:b2:16:3d:cc:df:75:88:e6:99:eb:e9:89:dd:03:63:
fa:b7:3f:48:e5:dd:99:a5:47:be:db:72:65:d1:0e:b2:13:99:
c9:bb:95:b2:6d:a0:0f:77:23:82:14:10:51:52:3b:24:08:70:
c1:8c:03:9a:bf:e7:6d:45:3f:4b:bb:34:a7:24:69:3b:69:67:
b1:67:b1:2a:ba:ae:dd:6e:00:6a:2b:b5:99:3d:5c:c8:68:9d:
31:85:e1:e9:a1:15:89:6e:00:16:50:d5:38:b1:c2:94:f5:99:
d4:89:30:8e:6f:ea:61:0b:7a:e6:2a:31:10:f0:14:32:88:c6:
0a:5a:16:11:d6:40:4f:57:22:c0:35:c2:04:0c:b8:8e:ff:3e:
c3:51:65:9f:33:8b:1b:e4:cc:b3:8b:54:c3:f2:9b:b4:09:46:
f9:a2:c0:59:d3:39:1e:ae:67:68:51:0d:8b:b4:09:0d:9c:02:
4f:be:f7:88:a5:c9:1c:cd:ff:6d:7e:4e:75:60:9b:1e:83:60:
f4:96:9c:32:93:f3:cd:b8:c3:eb:d2:ac:ed:81:c3:1d:45:db:
e7:e3:2a:84:26:30:28:17:2d:03:37:e0:64:7c:96:73:98:ee:
5e:71:b1:0a:b5:b0:63:d3:c4:95:70:6d:05:8b:1e:13:8a:c6:
d6:ec:7a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:04:50 2025 by rpki-client