Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/f8620d2a-ea0f-46ef-a270-0f639f977882.roa
File: f8620d2a-ea0f-46ef-a270-0f639f977882.roa (raw, json)
Hash identifier: ysMV8fVyFNjXcK7xkfWG8jzJC7WYiRNRonPHnemAyrE=
Subject key identifier: 7B:FF:8F:5A:DD:CF:0D:F1:F8:A1:81:A5:AB:ED:22:18:6A:F8:C9:D4
Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Certificate serial: 601F026174B4E280094E358A4EC450C3F0B8208F
Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/f8620d2a-ea0f-46ef-a270-0f639f977882.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 240f:8000::/24 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:1f:02:61:74:b4:e2:80:09:4e:35:8a:4e:c4:50:c3:f0:b8:20:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD28A0000
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=4257e925-715f-47a2-893e-0e3f97ec7e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:21:c5:fb:95:4e:db:09:ff:8b:73:1c:85:e5:
82:eb:83:46:8b:68:d2:6f:19:05:d5:a0:92:1d:fe:
0d:55:05:9c:77:6a:19:7a:f7:a3:c7:a4:a9:ab:47:
ca:8b:7e:f0:fb:a1:ae:31:1f:36:dc:ab:03:13:e0:
40:3a:d3:6f:82:89:e8:89:4a:70:3e:a5:a2:65:f7:
aa:b4:54:55:64:b0:de:a7:c9:1e:de:a4:40:22:e6:
ca:97:b9:66:35:c2:52:d5:a5:e1:1d:ee:c3:ad:e4:
b0:9f:51:c6:0b:17:cd:a9:06:5a:38:9f:98:67:b2:
0c:c1:70:98:fb:1a:89:4a:f7:1b:6b:e5:d0:03:02:
f0:b2:07:dd:47:07:a1:91:38:aa:1d:46:4e:db:ca:
9f:51:c6:48:41:b1:1c:2c:25:8b:5d:d7:32:a9:a6:
39:8f:ff:9b:83:dd:b8:3e:7e:01:96:30:8f:0d:1a:
7e:0d:22:62:d2:ad:ac:5b:57:46:86:6e:35:8e:02:
1c:6b:13:14:4c:2a:bf:51:b0:1b:ac:02:1f:c7:b9:
55:6e:dd:b4:d3:90:81:cd:df:87:dc:0d:8c:9c:f9:
a9:98:06:3e:3c:62:1f:a6:81:10:ce:ac:7d:7e:f4:
90:10:34:0d:c7:93:29:68:fc:9f:0e:b2:69:74:0a:
62:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FF:8F:5A:DD:CF:0D:F1:F8:A1:81:A5:AB:ED:22:18:6A:F8:C9:D4
X509v3 Authority Key Identifier:
keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/f8620d2a-ea0f-46ef-a270-0f639f977882.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240f:8000::/24
Signature Algorithm: sha256WithRSAEncryption
b8:39:5b:02:15:7e:7d:08:16:b8:e3:b9:c9:fe:ab:04:49:10:
a8:9e:93:5b:81:19:71:8c:c4:79:c1:68:53:55:08:cb:89:89:
9a:8a:83:9c:59:c5:df:de:de:bc:c3:80:85:ff:2c:f5:c6:3f:
3b:17:c3:78:0f:05:1c:eb:09:48:6d:95:6b:b5:6f:39:06:0d:
25:4a:97:6a:40:00:f5:36:ca:be:0f:0d:28:7b:9b:27:44:a6:
9b:a6:88:3f:47:42:19:10:d7:71:41:8a:5e:d1:65:64:4e:2d:
e9:3f:15:b7:61:41:89:53:85:fe:e8:01:04:2a:17:51:c0:b3:
c9:f5:23:7f:3e:9c:24:71:22:f9:80:8d:72:47:9c:d3:8b:e0:
a9:de:32:3a:9f:1b:f0:3e:c3:90:c3:3d:1b:7d:9d:3d:b4:e5:
29:3d:e9:7e:43:e6:be:96:cd:a2:52:ec:bf:79:58:58:b9:20:
80:7c:e6:12:0e:f6:86:f3:9a:0e:55:36:76:ea:b8:f5:bb:24:
62:de:c3:0e:d4:04:7e:d7:7b:6f:ab:cf:39:74:d8:3a:0a:37:
7f:19:77:c4:06:65:43:09:aa:75:52:2e:30:7b:ce:ca:81:1b:
54:0d:fb:a6:c7:be:47:75:9b:32:e3:08:0c:b6:20:26:94:b9:
2f:79:38:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:25:47 2025 by rpki-client