Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/0d6f5c86-57d8-4e0d-8445-30cb122bb4dd.roa
File: 0d6f5c86-57d8-4e0d-8445-30cb122bb4dd.roa (raw, json)
Hash identifier: 1D4twreZADyAizGVtwbmx5Ls2xD6AfYnxtzxUrNaEcQ=
Subject key identifier: B9:8F:20:91:5B:2C:9C:FF:6A:9B:EB:89:E9:7D:AD:4D:9E:D6:03:F3
Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Certificate serial: 5A370152D0BC6FEC73181DD28305FC43937B6F0E
Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/0d6f5c86-57d8-4e0d-8445-30cb122bb4dd.roa
Signing time: Wed 05 Mar 2025 00:10:54 +0000
ROA not before: Wed 05 Mar 2025 00:10:54 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 240f:8014::/36 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:37:01:52:d0:bc:6f:ec:73:18:1d:d2:83:05:fc:43:93:7b:6f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD28A0000
Validity
Not Before: Mar 5 00:10:54 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=4257e925-715f-47a2-893e-0e3f97ec7e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:51:3a:01:6e:a8:4b:eb:a7:f3:b3:33:f1:3b:
92:d2:8f:c2:b9:bc:18:54:94:40:8e:19:8b:60:f9:
40:a9:74:96:76:44:e3:e3:8d:6c:cd:5d:d4:f1:27:
07:78:b4:de:79:94:02:6b:21:ab:94:46:7f:95:0b:
3b:b7:a5:0c:48:bb:2c:5c:48:a8:c0:94:d5:18:da:
dd:7b:89:0a:94:1c:cb:4f:43:b2:ce:e2:83:a3:49:
b0:7e:a8:81:7d:5d:7d:58:9e:30:b3:34:18:ca:6b:
5d:48:46:02:51:0a:c9:86:d7:a3:62:5e:71:01:49:
8f:0e:81:83:32:8c:8d:62:3a:97:3f:e8:e7:1b:a9:
e2:39:9a:2e:a0:a6:30:6a:01:92:52:11:17:3a:e6:
26:83:5f:86:5b:be:5a:83:78:a7:ee:06:16:e6:22:
25:c2:9e:c2:45:b6:b1:f1:68:81:12:63:95:67:d2:
8f:00:bb:4b:a3:b6:7b:ca:b1:34:aa:65:82:96:4f:
e8:2d:28:f8:57:5a:20:64:be:75:33:3e:5a:42:89:
81:d5:c1:d4:b1:15:97:82:50:cb:ca:e0:b7:97:6f:
cd:0b:a7:5b:de:fe:57:eb:13:02:84:e8:ae:4d:b2:
ba:aa:b5:48:86:ad:dc:d6:d7:21:1a:d8:5c:2c:f6:
8c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8F:20:91:5B:2C:9C:FF:6A:9B:EB:89:E9:7D:AD:4D:9E:D6:03:F3
X509v3 Authority Key Identifier:
keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/0d6f5c86-57d8-4e0d-8445-30cb122bb4dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240f:8014::/36
Signature Algorithm: sha256WithRSAEncryption
24:8a:4d:73:00:ad:d8:2a:dc:fe:2d:68:93:be:b9:06:86:86:
5c:be:d3:49:68:86:e5:ab:c6:28:af:aa:5c:25:54:78:6f:2d:
24:cf:91:72:b8:19:73:f1:85:c5:3e:9b:81:ab:f9:67:43:d3:
fb:d9:8c:da:c7:57:0a:18:b4:5c:04:de:fe:6e:c6:c2:58:68:
59:c7:eb:74:00:c6:8f:4b:cc:be:a4:28:ac:87:61:e1:c9:21:
f9:f8:2d:eb:af:f8:7a:bc:d2:33:72:3b:f1:a5:28:fa:c5:de:
dc:79:46:da:bc:00:41:02:6e:d1:e1:93:ff:a6:30:72:e1:8d:
cb:80:00:2a:e7:31:f4:2c:6a:c0:4f:dd:bc:f1:9a:fa:c6:49:
f8:53:cc:47:5f:d2:98:88:ed:04:ca:b3:d5:70:47:7e:39:7a:
f6:12:7a:97:3c:43:aa:83:11:16:c3:26:89:a9:b8:c3:ac:ed:
36:ae:b2:6a:e0:9d:df:97:dd:62:d7:70:04:f0:27:c4:cf:dd:
18:83:7c:d9:35:79:f7:38:6a:6b:15:69:92:84:4e:8a:c8:49:
c7:36:7e:80:30:7b:ad:13:75:f9:2c:1e:df:09:49:c3:ff:2a:
37:52:2f:b4:66:ea:e1:f3:38:e1:7d:9c:85:0c:c6:22:c4:14:
a5:32:a1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:29:04 2025 by rpki-client