Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f9bb6778-8bdb-45ac-b6df-27458ed8b836.roa
File: f9bb6778-8bdb-45ac-b6df-27458ed8b836.roa (raw, json)
Hash identifier: cy9c625R70w30HbD6k3aAsP8rgl+2Fzcw8LMgtd+3tg=
Subject key identifier: 2F:34:32:F4:B5:AF:7D:0B:21:75:11:EC:7D:71:34:A1:C3:40:85:E4
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 2014D93E6F897CBAB379C61F6F4CA596836E1E40
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f9bb6778-8bdb-45ac-b6df-27458ed8b836.roa
Signing time: Sat 14 Dec 2024 00:00:00 +0000
ROA not before: Sat 14 Dec 2024 00:00:00 +0000
ROA not after: Sat 18 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da60:9000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:14:d9:3e:6f:89:7c:ba:b3:79:c6:1f:6f:4c:a5:96:83:6e:1e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 14 00:00:00 2024 GMT
Not After : Jan 18 23:59:59 2025 GMT
Subject: serialNumber=e3c644b339b87f0197765694796876608fce21eae03f0b065e3c8b6d07cd3074, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:67:a3:ef:f2:2d:6d:f5:0c:3c:89:a3:e7:
3d:79:64:bd:92:9e:0d:3c:d8:cb:d3:d8:3a:a8:db:
61:71:a0:93:fb:0d:ed:c6:9a:20:9e:50:a5:4b:91:
63:c6:f9:c0:0f:e5:0a:7c:d8:f3:a3:5b:a6:21:8d:
e3:6b:31:06:19:13:a4:f5:3e:de:14:8d:41:04:0b:
d9:82:db:d9:f9:d2:f8:4d:82:5d:1d:18:2d:a9:d8:
cf:b4:78:45:cb:06:39:eb:46:72:37:c1:3f:74:82:
e5:f5:ad:2c:8a:a2:6e:f4:c0:a8:70:da:ff:b5:3e:
26:8a:ab:2c:ad:45:f8:0c:75:97:de:cd:99:d3:9a:
12:c4:d2:f3:4b:56:f8:48:04:cd:40:e3:cd:07:a4:
44:19:e2:83:8a:6f:84:12:52:2c:76:c2:38:96:b5:
0d:96:5b:cd:85:d8:20:9d:0e:dd:f1:89:7a:c2:fe:
3b:65:de:68:06:03:dc:24:c6:c4:24:34:36:d1:fe:
4f:95:bc:ee:92:da:af:7d:ae:06:08:fb:4e:c2:2d:
3b:0a:a3:ea:7b:c1:cb:22:e5:4d:eb:20:95:5b:19:
7c:cb:02:7c:64:c5:99:3b:73:8e:73:0d:71:31:e4:
ad:fa:5a:0c:07:9e:12:d4:87:7f:39:03:43:08:6e:
ac:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:34:32:F4:B5:AF:7D:0B:21:75:11:EC:7D:71:34:A1:C3:40:85:E4
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f9bb6778-8bdb-45ac-b6df-27458ed8b836.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da60:9000::/40
Signature Algorithm: sha256WithRSAEncryption
21:7c:53:3d:4f:21:53:fb:2f:d1:2a:6d:c4:01:00:f4:42:28:
d6:cb:17:3a:65:85:4b:73:d3:dc:11:cd:ff:0b:00:f9:04:23:
0a:eb:a0:16:63:93:e6:ec:8f:2e:ab:b5:25:05:e6:c2:31:a6:
3e:d9:4c:8e:38:a5:be:d5:a2:df:18:50:04:ea:b0:e3:14:22:
32:6f:d3:8f:ca:31:23:1c:9c:3f:a7:77:6d:e3:49:d9:a8:f2:
18:8f:ea:c9:1f:0c:f9:94:fe:0a:19:d4:c6:54:01:82:12:8b:
25:e3:19:35:d5:ee:5d:14:ac:0d:65:9a:ac:02:d6:e3:30:b2:
6b:9e:a8:54:ac:a6:cc:50:82:ed:1d:42:47:09:17:30:28:27:
b9:93:15:3d:c2:1a:b6:ab:9f:9f:01:8f:8a:8a:dd:a1:73:bf:
9c:90:2c:2f:ac:f7:d1:19:bb:5d:d3:d5:c8:ac:a0:61:e5:dc:
9c:74:84:f4:4f:f1:2c:5d:7c:62:db:3d:19:55:5e:d3:64:c8:
ea:f9:8f:f5:cd:20:78:a5:23:62:8a:92:b1:0f:ac:a6:31:a0:
24:12:30:83:54:e5:9e:a2:11:29:e6:e3:14:59:7a:bb:e0:06:
8d:76:83:d0:fe:68:12:60:f2:b1:7c:ff:8a:e8:de:a7:1a:f3:
93:63:16:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:50:42 2025 by rpki-client