Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b19098ef-8b50-491d-b122-8a6bbecd29ac.roa
File: b19098ef-8b50-491d-b122-8a6bbecd29ac.roa (raw, json)
Hash identifier: 35GcjjOIgWgrIvR1/VbiC77CbrhultJPjKNq1GuqwNI=
Subject key identifier: 98:3C:3B:79:C0:BE:A3:41:4A:26:E1:66:CD:CA:77:CA:EA:90:D7:11
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 06CB0ABD77A72A2856234B3A2FCE1116E62A6FA3
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b19098ef-8b50-491d-b122-8a6bbecd29ac.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 43.220.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:cb:0a:bd:77:a7:2a:28:56:23:4b:3a:2f:ce:11:16:e6:2a:6f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=f0dac5c9d4a29190d8562b4a1573bc6ca1d1f646ba1452d6c3fba6a06f984efb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:05:12:c2:17:dd:01:01:06:ab:a9:78:3e:
61:93:2e:b4:5d:0d:2f:b3:2e:ad:94:ec:09:99:48:
89:c3:75:32:e0:f2:4a:09:af:5f:6f:ba:cd:eb:54:
7e:6c:de:d9:e4:f0:ca:95:79:81:d9:3e:97:f2:c2:
d9:a1:bf:13:18:19:62:35:bb:81:10:46:4f:2c:42:
87:92:25:e4:b8:3f:9a:ae:b3:78:29:a4:69:e5:77:
74:ad:2a:74:7f:8d:c3:a4:4d:19:80:c1:ae:7e:07:
40:83:f8:a5:dc:e2:77:ce:c0:f1:8a:61:9c:bc:72:
5a:47:4c:eb:b5:42:8d:ed:76:f0:ee:bb:33:b1:70:
8b:0a:35:f1:15:37:a5:1b:60:37:fb:11:6a:ae:cd:
ac:58:24:c3:7e:95:b6:81:01:0f:2e:29:c2:e7:c6:
72:e4:eb:9c:6c:35:9f:ce:ff:2b:2d:32:d5:45:84:
18:a9:71:6c:e4:74:00:bc:04:81:57:d1:1f:88:37:
4d:21:f6:f4:6c:f5:7b:59:c5:03:b4:41:a6:d2:31:
f1:34:22:80:6d:81:66:3f:f7:85:8b:aa:2c:3e:cf:
64:e1:35:8b:97:73:bb:1f:43:8c:d0:c7:6d:c9:3d:
48:36:97:49:c9:cb:0a:d1:2c:b8:2b:45:20:28:5e:
6e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3C:3B:79:C0:BE:A3:41:4A:26:E1:66:CD:CA:77:CA:EA:90:D7:11
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b19098ef-8b50-491d-b122-8a6bbecd29ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.220.0.0/15
Signature Algorithm: sha256WithRSAEncryption
30:3e:ae:ed:0d:d7:62:e1:a6:9e:9e:1c:d1:d5:3b:4c:7e:20:
77:d8:2b:bd:cd:e2:96:ba:a4:3f:5a:67:cc:3a:5f:79:21:be:
80:4a:ba:71:0c:8e:0d:1c:9a:a4:f7:bd:83:87:88:33:24:4d:
fc:f6:77:30:21:8c:4e:65:0f:33:3c:c3:21:34:dd:5b:c1:cf:
4f:9f:e5:30:c9:71:7b:b0:72:1c:dd:f2:ab:f5:91:fb:d9:83:
8b:83:74:3d:9b:39:ab:2c:05:0d:1f:5e:ce:3f:ab:69:8c:5c:
08:15:91:26:24:cb:0e:60:40:35:53:9a:5d:cb:8e:c1:63:ee:
47:39:c7:56:c6:06:7b:80:6e:d6:e9:68:ba:60:a2:87:a8:68:
03:29:a6:96:18:56:9a:f4:30:45:bb:df:c9:c1:d6:a1:94:f7:
df:ff:32:a8:d5:81:3e:7d:92:ca:9b:09:d5:b3:df:0a:1b:4f:
63:03:8a:36:45:44:f9:63:d3:23:21:2b:96:96:c6:76:49:d4:
90:7c:b2:68:b8:6f:ff:fe:cd:5d:d3:21:74:f7:29:27:1d:87:
f1:41:45:24:26:05:a0:66:55:08:85:3f:83:15:c3:3a:19:51:
7e:80:d3:c5:cc:f1:a4:52:e4:7c:26:24:dc:9a:a1:90:55:73:
d1:2f:cb:03
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIUBssKvXenKihWI0s6L84RFuYqb6MwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNjAwMDAwMFoX
DTI1MDIxMDIzNTk1OVowejFJMEcGA1UEBRNAZjBkYWM1YzlkNGEyOTE5MGQ4NTYy
YjRhMTU3M2JjNmNhMWQxZjY0NmJhMTQ1MmQ2YzNmYmE2YTA2Zjk4NGVmYjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuygFEsIX3QEBBqupeD5hky60XQ0v
sy6tlOwJmUiJw3Uy4PJKCa9fb7rN61R+bN7Z5PDKlXmB2T6X8sLZob8TGBliNbuB
EEZPLEKHkiXkuD+arrN4KaRp5Xd0rSp0f43DpE0ZgMGufgdAg/il3OJ3zsDximGc
vHJaR0zrtUKN7Xbw7rszsXCLCjXxFTelG2A3+xFqrs2sWCTDfpW2gQEPLinC58Zy
5OucbDWfzv8rLTLVRYQYqXFs5HQAvASBV9EfiDdNIfb0bPV7WcUDtEGm0jHxNCKA
bYFmP/eFi6osPs9k4TWLl3O7H0OM0MdtyT1INpdJycsK0Sy4K0UgKF5uoQIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFJg8O3nAvqNBSibhZs3Kd8rqkNcRMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2IxOTA5OGVmLThiNTAtNDkxZC1iMTIyLThhNmJiZWNkMjlhYy5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL
BAIAATAFAwMBK9wwDQYJKoZIhvcNAQELBQADggEBADA+ru0N12Lhpp6eHNHVO0x+
IHfYK73N4pa6pD9aZ8w6X3khvoBKunEMjg0cmqT3vYOHiDMkTfz2dzAhjE5lDzM8
wyE03VvBz0+f5TDJcXuwchzd8qv1kfvZg4uDdD2bOassBQ0fXs4/q2mMXAgVkSYk
yw5gQDVTml3LjsFj7kc5x1bGBnuAbtbpaLpgooeoaAMpppYYVpr0MEW738nB1qGU
99//MqjVgT59ksqbCdWz3wobT2MDijZFRPlj0yMhK5aWxnZJ1JB8smi4b//+zV3T
IXT3KScdh/FBRSQmBaBmVQiFP4MVwzoZUX6A08XM8aRS5HwmJNyaoZBVc9EvywM=
-----END CERTIFICATE-----
Generated at Thu Apr 17 17:50:39 2025 by rpki-client