Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c38cd6ef-d936-4881-ae08-1dfd77740a38.roa
File: c38cd6ef-d936-4881-ae08-1dfd77740a38.roa (raw, json)
Hash identifier: khB0nEkAEGTN8gyg1SKbjN3hP2kihVfPFEZvHTpMX6k=
Subject key identifier: CC:C5:65:0D:9C:C7:48:91:C6:E2:C5:B6:0C:A5:95:21:70:67:DD:14
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 58D63E7476F26A31EE7704010DFFDAA548EC9F0C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c38cd6ef-d936-4881-ae08-1dfd77740a38.roa
Signing time: Sat 14 Dec 2024 00:00:00 +0000
ROA not before: Sat 14 Dec 2024 00:00:00 +0000
ROA not after: Sat 18 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da70:4000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:d6:3e:74:76:f2:6a:31:ee:77:04:01:0d:ff:da:a5:48:ec:9f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 14 00:00:00 2024 GMT
Not After : Jan 18 23:59:59 2025 GMT
Subject: serialNumber=eab9d296254740d3f71959a32ff41d3086ef4df27bff339942057678ec4e7975, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:11:c3:22:a6:7d:52:f4:5e:57:47:34:93:71:
16:89:b3:75:79:7e:bd:6f:a7:ee:c4:1b:87:f9:12:
64:00:cc:d9:58:ba:35:a5:13:09:95:4e:a7:f7:0e:
2c:d5:f2:62:7c:a8:33:76:23:ba:0c:09:99:fd:a5:
91:f2:be:b2:54:04:7a:b9:07:4a:68:88:ed:f3:cc:
aa:b2:da:7c:97:84:69:8b:2e:e8:ba:2a:bc:8f:ea:
c8:18:2d:d2:45:d3:b1:25:5d:18:c5:73:fc:d3:35:
3a:dd:4e:c1:8d:3f:ff:25:c7:cb:05:6f:49:4d:4a:
14:37:4c:f8:34:c4:a1:e7:26:69:4e:43:b7:cd:0d:
f0:08:87:d6:9b:c7:9c:7c:cc:7a:8f:ac:22:c3:5b:
e5:c0:07:b9:19:05:1f:6f:67:93:d1:a2:96:11:12:
cf:33:1d:89:14:91:54:0f:83:97:fd:e3:70:2d:2d:
98:96:d1:f5:4c:37:f6:c4:fa:96:f7:44:31:fe:3d:
38:8a:24:a4:63:a8:e9:f2:c8:f3:da:d0:d2:a6:a4:
8e:bd:3c:6d:14:7e:02:92:38:15:5f:63:74:95:d1:
c5:82:c7:f0:05:55:d2:6b:2b:b7:9f:ed:97:0c:b3:
cd:c1:40:f0:15:36:e7:df:9b:e9:0c:d9:ad:bd:90:
da:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C5:65:0D:9C:C7:48:91:C6:E2:C5:B6:0C:A5:95:21:70:67:DD:14
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c38cd6ef-d936-4881-ae08-1dfd77740a38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da70:4000::/40
Signature Algorithm: sha256WithRSAEncryption
29:aa:f6:a3:6c:1c:aa:e0:b8:65:ed:a9:bf:2b:9c:e7:fa:6e:
8d:c3:36:d5:77:82:99:e4:7f:88:d1:dc:97:70:39:c6:c2:d6:
e0:eb:a7:7c:c7:b3:06:17:05:b1:d9:96:88:28:e9:d4:3e:66:
1b:69:26:ad:2e:54:14:f4:80:6f:35:26:ce:65:4e:5e:64:a2:
f9:56:cb:0f:93:0c:e4:af:f9:f9:3f:55:e0:5b:f2:68:97:fb:
12:63:d8:8d:83:89:1c:65:bb:85:dd:9c:d8:80:f6:58:75:3e:
be:7a:a1:e0:79:09:17:97:70:c3:85:e5:f5:6a:b7:14:fd:44:
01:22:78:60:f8:fb:6b:a1:c4:ae:9c:52:72:9b:0d:be:8e:fe:
98:3d:ea:9f:80:57:cb:c8:a4:a6:12:06:30:04:6a:1b:eb:91:
3d:32:53:07:32:53:47:2f:c2:82:ef:52:32:d2:b5:5e:51:1f:
ad:ac:16:59:b7:a4:7e:58:5f:6e:fe:09:3a:cc:d6:6a:be:80:
b1:a6:fe:d9:f9:c8:8d:d4:d2:c2:90:76:e2:ae:56:af:1c:ef:
b5:e7:96:73:11:af:b0:5f:03:8d:27:19:1a:98:6a:ba:1c:76:
0a:8f:e4:2b:ff:6c:d2:69:df:35:20:48:cc:94:0f:be:99:ca:
c3:af:9e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:31:39 2025 by rpki-client