Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/06f26ce0-1a3c-4c74-9cfa-229fd168c8b8.roa
File: 06f26ce0-1a3c-4c74-9cfa-229fd168c8b8.roa (raw, json)
Hash identifier: RsmQ/1XJfkV4iOEwOcz4U/7T33HlIJF57amevM94yIo=
Subject key identifier: C6:5E:7E:D7:8B:E0:24:95:0D:96:E4:CC:4C:F0:A0:B6:EB:44:85:11
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 49F5119C5DDB33BF1775EC8C975927A21D013513
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/06f26ce0-1a3c-4c74-9cfa-229fd168c8b8.roa
Signing time: Wed 25 Dec 2024 00:00:00 +0000
ROA not before: Wed 25 Dec 2024 00:00:00 +0000
ROA not after: Wed 29 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf5:8800::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:f5:11:9c:5d:db:33:bf:17:75:ec:8c:97:59:27:a2:1d:01:35:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 25 00:00:00 2024 GMT
Not After : Jan 29 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7e:53:ac:1c:dd:f0:35:d6:85:9e:63:57:b0:
22:39:3f:c5:d4:c0:53:fa:d1:24:7e:db:c3:7d:1a:
8a:1e:ca:22:35:ac:fa:93:03:ac:79:10:65:9c:fe:
43:07:d7:e7:94:92:05:37:27:e5:93:0e:4e:16:6d:
bf:e9:43:ec:c9:4b:15:79:1d:2d:60:dd:82:e5:d5:
0d:1f:5a:3d:76:00:e0:f7:27:26:91:82:96:de:71:
ea:36:1e:4a:36:d9:55:61:e7:c7:b1:f9:f2:38:42:
a7:78:eb:1c:72:eb:e6:ff:d1:36:fa:87:a9:9a:07:
98:24:7d:3e:ee:5c:a4:6e:4c:27:b5:a2:0a:e1:eb:
d3:4b:2d:f0:2b:3a:c6:e3:6a:ea:70:b1:d8:f1:69:
fd:e7:ed:5e:6b:43:08:ac:df:55:71:b6:c3:d9:93:
99:c4:08:c3:8c:ff:9d:28:39:63:a7:47:91:da:33:
b5:06:64:46:a6:3b:62:4d:60:6c:ab:ae:41:be:00:
7d:c4:d4:b3:9a:07:f4:c4:83:89:81:80:c5:47:4c:
19:c9:4a:9b:02:07:51:e3:ac:a2:fd:e5:8a:c9:ba:
33:27:4f:67:b5:6f:be:6d:73:ad:d8:ae:6d:a7:b2:
7e:8c:2c:b9:11:68:bb:85:14:a0:7e:8c:36:23:8d:
5d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5E:7E:D7:8B:E0:24:95:0D:96:E4:CC:4C:F0:A0:B6:EB:44:85:11
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/06f26ce0-1a3c-4c74-9cfa-229fd168c8b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf5:8800::/40
Signature Algorithm: sha256WithRSAEncryption
b4:7a:21:8d:d1:b5:a4:eb:51:15:c7:c0:35:a8:e4:b3:ab:ab:
bf:a8:4b:a1:e7:c1:91:98:a1:9d:71:80:d5:90:2b:53:74:ff:
ce:a4:7c:95:5a:78:1e:f1:46:ed:56:86:da:85:ac:71:10:b5:
ab:d4:ee:45:95:5f:eb:76:02:21:b2:b1:c1:de:6f:f1:2f:7a:
1c:d9:52:9a:87:2a:df:fb:46:c3:f9:17:5f:cc:f2:c8:6a:b9:
ed:5d:b0:81:12:1b:d7:27:28:17:3b:82:a9:19:a6:4d:d8:cd:
74:43:cd:2f:4a:c1:ce:a5:ab:c6:c3:b5:8f:b7:d2:ea:ad:51:
62:be:cd:41:65:dd:49:32:f7:ea:c6:6c:26:f7:18:26:f2:a3:
2c:11:70:4a:71:9a:1d:7c:66:fd:80:cc:cf:bf:06:6b:9f:d3:
aa:c1:b2:fa:69:56:50:b5:d0:6d:06:6c:94:d8:4e:ca:f2:42:
e2:fd:45:aa:75:77:07:0b:e1:3d:a5:6a:04:2d:6d:53:59:0d:
4f:1b:d0:99:f8:3d:cc:04:c9:30:b9:c4:f8:50:c9:11:3f:5a:
67:34:47:15:c1:6c:c0:96:38:f3:06:60:5b:1e:be:ea:2e:55:
69:68:8a:68:69:d8:db:13:6a:64:c2:ca:ca:ff:1d:bf:e0:aa:
69:30:75:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:31 2025 by rpki-client