Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cfe3a555-0f98-4f6b-b088-c1fcdf199c26.roa
File: cfe3a555-0f98-4f6b-b088-c1fcdf199c26.roa (raw, json)
Hash identifier: XOPvEaSUGhDuzjavQov5WL/byOZCSgeXrXex0rWZNgY=
Subject key identifier: A9:15:D3:32:6A:4C:E2:FB:A9:39:00:12:4E:C1:AD:A0:48:37:75:B0
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 0AA9E4AD74A7BA9ECF5A90145A96DE9B1E738F40
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cfe3a555-0f98-4f6b-b088-c1fcdf199c26.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da30:1000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:a9:e4:ad:74:a7:ba:9e:cf:5a:90:14:5a:96:de:9b:1e:73:8f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=1c09762de0f20709a555d1e3eafdce44a48b947c321dd8885b60c21d29ffb309, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:48:94:4c:5b:b3:48:e4:da:f7:62:0f:56:
d0:32:df:ee:2f:32:27:4c:00:5f:b8:80:9e:da:27:
2a:5a:8d:34:41:da:47:a0:39:d1:84:f7:e9:64:6a:
49:6c:a1:97:09:6d:f1:b6:ba:3f:72:ca:d0:8c:0e:
07:b8:b9:fd:87:60:6f:48:0a:8c:db:77:4c:16:94:
c7:22:d2:f3:e9:54:28:86:d5:43:f1:0f:c3:12:25:
f1:f1:0a:54:2c:85:5a:01:71:a8:71:22:62:08:ca:
db:c8:98:58:06:3e:45:77:47:68:24:67:6f:b9:0a:
98:9b:d7:a4:19:50:3c:2e:a6:d4:33:ef:10:05:5c:
c4:b5:41:a6:8f:fe:ac:32:e3:da:41:1d:d4:47:00:
05:b4:ad:71:0d:af:e4:d3:c4:cd:d4:35:fb:24:91:
a4:62:9a:1d:b1:0e:d9:49:f9:29:15:58:8e:f8:65:
01:7f:99:da:cb:71:df:b1:22:40:3f:92:7c:c3:18:
82:30:2c:ca:74:67:a5:a9:ec:2c:27:d6:fb:8a:6d:
72:f5:85:2a:a2:23:f9:4b:52:9b:17:72:45:51:6b:
aa:4b:4f:1b:9a:5a:fe:4b:e4:89:48:42:00:25:89:
a0:ed:9c:b5:ad:02:d5:07:cd:a6:2c:23:c2:fe:16:
ea:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:15:D3:32:6A:4C:E2:FB:A9:39:00:12:4E:C1:AD:A0:48:37:75:B0
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cfe3a555-0f98-4f6b-b088-c1fcdf199c26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da30:1000::/40
Signature Algorithm: sha256WithRSAEncryption
46:74:8b:9b:92:23:c1:c5:30:ad:4e:d5:bf:95:cd:19:47:d7:
ff:63:36:57:ee:62:23:f5:1c:86:5e:cb:56:ae:08:b3:78:e6:
d1:83:2f:32:19:5f:04:45:a8:fd:76:0b:c2:48:7b:56:2c:e4:
50:e4:e5:ae:01:bf:2f:16:ae:90:40:28:1c:7c:26:55:9b:1e:
db:e2:60:10:50:22:24:0b:52:20:56:ce:70:32:f4:6a:9d:f7:
79:8b:93:b1:f0:da:99:4c:3f:1d:22:ff:e5:69:64:8e:ce:54:
03:32:f5:06:ae:54:84:b9:53:a0:6e:1f:d3:20:f2:8a:1d:f5:
0c:a6:0d:49:07:b2:20:a5:c8:ee:1a:46:d6:b4:1c:4c:41:cd:
9f:46:44:bc:61:2f:3e:5b:11:bd:5c:83:c9:01:34:40:0c:8d:
e0:ff:93:c2:b4:4b:17:e5:42:a5:97:51:1d:35:ae:80:5d:6b:
e2:5f:52:ac:58:c6:36:9a:b4:6e:e7:40:17:bd:e3:bf:77:8d:
63:be:34:d8:4d:bd:6e:5e:8e:0e:be:8e:97:22:c1:72:d4:a1:
59:39:dc:24:25:79:c2:95:44:e6:32:3c:ad:ed:b1:a8:34:2f:
16:0a:a2:31:ce:33:7d:6e:b7:d5:de:a9:fb:b4:f4:15:e1:3e:
66:dc:4d:0f
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUCqnkrXSnup7PWpAUWpbemx5zj0AwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwODAwMDAwMFoX
DTI1MDIxMjIzNTk1OVowejFJMEcGA1UEBRNAMWMwOTc2MmRlMGYyMDcwOWE1NTVk
MWUzZWFmZGNlNDRhNDhiOTQ3YzMyMWRkODg4NWI2MGMyMWQyOWZmYjMwOTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr9IlExbs0jk2vdiD1bQMt/uLzIn
TABfuICe2icqWo00QdpHoDnRhPfpZGpJbKGXCW3xtro/csrQjA4HuLn9h2BvSAqM
23dMFpTHItLz6VQohtVD8Q/DEiXx8QpULIVaAXGocSJiCMrbyJhYBj5Fd0doJGdv
uQqYm9ekGVA8LqbUM+8QBVzEtUGmj/6sMuPaQR3URwAFtK1xDa/k08TN1DX7JJGk
YpodsQ7ZSfkpFViO+GUBf5nay3HfsSJAP5J8wxiCMCzKdGelqewsJ9b7im1y9YUq
oiP5S1KbF3JFUWuqS08bmlr+S+SJSEIAJYmg7Zy1rQLVB82mLCPC/hbq8QIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFKkV0zJqTOL7qTkAEk7BraBIN3WwMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2NmZTNhNTU1LTBmOTgtNGY2Yi1iMDg4LWMxZmNkZjE5OWMyNi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAbaMBAwDQYJKoZIhvcNAQELBQADggEBAEZ0i5uSI8HFMK1O1b+V
zRlH1/9jNlfuYiP1HIZey1auCLN45tGDLzIZXwRFqP12C8JIe1Ys5FDk5a4Bvy8W
rpBAKBx8JlWbHtviYBBQIiQLUiBWznAy9Gqd93mLk7Hw2plMPx0i/+VpZI7OVAMy
9QauVIS5U6BuH9Mg8ood9QymDUkHsiClyO4aRta0HExBzZ9GRLxhLz5bEb1cg8kB
NEAMjeD/k8K0SxflQqWXUR01roBda+JfUqxYxjaatG7nQBe94793jWO+NNhNvW5e
jg6+jpciwXLUoVk53CQlecKVROYyPK3tsag0LxYKojHOM31ut9Xeqfu09BXhPmbc
TQ8=
-----END CERTIFICATE-----
Generated at Thu Apr 17 17:55:36 2025 by rpki-client