Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0bbb8e73-cb9b-4c5e-9749-768736d80aec.roa
File: 0bbb8e73-cb9b-4c5e-9749-768736d80aec.roa (raw, json)
Hash identifier: 3PlE4SnlBSDSoB9flVm4KQ9alNYCodeOzT0w85+TCyc=
Subject key identifier: AB:6E:84:56:C0:F9:41:59:87:F5:D0:50:72:0E:3B:82:D6:80:78:F5
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 290BD239312F2C44945B220A356E86B4B61B1A8B
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0bbb8e73-cb9b-4c5e-9749-768736d80aec.roa
Signing time: Wed 18 Dec 2024 00:00:00 +0000
ROA not before: Wed 18 Dec 2024 00:00:00 +0000
ROA not after: Wed 22 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf6:f000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:0b:d2:39:31:2f:2c:44:94:5b:22:0a:35:6e:86:b4:b6:1b:1a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 18 00:00:00 2024 GMT
Not After : Jan 22 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:3b:56:df:2e:62:a2:c2:2b:6e:15:f6:c7:
17:cf:ff:21:bb:29:3b:63:8b:7d:3a:9f:76:b8:9e:
37:b7:f9:84:8d:31:2b:95:c1:a0:80:b3:a2:c6:6c:
c3:3a:d4:9a:e9:17:70:54:cd:c4:f1:57:ed:22:86:
5e:7a:25:88:99:b3:a5:4d:e8:55:8a:1e:b5:92:1d:
ad:eb:d9:c1:98:7e:2f:5a:52:fe:4d:00:64:32:db:
b5:8e:fc:1c:a0:85:49:22:26:53:19:ad:12:bf:d2:
19:05:82:34:f9:37:13:82:59:03:ef:7c:6b:14:d0:
d2:7d:9c:a1:49:07:de:f9:68:a0:85:9e:1d:93:ae:
20:ff:9c:e8:77:27:fc:43:f8:6a:46:b6:aa:8e:f2:
98:d5:6e:0d:da:f9:2b:f0:c5:70:85:fb:f1:ab:aa:
aa:2f:55:40:fb:f9:69:9d:30:00:f7:46:12:0c:26:
10:d2:fc:ec:35:9e:5a:38:a6:9d:7b:64:03:ac:b2:
53:5b:de:31:44:d0:8c:ba:7c:0a:28:9b:f9:9c:86:
3e:cc:be:7c:e2:f1:c1:f9:2a:14:97:7f:45:51:82:
5f:7b:4a:d2:99:2f:a0:ab:52:0f:05:4c:7e:38:6e:
4c:81:67:16:7a:e8:17:3e:f7:61:22:b0:29:c0:84:
d6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6E:84:56:C0:F9:41:59:87:F5:D0:50:72:0E:3B:82:D6:80:78:F5
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0bbb8e73-cb9b-4c5e-9749-768736d80aec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf6:f000::/40
Signature Algorithm: sha256WithRSAEncryption
24:6a:89:18:3f:ef:35:90:2d:e7:77:2a:58:11:fc:90:00:b9:
4c:89:c0:c3:c7:02:c8:75:8f:a8:c1:0c:ad:28:c1:e2:59:cf:
8e:b9:34:07:65:fa:1e:94:8f:e8:d2:fe:62:b2:ba:e2:f5:e1:
31:c4:2d:b5:c0:63:0a:11:ba:ce:bc:3c:f7:f8:4f:90:cd:ac:
90:ca:08:33:64:40:27:64:5e:7e:0b:e7:1c:9b:78:02:49:fa:
68:45:92:f3:63:e9:8e:55:73:52:11:40:c7:10:31:e6:58:c6:
de:97:05:9e:ec:9c:a4:7e:aa:18:07:b5:11:d0:a6:36:af:5f:
e7:3b:fb:7f:16:f0:99:44:40:d2:fd:2a:bf:a5:13:0d:d6:9a:
f6:70:db:8c:55:9f:b2:61:5b:c3:7d:d5:88:ac:df:7c:cd:85:
67:a1:00:b2:fb:ce:8b:a7:30:c2:10:4d:6d:99:3f:ec:b9:c4:
0b:e7:77:15:1b:ed:c0:c1:19:30:f7:29:2e:c2:64:a1:05:3b:
76:46:3c:a9:b7:6f:9f:48:dd:3a:a3:57:22:a5:0f:c2:70:bb:
b6:b6:2a:49:1e:5b:f9:12:2b:24:a2:11:0d:60:c8:01:d5:ce:
2a:c8:e5:89:4e:9e:70:99:a4:9c:a4:d2:17:0a:f8:99:5a:a0:
55:18:fd:23
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUKQvSOTEvLESUWyIKNW6GtLYbGoswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTIxODAwMDAwMFoX
DTI1MDEyMjIzNTk1OVowejFJMEcGA1UEBRNAMjg1MGY3OGJkYzNlYTQ5YjQ3ZGNh
OWEwMTA2MTJjOGEzMDY1MzJiYTI5NjY2ZGY5YzVhZjg1NDZhYjk0OWU3NDEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOw7Vt8uYqLCK24V9scXz/8huyk7
Y4t9Op92uJ43t/mEjTErlcGggLOixmzDOtSa6RdwVM3E8VftIoZeeiWImbOlTehV
ih61kh2t69nBmH4vWlL+TQBkMtu1jvwcoIVJIiZTGa0Sv9IZBYI0+TcTglkD73xr
FNDSfZyhSQfe+WighZ4dk64g/5zodyf8Q/hqRraqjvKY1W4N2vkr8MVwhfvxq6qq
L1VA+/lpnTAA90YSDCYQ0vzsNZ5aOKade2QDrLJTW94xRNCMunwKKJv5nIY+zL58
4vHB+SoUl39FUYJfe0rSmS+gq1IPBUx+OG5MgWcWeugXPvdhIrApwITWdwIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFKtuhFbA+UFZh/XQUHIOO4LWgHj1MB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzBiYmI4ZTczLWNiOWItNGM1ZS05NzQ5LTc2ODczNmQ4MGFlYy5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba9vAwDQYJKoZIhvcNAQELBQADggEBACRqiRg/7zWQLed3KlgR
/JAAuUyJwMPHAsh1j6jBDK0oweJZz465NAdl+h6Uj+jS/mKyuuL14THELbXAYwoR
us68PPf4T5DNrJDKCDNkQCdkXn4L5xybeAJJ+mhFkvNj6Y5Vc1IRQMcQMeZYxt6X
BZ7snKR+qhgHtRHQpjavX+c7+38W8JlEQNL9Kr+lEw3WmvZw24xVn7JhW8N91Yis
33zNhWehALL7zounMMIQTW2ZP+y5xAvndxUb7cDBGTD3KS7CZKEFO3ZGPKm3b59I
3TqjVyKlD8Jwu7a2KkkeW/kSKySiEQ1gyAHVzirI5YlOnnCZpJyk0hcK+JlaoFUY
/SM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:24 2025 by rpki-client