Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/29fe4454-f7a8-42fd-8c35-77a6d6f8e60f.roa
File: 29fe4454-f7a8-42fd-8c35-77a6d6f8e60f.roa (raw, json)
Hash identifier: WdQpFGji/IUO70uRJDQfBiCPFH+A/W8IgoffbP0/FJQ=
Subject key identifier: 57:68:51:21:AA:74:98:D0:A1:C4:D6:CC:87:E2:07:82:A3:21:12:65
Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Certificate serial: 4CA70AD9600A27C54816745A5F8DBB2FB66AAA9F
Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/29fe4454-f7a8-42fd-8c35-77a6d6f8e60f.roa
Signing time: Wed 05 Mar 2025 00:10:49 +0000
ROA not before: Wed 05 Mar 2025 00:10:49 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 240f:8018:c00::/38 maxlen: 38
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:a7:0a:d9:60:0a:27:c5:48:16:74:5a:5f:8d:bb:2f:b6:6a:aa:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD28A0000
Validity
Not Before: Mar 5 00:10:49 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=4257e925-715f-47a2-893e-0e3f97ec7e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:51:cb:93:f1:f4:0c:ac:3d:27:27:ed:f9:bf:
97:96:fc:20:d8:32:c1:12:cc:b5:6c:dc:01:0f:f2:
df:4a:eb:75:7d:77:c1:fd:a7:07:c0:68:91:35:11:
a6:7a:c3:16:99:08:a1:e2:d8:d8:dc:f9:b0:06:f9:
e6:fd:86:23:c0:b1:c4:f0:5f:15:f6:5d:01:81:46:
2e:df:48:1f:86:8c:49:92:fd:12:af:21:9e:1d:d0:
0e:3d:00:e0:df:aa:be:c5:c3:66:62:29:27:5e:40:
af:a5:3d:ff:6a:2e:ae:1d:d2:f1:ff:f9:f9:f8:a3:
fa:53:9e:71:ff:9b:0b:0a:5f:3b:89:4a:30:89:9c:
a5:f4:af:5d:40:b8:19:08:e9:d6:8f:91:89:25:74:
18:fe:f3:a1:91:1b:e3:6e:85:eb:b5:09:76:e2:fa:
33:ca:73:fd:7d:17:1f:92:b5:2c:22:00:3e:7c:fb:
d6:fe:85:fc:16:5b:a1:ed:a3:19:f3:fd:70:4b:bf:
a4:1c:01:e9:37:4b:70:1b:c7:2b:2c:ba:e9:94:dd:
4d:8f:ee:b3:8c:36:43:ca:04:62:09:f8:2e:07:76:
e9:dd:ae:f3:55:95:fe:c3:45:d5:71:55:65:a6:2d:
d4:3f:01:ae:3d:ef:68:b3:1d:73:06:3c:16:4a:20:
78:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:68:51:21:AA:74:98:D0:A1:C4:D6:CC:87:E2:07:82:A3:21:12:65
X509v3 Authority Key Identifier:
keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/29fe4454-f7a8-42fd-8c35-77a6d6f8e60f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240f:8018:c00::/38
Signature Algorithm: sha256WithRSAEncryption
4e:6d:48:4e:73:b7:d1:ce:da:39:c0:cb:f3:1d:ed:bd:d9:6e:
86:0e:ec:61:70:54:0a:87:47:9d:6c:16:55:9f:5e:22:f9:80:
31:8c:59:51:89:93:0e:40:4c:4e:b4:48:ee:e0:8b:9d:00:15:
f7:65:18:ea:2a:54:06:86:55:ff:c6:d3:4e:d8:11:15:08:6a:
62:b3:ee:66:df:0b:cf:f9:d3:df:ed:26:bd:18:d2:b6:04:a4:
e8:e4:9c:f1:e4:37:92:9a:6d:cb:9e:53:ad:04:08:2e:6a:e7:
3b:ea:a4:2a:b2:91:de:3f:6f:91:2e:c9:12:70:96:83:46:cc:
4e:de:37:ee:76:b3:df:ab:a3:95:b7:52:2a:f2:dd:79:77:37:
49:10:bd:6b:b9:a3:11:bf:e2:09:f5:29:30:37:d0:16:00:e4:
47:39:7d:77:0f:d9:23:fe:b4:9c:dc:a9:df:ae:9e:a6:e9:cb:
8c:75:9f:70:49:37:0d:16:8e:22:2e:14:b3:c0:25:9d:e5:ea:
41:7f:c4:b1:1b:e4:49:86:1c:ba:c3:47:a6:26:40:1d:53:b0:
8c:51:a9:28:e8:4d:78:e9:29:10:98:91:d2:aa:1b:e5:7d:f9:
05:5b:59:90:2d:92:b2:5a:bf:9a:88:c2:a7:69:6b:c1:c6:e9:
f4:31:48:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:26:49 2025 by rpki-client