Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/01388f0e-0d85-497b-9aa6-95cefefc4686.roa
File: 01388f0e-0d85-497b-9aa6-95cefefc4686.roa (raw, json)
Hash identifier: oTanyLQiDwrl+IrxjXm/DdIWUFXHmDpU0MOzOSExw98=
Subject key identifier: 02:9A:AE:38:A9:56:77:53:91:CC:2A:DE:80:45:CF:A2:A4:9C:45:39
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 0E3AA758382B6EEB32ABDBB130C8CCC31DBB8544
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/01388f0e-0d85-497b-9aa6-95cefefc4686.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da30:8800::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:3a:a7:58:38:2b:6e:eb:32:ab:db:b1:30:c8:cc:c3:1d:bb:85:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:99:ca:e2:5e:1f:06:ab:02:29:a7:a5:7d:
8e:53:aa:4d:e4:35:95:f2:06:2f:6b:7a:80:d5:37:
90:ad:1d:cb:98:9c:6d:dd:f1:a3:f7:b9:11:6e:f0:
84:99:b1:9b:1c:05:83:15:c2:08:5b:3e:ae:a2:d4:
15:47:d2:b8:93:a5:b1:93:f3:b1:35:41:42:d7:f6:
96:b6:14:b1:97:8a:44:f1:98:74:11:6c:5d:cc:77:
d3:23:5f:a2:fb:fd:32:5c:d7:b3:48:be:0c:6a:59:
b0:f4:c1:d1:f2:2f:50:0b:c0:0e:ab:53:7c:36:9a:
00:4d:ad:bd:c9:81:84:09:c9:85:88:b4:e5:1d:57:
74:09:2f:d7:72:22:c4:48:2f:2d:39:9b:6c:e4:75:
ad:53:b9:9a:8a:fb:34:d1:2d:0b:06:da:ef:e9:06:
4c:38:57:70:21:46:a7:b8:2b:c2:4d:ad:74:8a:85:
29:8b:c6:29:05:fa:07:dc:32:e7:bb:55:d4:a6:03:
d9:e9:79:67:02:4d:b5:40:9f:5d:7b:d8:0b:15:c7:
10:e4:13:20:0e:2b:f2:c5:9f:4f:d3:45:7e:8b:20:
93:7b:b7:56:df:0e:ad:25:69:4e:a6:2a:0d:71:79:
c7:e6:cd:5d:45:ec:4c:1e:19:19:a2:60:19:59:5a:
d1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9A:AE:38:A9:56:77:53:91:CC:2A:DE:80:45:CF:A2:A4:9C:45:39
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/01388f0e-0d85-497b-9aa6-95cefefc4686.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da30:8800::/40
Signature Algorithm: sha256WithRSAEncryption
09:11:ca:d9:2f:3e:48:1c:6d:f8:6d:1f:e5:67:1b:96:04:9d:
a8:fd:3d:52:c7:b2:0c:64:ab:29:4e:c9:bd:63:b9:54:6d:45:
2c:12:e9:76:0c:c7:86:1c:36:22:19:f2:c9:86:c9:05:0c:aa:
05:03:a9:f4:44:8a:16:91:fe:97:89:d8:8d:c1:50:cd:09:ce:
2f:36:ce:ad:92:61:0c:81:f2:02:a0:a2:29:84:07:5b:70:a5:
8f:72:18:dd:6d:1c:a8:82:6a:06:0f:00:b1:dd:fd:d1:5f:e6:
b8:23:7d:b0:6e:e7:21:9a:df:9d:5c:61:40:ba:38:e1:7b:fc:
1e:bf:23:38:71:c1:b3:6b:bf:94:71:56:52:ef:be:0f:9c:cc:
55:02:52:c3:8d:d8:77:df:2e:1d:b2:3b:b7:1c:08:d0:3d:3f:
c6:7e:31:f3:8b:98:f0:6b:59:9b:fc:31:3b:33:0a:26:7c:4c:
a0:11:28:48:8f:f1:8a:55:e8:a3:d9:2f:e5:33:02:96:9c:2d:
61:0e:35:69:e8:e0:ff:9f:98:f6:c0:eb:a7:fb:fc:26:ed:78:
07:25:59:e7:b6:b5:4a:35:29:11:21:3e:ee:f3:6d:65:1d:1a:
93:e9:48:9f:9c:bf:ca:0c:32:55:b9:d6:d6:bb:69:f9:97:cb:
b7:a2:2e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:05 2025 by rpki-client