Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7239ede-2b75-4873-aa82-3442aa3410a9.roa
File: b7239ede-2b75-4873-aa82-3442aa3410a9.roa (raw, json)
Hash identifier: w7HDLlraifQiBafs2WZAVqjymATXnW73l82mO8ZMPXI=
Subject key identifier: A2:AE:22:7F:FA:32:F9:16:EB:FA:3E:B2:E1:EC:1E:CE:B7:D1:57:2B
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 620B0E505FEA8CEF019F0B17A5C954676D8F8E59
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7239ede-2b75-4873-aa82-3442aa3410a9.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da60:90c0::/46 maxlen: 46
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:0b:0e:50:5f:ea:8c:ef:01:9f:0b:17:a5:c9:54:67:6d:8f:8e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=bd6ade54514b3aa5fd3a5e0d7f946d024f8bd33d6f4f795f5b1691cc98df6835, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:72:87:27:82:a1:18:d8:f4:23:2d:ff:c9:11:
be:3b:77:2d:d2:75:86:ab:dc:6b:4b:b7:de:e0:63:
ae:6f:90:f3:2b:3a:4e:be:a4:1c:aa:54:42:f2:9d:
ac:50:58:02:36:63:4a:aa:0c:d2:a3:9a:e1:b5:4d:
ca:26:b5:84:8f:15:ca:b6:e9:f2:14:d2:6e:f5:74:
50:b3:9a:49:3d:ae:42:43:55:0c:b6:9f:44:da:c9:
ac:46:c7:b4:18:ab:3d:87:c0:2d:69:df:92:2b:91:
00:66:ac:4d:1f:fd:86:5f:6d:57:16:91:19:a8:76:
5b:24:82:d8:33:2a:ee:53:ec:da:17:65:ba:b0:d0:
71:c8:7d:85:07:38:70:04:e2:59:d5:ab:4f:9f:a7:
ca:27:b4:58:41:36:dd:3d:33:e5:43:6e:b8:91:4a:
30:c3:38:5c:b0:7b:36:25:d7:2b:39:a3:9c:ad:5f:
30:eb:7c:1c:4b:a0:36:1a:eb:a7:68:7d:d5:a5:28:
4f:71:11:c0:40:00:2d:b3:82:77:8a:a0:c6:35:b2:
c0:cd:76:aa:5d:b0:59:28:d7:d8:1f:8e:18:14:e6:
b7:6e:21:d5:26:58:59:78:6f:c1:84:c8:b1:0a:33:
6b:34:b0:2a:06:3b:3e:e6:c2:f6:19:ed:06:84:fb:
66:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AE:22:7F:FA:32:F9:16:EB:FA:3E:B2:E1:EC:1E:CE:B7:D1:57:2B
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7239ede-2b75-4873-aa82-3442aa3410a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da60:90c0::/46
Signature Algorithm: sha256WithRSAEncryption
62:c5:29:9d:5b:75:d2:ee:c0:cc:c3:0a:6d:e5:f0:09:a1:4e:
fe:3c:92:30:97:00:bf:6e:9e:d8:1c:51:f7:92:60:5d:1a:d4:
d2:d4:36:51:11:71:d8:ce:22:0e:3f:f1:7f:37:69:de:aa:6f:
c5:c2:8f:ca:34:9a:06:92:47:c2:2e:70:26:56:a4:12:9d:04:
0d:ac:7c:87:a0:70:b0:16:e7:57:90:cd:8b:b1:c5:0c:5f:86:
f2:1f:d4:11:13:47:76:f2:97:70:2f:89:b0:e6:99:7c:7c:ea:
00:06:fa:eb:e4:e8:12:a7:f9:7d:21:2c:b7:0b:b2:e4:5e:c8:
d6:df:2c:7c:c4:26:67:04:a6:d2:f1:4c:51:43:79:a2:93:d5:
1c:27:30:c5:08:45:72:aa:e1:03:e5:9b:47:46:9c:43:b4:e3:
6a:77:ff:2d:ac:4a:00:f8:11:b4:33:8a:7b:e9:7c:fd:2f:ad:
ed:10:69:3f:80:ca:3c:11:5a:e7:68:57:e9:cf:8f:f0:91:12:
02:8d:4d:60:c6:aa:d9:30:30:8b:d8:1a:80:9f:72:5c:9d:27:
f1:b4:5d:e3:36:b4:10:04:42:21:3a:fa:d2:1f:79:a5:d8:19:
66:c0:79:10:73:69:f4:76:7f:6b:69:93:29:c8:6e:18:55:26:
d1:ab:79:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:16:35 2025 by rpki-client