Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b63666b7-cc9f-4e5f-956b-3488abc9c500.roa
File: b63666b7-cc9f-4e5f-956b-3488abc9c500.roa (raw, json)
Hash identifier: 5yw8eLtVG4GDBkUbLMi+33Zz/N76fsCokA9o7bOCWj4=
Subject key identifier: 15:F1:10:0F:F2:0C:2A:94:AC:9D:A0:F5:C6:E9:98:65:7D:D4:64:BE
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 65A97EC54D3B33D976964BF2E74B3668E05E3C23
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b63666b7-cc9f-4e5f-956b-3488abc9c500.roa
Signing time: Tue 31 Dec 2024 00:00:00 +0000
ROA not before: Tue 31 Dec 2024 00:00:00 +0000
ROA not after: Tue 04 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da32:f000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:a9:7e:c5:4d:3b:33:d9:76:96:4b:f2:e7:4b:36:68:e0:5e:3c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 31 00:00:00 2024 GMT
Not After : Feb 4 23:59:59 2025 GMT
Subject: serialNumber=8f81059bc100a632b4fee1cb25c150f93019b6ed10c9c2131b2a3cc68d50b640, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:89:7d:77:08:16:f2:18:6c:84:bd:c2:1a:
e5:fc:31:09:dd:d7:5c:34:37:15:a5:4f:41:e5:14:
2f:76:1d:46:76:8d:20:3b:2b:c8:51:40:26:27:e1:
b2:e0:79:04:9f:03:e9:2d:e4:76:c5:1f:d4:a0:c2:
a2:ec:df:d0:1f:ee:ee:ce:b1:22:6d:f6:41:2e:5c:
63:ef:4d:03:b1:c1:89:02:94:a7:9a:69:94:8e:5a:
ce:50:d3:5a:13:f1:6e:cb:ab:ec:57:f6:9f:02:ec:
bc:a0:e4:5c:6e:10:fd:e7:b5:fb:4b:3f:1e:b0:a4:
8e:69:bd:4e:24:b8:83:04:4f:b5:01:9e:3d:bf:e5:
d7:ae:21:c6:a9:bc:0b:67:44:cb:aa:12:86:69:3f:
27:d9:28:ad:cd:38:2c:2e:9a:71:03:e2:96:fe:1d:
3a:25:1a:6c:a4:f6:67:ff:e2:c0:8d:22:2a:de:ac:
f0:c2:7e:6b:02:67:74:37:fe:f2:23:37:34:44:5b:
9d:47:4e:15:ae:46:7a:48:4c:04:af:d8:44:77:9c:
5c:9a:36:25:1a:7f:61:57:45:82:52:06:ef:16:fe:
a8:64:d3:01:ea:bf:c5:5a:9e:f8:fc:4f:4a:b4:3c:
e6:36:b9:2f:9b:59:80:ff:a4:7b:c4:ac:6c:57:27:
5d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F1:10:0F:F2:0C:2A:94:AC:9D:A0:F5:C6:E9:98:65:7D:D4:64:BE
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b63666b7-cc9f-4e5f-956b-3488abc9c500.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da32:f000::/40
Signature Algorithm: sha256WithRSAEncryption
a8:79:a3:3c:4f:bd:ea:30:b9:05:a4:53:3a:c4:d0:92:50:00:
d8:c2:69:79:c7:4e:8b:56:7b:b1:83:82:6d:ec:2e:66:30:bf:
36:f5:6a:86:a0:9a:0f:69:50:6d:0c:1e:2f:8b:cc:ac:32:78:
ac:ab:5d:11:b8:db:8b:4d:8b:c7:99:b1:d3:1a:b1:5e:44:dc:
2f:b1:6e:f2:1a:2d:1f:78:e6:cc:df:17:d9:71:1d:af:d1:23:
aa:03:46:46:9b:b2:e4:c4:e7:1c:20:2a:37:d9:39:1c:05:5e:
5c:52:ae:d0:c6:f8:6e:91:bd:66:9c:a0:50:28:2b:eb:f5:19:
76:6e:9f:f7:36:8a:a8:80:bf:47:f5:81:8b:5f:18:71:b7:0e:
2a:d6:31:82:3f:94:41:71:ac:0d:12:36:ab:08:c0:61:5f:04:
9e:71:ac:17:b9:92:e9:a4:4c:11:39:1e:4d:e1:de:f0:66:3f:
56:96:8e:43:43:91:79:ee:16:1a:f0:ed:6c:09:82:37:e4:2e:
5c:06:86:14:fe:96:3c:68:bf:54:5a:f9:33:8c:3d:64:de:d0:
3a:b5:28:c1:b3:14:50:07:61:b0:6c:f2:9c:42:54:fe:c3:9f:
c4:a8:40:19:6f:fa:31:07:bc:f2:73:a0:7a:24:8a:84:f8:09:
bd:ad:3c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:55:34 2025 by rpki-client