Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b85f489e-343d-41f3-bec5-5d34db511649.roa
File: b85f489e-343d-41f3-bec5-5d34db511649.roa (raw, json)
Hash identifier: 3k77lswkiXtYuoK4P4OogBTMIOsuWN5/z2rz6OI87CI=
Subject key identifier: FA:64:9D:4D:4C:BB:C4:40:D3:BB:DB:06:4B:89:7A:FB:DB:3F:9A:8A
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 57DEE9BE3CCB4D1DE0DA1213994D13B361A01C63
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b85f489e-343d-41f3-bec5-5d34db511649.roa
Signing time: Sat 14 Dec 2024 00:00:00 +0000
ROA not before: Sat 14 Dec 2024 00:00:00 +0000
ROA not after: Sat 18 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf0:2000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:de:e9:be:3c:cb:4d:1d:e0:da:12:13:99:4d:13:b3:61:a0:1c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 14 00:00:00 2024 GMT
Not After : Jan 18 23:59:59 2025 GMT
Subject: serialNumber=1fef921f274e1acade6f7138b7bc277005d95aefbd492e4b30be75e8f3bd8eaf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:56:0e:c1:9f:fc:85:70:63:88:5d:19:a4:b9:
55:e1:d4:b0:0b:86:c2:03:55:87:89:41:57:5c:df:
21:c8:70:b4:09:8f:51:36:db:3e:4d:47:5a:8f:83:
df:ac:4c:98:f1:d4:5e:42:21:70:9d:ff:9c:34:9e:
85:52:65:98:d7:1e:9a:0f:fb:d0:12:86:ca:71:80:
77:02:17:55:91:66:57:ad:e4:89:b0:8e:dd:7d:2c:
cd:b2:c2:7f:a2:b2:f4:89:8e:d7:94:a4:c1:b2:d9:
79:89:bf:bc:3f:1a:63:ef:14:cd:50:93:8b:f0:2e:
d0:ca:22:79:f7:bd:52:8e:5d:b6:a5:54:78:6f:a4:
42:b3:c8:76:a5:c3:c4:6b:7c:89:bd:41:35:d0:33:
81:13:0e:bf:9a:47:64:46:a3:9f:94:af:b3:cd:17:
d9:8c:bc:cd:67:b8:37:e2:dd:8e:a1:39:69:ee:c5:
f7:5e:aa:26:05:13:5b:e7:5b:51:7a:2b:b0:bb:23:
e6:bf:8b:78:4e:26:b2:d8:f6:63:f7:ba:bd:3e:cf:
d4:0f:6d:63:ec:c2:17:62:90:ea:15:61:93:c2:7c:
50:53:30:ad:e1:80:50:1e:a9:f2:58:95:11:14:1b:
9d:86:3a:2b:7b:a7:63:ed:93:6e:55:4e:d8:68:66:
c8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:64:9D:4D:4C:BB:C4:40:D3:BB:DB:06:4B:89:7A:FB:DB:3F:9A:8A
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b85f489e-343d-41f3-bec5-5d34db511649.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf0:2000::/40
Signature Algorithm: sha256WithRSAEncryption
a1:ac:2f:41:be:d2:9c:92:9e:1e:50:f4:8b:6f:d9:5f:1d:b1:
ba:7f:24:b1:83:43:35:9d:18:70:bd:bc:23:60:2b:3c:1e:15:
8a:56:ba:2d:9d:9c:15:f1:9f:6f:ba:00:a5:8e:f6:be:24:79:
73:7b:ce:0e:4f:dd:fc:31:24:85:b3:cc:ef:6a:a3:07:5d:63:
5d:86:8b:cc:e0:a6:66:e0:a7:67:ad:38:3f:17:14:39:38:d6:
32:2c:3c:35:ab:6c:1f:38:7c:19:7c:01:84:91:04:df:91:a8:
2c:a1:e6:22:fd:8b:af:78:9b:cb:12:8a:c4:4e:45:14:24:1a:
95:1b:9e:3d:07:84:8b:9e:b5:11:4d:32:f5:43:fa:96:11:df:
47:68:34:13:3a:08:66:8f:e7:5e:da:b1:9a:2d:e5:0f:48:e7:
80:6a:5c:ca:d4:64:06:97:42:ed:76:33:ed:93:ad:d3:5c:22:
4f:8e:23:c1:00:dc:83:f9:38:a4:40:03:f7:34:9a:a0:80:f2:
9b:7a:0c:01:4f:2d:59:ea:1e:c0:88:47:37:ef:cc:8a:f6:82:
13:f0:b3:56:b2:58:bb:6b:b3:4b:0d:2d:cb:88:fb:c5:f3:7b:
50:19:79:da:f0:e6:a7:fe:03:43:d4:bd:e3:e7:d0:75:63:65:
69:99:0e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:55:36 2025 by rpki-client