Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13ddd53e-3089-45ac-af7b-4c7931bf479b.roa
File: 13ddd53e-3089-45ac-af7b-4c7931bf479b.roa (raw, json)
Hash identifier: GkzNVqfoZcdkWk04j9oNmheNw2pTuortHue/HugpU5o=
Subject key identifier: C0:AB:9D:C5:BB:B6:AA:00:F7:76:F4:35:13:05:67:32:9C:34:2D:7B
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 02912E65B3089AF30DD4D5788480320F1306A0AD
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13ddd53e-3089-45ac-af7b-4c7931bf479b.roa
Signing time: Wed 18 Dec 2024 00:00:00 +0000
ROA not before: Wed 18 Dec 2024 00:00:00 +0000
ROA not after: Wed 22 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf7:800::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:91:2e:65:b3:08:9a:f3:0d:d4:d5:78:84:80:32:0f:13:06:a0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 18 00:00:00 2024 GMT
Not After : Jan 22 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:68:de:c4:16:e2:e3:6d:0f:a0:dc:f3:b5:c5:
ba:60:4f:e7:cb:45:36:67:3b:6e:60:f6:41:03:13:
89:fc:96:bb:1b:d3:c1:cd:fc:50:20:34:c6:04:7c:
90:23:06:7b:c6:cb:82:db:8c:12:0c:63:f9:bc:8a:
c0:54:2c:4a:35:eb:c1:70:2e:22:10:bd:34:ef:66:
11:62:0f:3a:34:89:b4:50:b5:21:14:a4:55:5f:02:
d3:8f:c6:2d:ef:40:36:22:aa:9c:1e:00:dd:0f:0e:
c8:a9:e3:6d:ee:a4:ee:9f:db:5e:4a:ec:13:22:3d:
f8:1c:1f:f5:6f:f7:23:a3:92:a7:c1:7d:7b:37:ba:
28:15:b4:34:b5:ed:d6:b1:91:85:ba:d1:23:85:39:
11:ca:2c:40:9d:2a:3f:7f:4e:2e:0f:ce:10:4e:36:
f5:fa:81:5b:1f:05:e6:ae:89:e2:68:ae:7d:74:45:
db:f7:48:2f:27:68:a8:ed:68:0e:e6:f9:3c:2b:31:
37:9f:96:f7:fa:8e:9a:22:67:20:8c:33:38:59:c7:
65:fc:da:a5:a0:12:18:be:f3:30:47:a6:30:d7:f7:
e0:f1:4a:dd:2c:06:6c:f0:c1:83:24:65:00:97:a3:
ce:a9:0f:49:c2:6b:e0:45:4c:ba:32:dc:6b:c8:4f:
49:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AB:9D:C5:BB:B6:AA:00:F7:76:F4:35:13:05:67:32:9C:34:2D:7B
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13ddd53e-3089-45ac-af7b-4c7931bf479b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf7:800::/40
Signature Algorithm: sha256WithRSAEncryption
bf:be:4d:b2:17:21:7e:dd:81:9a:11:7c:8b:ab:b3:78:97:87:
9a:a1:ed:6a:f6:e9:31:8a:b8:8b:3e:63:6b:e7:e0:5f:e5:30:
da:e0:bf:49:86:cc:a7:c8:8e:c6:c9:19:0b:f5:03:45:38:6e:
82:03:2d:29:3c:73:67:42:3f:f4:05:da:70:49:bc:b6:9d:2b:
93:17:d4:6d:bd:c5:57:a6:54:3b:ff:22:47:80:2f:57:80:41:
91:ee:13:26:70:92:e4:e3:c7:0b:33:62:3f:96:26:59:32:d1:
4f:47:32:45:09:59:fc:9f:b9:9a:62:8d:10:b8:77:bc:64:26:
b1:4d:eb:03:27:4f:5f:10:39:24:e2:49:e5:c3:35:52:3c:19:
98:71:61:b4:4d:57:31:4c:be:25:fe:84:18:ff:bc:00:d7:4e:
9f:02:fe:7c:f8:db:6c:17:22:48:bd:69:d6:00:a4:0c:fc:0f:
e7:0b:4e:f6:4b:f0:25:b5:08:dc:cf:39:30:06:95:c2:a0:de:
a7:5a:00:8f:e3:76:4f:3e:e8:6a:f8:fe:c5:71:e1:1f:6c:3e:
d9:a6:49:85:67:5a:4f:14:80:15:57:d4:e2:2e:d9:55:c6:77:
b7:ce:84:00:9b:ae:6e:c3:b4:3c:74:50:d4:89:ae:a6:c8:e4:
26:f7:84:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:15 2025 by rpki-client