Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d4f84930-308c-4801-a06d-2566101f31dd.roa
File: d4f84930-308c-4801-a06d-2566101f31dd.roa (raw, json)
Hash identifier: BFAjBSO1guyo6LlUU3VDaNluVPVs4fWxHt7JucYd/1I=
Subject key identifier: 5F:67:91:05:C7:1D:FC:10:7F:EC:55:8C:9A:55:A8:C5:E6:FD:BD:03
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 3E54AE118A7905A6F39EB8C452A2ECD3EFFD3E9C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d4f84930-308c-4801-a06d-2566101f31dd.roa
Signing time: Sat 14 Dec 2024 00:00:00 +0000
ROA not before: Sat 14 Dec 2024 00:00:00 +0000
ROA not after: Sat 18 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dafb:f000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:54:ae:11:8a:79:05:a6:f3:9e:b8:c4:52:a2:ec:d3:ef:fd:3e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 14 00:00:00 2024 GMT
Not After : Jan 18 23:59:59 2025 GMT
Subject: serialNumber=231cea9f73b7a58c56373ea485f5fe96040eeb98f48c19174fdb19bba932fddc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:f8:ef:fd:1b:fd:02:6b:0d:a4:d8:0f:d3:
1b:f7:2f:df:6a:a0:cc:b0:ef:f6:c6:08:ac:2d:0b:
51:80:79:d9:10:55:0d:f5:42:be:d3:37:f9:65:66:
f9:82:74:0f:3f:d3:47:a2:5f:b3:e3:80:74:13:22:
5d:18:ad:16:be:7a:01:ca:0e:a4:c8:b4:fc:2c:f8:
b5:64:31:85:a1:02:0e:97:86:58:1d:23:6d:c2:a0:
13:66:78:87:a9:32:ff:35:e0:7a:22:69:2a:3d:44:
b9:eb:b0:e3:eb:ca:08:0c:5c:7b:f8:3e:a5:9c:4c:
47:b0:93:1c:82:98:b7:7d:14:b4:1d:c9:88:8f:54:
94:17:b5:29:c8:3b:1e:c4:36:35:62:85:65:5d:25:
53:5c:7f:a0:bc:34:c7:18:5c:d7:16:e3:99:a9:f1:
5f:cb:ea:7b:02:3a:e5:0e:cf:a2:84:ab:5b:e7:3c:
a6:38:00:eb:ae:7f:16:6b:e6:dd:0b:9e:8c:71:07:
15:bd:4a:38:29:71:54:b0:f2:8a:d0:82:f0:f8:fe:
c6:e9:4f:a7:18:d9:c3:1e:63:78:56:6d:bc:5b:54:
f0:ca:92:e9:e2:f1:79:f8:66:4e:b3:4e:dc:63:9d:
86:93:ab:66:db:3d:09:65:11:e3:43:8b:22:e1:8d:
55:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:67:91:05:C7:1D:FC:10:7F:EC:55:8C:9A:55:A8:C5:E6:FD:BD:03
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d4f84930-308c-4801-a06d-2566101f31dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dafb:f000::/40
Signature Algorithm: sha256WithRSAEncryption
b2:01:74:8c:94:38:ec:d6:38:fa:08:93:ea:ed:3b:be:60:04:
ca:4e:a5:e0:ae:af:96:38:36:64:2f:bd:64:83:6d:f4:1a:54:
27:b0:2b:1e:a0:24:65:ad:b6:fa:21:aa:e3:18:ef:fe:2c:b4:
b1:1e:7c:4d:43:6b:3d:5d:e0:cc:a0:0d:83:2b:1b:4f:ab:12:
97:8e:0b:b5:4b:e4:bb:31:14:81:48:08:5e:c1:a9:9c:2c:c4:
25:70:f1:20:43:ed:3c:08:c5:93:da:b7:70:ed:9b:ad:4f:b8:
d3:5e:04:82:05:7a:ac:5c:55:ae:dd:37:4d:ef:64:c7:f9:73:
34:70:f6:0e:b8:0c:8c:21:e3:9f:c8:98:6b:04:b6:f6:73:29:
a3:37:9a:67:ac:58:a9:65:7d:ed:fb:48:7b:4b:df:93:d3:f0:
05:20:82:a2:bf:0d:de:e6:87:bc:a9:ef:73:20:c1:a2:1a:6c:
3c:c6:ef:78:09:d1:ec:27:dd:1a:3b:74:17:f9:e1:3b:00:29:
3c:48:1f:0b:4c:38:8d:23:93:68:7e:e5:c0:04:99:16:78:02:
f9:77:9c:06:79:94:be:bd:4e:60:0d:ef:10:61:fe:31:b1:54:
bb:5a:e2:5a:d8:53:cf:79:99:69:05:d4:97:ee:dd:9d:fb:c1:
64:ef:15:ed
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUPlSuEYp5BabznrjEUqLs0+/9PpwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTIxNDAwMDAwMFoX
DTI1MDExODIzNTk1OVowejFJMEcGA1UEBRNAMjMxY2VhOWY3M2I3YTU4YzU2Mzcz
ZWE0ODVmNWZlOTYwNDBlZWI5OGY0OGMxOTE3NGZkYjE5YmJhOTMyZmRkYzEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraX47/0b/QJrDaTYD9Mb9y/faqDM
sO/2xgisLQtRgHnZEFUN9UK+0zf5ZWb5gnQPP9NHol+z44B0EyJdGK0WvnoByg6k
yLT8LPi1ZDGFoQIOl4ZYHSNtwqATZniHqTL/NeB6ImkqPUS567Dj68oIDFx7+D6l
nExHsJMcgpi3fRS0HcmIj1SUF7UpyDsexDY1YoVlXSVTXH+gvDTHGFzXFuOZqfFf
y+p7AjrlDs+ihKtb5zymOADrrn8Wa+bdC56McQcVvUo4KXFUsPKK0ILw+P7G6U+n
GNnDHmN4Vm28W1TwypLp4vF5+GZOs07cY52Gk6tm2z0JZRHjQ4si4Y1VHwIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFF9nkQXHHfwQf+xVjJpVqMXm/b0DMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2Q0Zjg0OTMwLTMwOGMtNDgwMS1hMDZkLTI1NjYxMDFmMzFkZC5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba+/AwDQYJKoZIhvcNAQELBQADggEBALIBdIyUOOzWOPoIk+rt
O75gBMpOpeCur5Y4NmQvvWSDbfQaVCewKx6gJGWttvohquMY7/4stLEefE1Daz1d
4MygDYMrG0+rEpeOC7VL5LsxFIFICF7BqZwsxCVw8SBD7TwIxZPat3Dtm61PuNNe
BIIFeqxcVa7dN03vZMf5czRw9g64DIwh45/ImGsEtvZzKaM3mmesWKllfe37SHtL
35PT8AUggqK/Dd7mh7yp73MgwaIabDzG73gJ0ewn3Ro7dBf54TsAKTxIHwtMOI0j
k2h+5cAEmRZ4Avl3nAZ5lL69TmAN7xBh/jGxVLta4lrYU895mWkF1Jfu3Z37wWTv
Fe0=
-----END CERTIFICATE-----
Generated at Thu Apr 17 18:04:48 2025 by rpki-client