Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c671666b-e400-4754-9776-096e38b7857c.roa
File: c671666b-e400-4754-9776-096e38b7857c.roa (raw, json)
Hash identifier: +L6tJvrYDrTmeQnXFiyfYYUVGfUMvhkrQqxzY6OI3d0=
Subject key identifier: CE:31:2F:5E:03:80:F1:F7:1C:B5:D3:78:FA:27:5D:DD:E4:F6:B4:BA
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5E48FFD1B4EE0EAABE892C76A643FADD2EBD3A10
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c671666b-e400-4754-9776-096e38b7857c.roa
Signing time: Sat 14 Dec 2024 00:00:00 +0000
ROA not before: Sat 14 Dec 2024 00:00:00 +0000
ROA not after: Sat 18 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf2:6000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:48:ff:d1:b4:ee:0e:aa:be:89:2c:76:a6:43:fa:dd:2e:bd:3a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 14 00:00:00 2024 GMT
Not After : Jan 18 23:59:59 2025 GMT
Subject: serialNumber=57c85c3848dfc978b14b0f18b6d097f8c219c0cf3b9c65399b10fc2a875457bc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:a3:d2:d7:9a:9a:0a:a1:ac:f2:1b:53:4a:49:
c0:a3:29:ec:28:6c:8b:2d:1e:57:38:6c:67:27:12:
f9:75:d7:b7:a6:72:cb:97:8e:d4:29:90:8f:6d:72:
ce:15:4f:dd:c7:f9:64:31:66:e9:5c:0e:6e:e4:be:
74:1d:4f:f8:10:c9:2e:54:c5:e8:4a:aa:cf:e9:56:
f8:09:90:60:86:3c:88:b7:36:f0:36:c0:54:dd:5c:
1e:c9:cf:6d:d8:1c:9e:95:a3:2d:98:d9:3d:10:dc:
96:d1:ef:26:42:04:72:80:dc:88:5e:44:a8:37:1d:
bc:0f:4c:e6:e3:c2:d6:5f:37:41:73:d8:ce:7a:e7:
c7:4d:24:3d:dc:5c:73:17:6a:18:05:44:fd:b3:9f:
1f:e4:f1:3b:e3:7f:8d:d7:25:5c:4e:70:43:87:44:
b1:92:6e:a2:16:46:a7:eb:4b:44:3e:17:fc:26:df:
a8:92:c8:86:db:c9:1a:37:ef:59:a4:b2:d7:39:f9:
b6:43:3f:1a:b5:05:34:6f:82:bc:34:4f:40:48:b4:
a6:71:da:f8:2a:4f:4e:ca:3c:76:6d:0d:e5:b9:c4:
e7:6c:ba:2a:2b:0b:e2:62:ed:81:50:ac:6a:0e:80:
24:34:fd:91:72:af:4e:a0:be:78:b4:2b:93:3b:1b:
b1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:31:2F:5E:03:80:F1:F7:1C:B5:D3:78:FA:27:5D:DD:E4:F6:B4:BA
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c671666b-e400-4754-9776-096e38b7857c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf2:6000::/40
Signature Algorithm: sha256WithRSAEncryption
c9:ac:e3:3a:8c:a5:a8:21:08:12:7d:9b:04:25:23:c1:6f:62:
74:0d:36:7e:9d:a7:17:6b:3e:55:0d:17:ab:c3:f9:b0:60:c2:
5c:42:26:08:46:1c:ed:7c:d5:79:b5:44:e8:36:b7:22:3c:d1:
4e:4c:33:7f:f3:ed:86:92:44:3f:a6:7f:df:94:70:76:72:bd:
78:f1:da:86:bd:ee:03:84:2b:66:d2:8e:30:72:ef:7a:db:dc:
11:c1:a3:ab:4c:39:7e:12:dc:8e:6a:a0:2b:ca:8a:6b:d2:5b:
26:f3:a3:94:3e:cb:b3:08:7c:3e:21:6e:c9:66:f5:7b:c5:ec:
0b:4c:0d:4f:1d:f6:a1:fc:ae:c1:ca:1f:01:82:cd:d2:04:c1:
63:dd:39:7e:d3:78:f8:03:b0:e8:9a:6b:22:8d:30:bb:b9:51:
cc:5f:05:d0:6f:6d:cb:b6:66:a7:59:82:a5:22:87:93:b1:c3:
de:37:c2:88:2c:03:44:cf:e5:ff:c0:79:76:01:8a:08:f3:fb:
c2:6e:45:28:7f:fc:1b:a4:c7:33:79:32:14:bc:61:ef:36:50:
0c:e7:f7:48:a3:35:f6:a5:5a:f5:1b:8f:4b:bf:72:48:63:78:
67:e4:e4:a7:3c:6d:1f:09:e8:59:c1:2e:9f:fc:24:74:58:13:
30:d0:ff:e2
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUXkj/0bTuDqq+iSx2pkP63S69OhAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTIxNDAwMDAwMFoX
DTI1MDExODIzNTk1OVowejFJMEcGA1UEBRNANTdjODVjMzg0OGRmYzk3OGIxNGIw
ZjE4YjZkMDk3ZjhjMjE5YzBjZjNiOWM2NTM5OWIxMGZjMmE4NzU0NTdiYzEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+KPS15qaCqGs8htTSknAoynsKGyL
LR5XOGxnJxL5dde3pnLLl47UKZCPbXLOFU/dx/lkMWbpXA5u5L50HU/4EMkuVMXo
SqrP6Vb4CZBghjyItzbwNsBU3Vweyc9t2ByelaMtmNk9ENyW0e8mQgRygNyIXkSo
Nx28D0zm48LWXzdBc9jOeufHTSQ93FxzF2oYBUT9s58f5PE743+N1yVcTnBDh0Sx
km6iFkan60tEPhf8Jt+oksiG28kaN+9ZpLLXOfm2Qz8atQU0b4K8NE9ASLSmcdr4
Kk9Oyjx2bQ3lucTnbLoqKwviYu2BUKxqDoAkNP2Rcq9OoL54tCuTOxuxLQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFM4xL14DgPH3HLXTePonXd3k9rS6MB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2M2NzE2NjZiLWU0MDAtNDc1NC05Nzc2LTA5NmUzOGI3ODU3Yy5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba8mAwDQYJKoZIhvcNAQELBQADggEBAMms4zqMpaghCBJ9mwQl
I8FvYnQNNn6dpxdrPlUNF6vD+bBgwlxCJghGHO181Xm1ROg2tyI80U5MM3/z7YaS
RD+mf9+UcHZyvXjx2oa97gOEK2bSjjBy73rb3BHBo6tMOX4S3I5qoCvKimvSWybz
o5Q+y7MIfD4hbslm9XvF7AtMDU8d9qH8rsHKHwGCzdIEwWPdOX7TePgDsOiaayKN
MLu5UcxfBdBvbcu2ZqdZgqUih5Oxw943wogsA0TP5f/AeXYBigjz+8JuRSh//Buk
xzN5MhS8Ye82UAzn90ijNfalWvUbj0u/ckhjeGfk5Kc8bR8J6FnBLp/8JHRYEzDQ
/+I=
-----END CERTIFICATE-----
Generated at Thu Apr 17 17:46:01 2025 by rpki-client