Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/165f5afe-0226-4ced-83dc-8c6c9abd975d.roa
File: 165f5afe-0226-4ced-83dc-8c6c9abd975d.roa (raw, json)
Hash identifier: YilyKpB3mJ4niYNWbyaSVdYrFiJ6YO0d6sM8py36sVk=
Subject key identifier: F5:0F:B0:85:18:14:31:AE:05:A2:D1:66:88:23:E4:57:BE:3B:83:F1
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5B154907BD1E6B436D9DF88DB9E7D8B3EFBA732F
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/165f5afe-0226-4ced-83dc-8c6c9abd975d.roa
Signing time: Sat 14 Dec 2024 00:00:00 +0000
ROA not before: Sat 14 Dec 2024 00:00:00 +0000
ROA not after: Sat 18 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf7:4000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:15:49:07:bd:1e:6b:43:6d:9d:f8:8d:b9:e7:d8:b3:ef:ba:73:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 14 00:00:00 2024 GMT
Not After : Jan 18 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:33:1b:89:ab:d6:0a:95:a7:be:dd:39:6a:
ec:59:96:59:f3:23:2e:52:34:2d:bb:89:71:cd:c7:
3b:2d:83:53:4e:71:5b:c3:34:dd:c0:b7:b0:fd:78:
a3:d6:bb:ec:8c:0e:46:93:0b:e8:52:b0:32:66:bd:
04:88:2a:16:59:b1:00:e6:15:51:0c:46:01:45:61:
95:8d:40:8e:4d:b6:d5:ae:d4:22:0e:15:1f:e4:dc:
15:e6:0b:9a:14:77:3d:22:1d:4b:f3:6e:35:d4:90:
7a:fd:7b:12:2f:91:50:2e:d5:35:52:b1:ec:35:32:
55:74:16:63:a4:e2:c1:35:14:ff:2c:65:64:fe:0f:
8b:96:0f:2f:55:35:25:d7:67:ba:02:74:75:7b:21:
8b:41:2d:ee:7b:f9:a8:6c:91:12:5f:bb:b3:a1:62:
4d:a4:9e:fe:82:2c:2b:03:7c:e1:75:e5:90:96:af:
a2:cb:05:19:cc:36:37:db:9c:2d:f8:ca:6c:c3:c8:
9b:f8:28:71:42:bb:15:03:42:97:ea:c1:91:21:23:
86:0e:92:fc:1b:21:e9:87:6f:71:70:d9:45:5d:94:
62:b8:18:2d:14:b2:32:94:dc:b4:44:05:21:5b:56:
cf:43:cc:d4:92:e5:9b:e5:84:de:fe:41:0b:ab:68:
ce:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0F:B0:85:18:14:31:AE:05:A2:D1:66:88:23:E4:57:BE:3B:83:F1
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/165f5afe-0226-4ced-83dc-8c6c9abd975d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf7:4000::/40
Signature Algorithm: sha256WithRSAEncryption
b8:c0:c6:fe:c4:da:b1:90:f4:d5:1b:1a:7e:64:f1:79:c9:86:
74:cc:81:e4:81:16:f7:9f:e0:c1:d1:3a:4f:ae:67:02:00:41:
bf:d6:eb:60:81:33:b2:8f:b4:bf:ce:5b:89:6b:15:20:4b:72:
75:52:7b:2c:24:7b:15:5d:b4:be:4d:b0:4a:58:44:28:07:9c:
9b:ff:40:82:8b:cf:da:81:01:49:b2:99:25:b3:55:b1:5f:21:
a5:45:45:5a:88:88:60:b7:d3:cd:26:67:a5:eb:fd:d9:1e:42:
73:d9:28:a2:a0:d1:89:c8:6e:8b:47:2e:42:91:16:7c:8e:6a:
5b:4a:35:f0:2d:15:13:0b:ce:47:49:c9:d6:a9:aa:b0:ba:60:
76:85:12:ff:16:b0:ba:8d:99:ad:56:ae:34:e9:84:bd:c7:dd:
e1:8d:65:07:bd:38:d5:6d:6a:53:f7:d9:36:82:01:25:40:25:
d7:fd:67:ad:58:e7:85:d5:93:dd:64:32:a8:4b:2b:be:8c:f4:
a2:74:ac:ce:bc:b0:c3:0c:c9:a7:0d:57:70:1b:c6:65:3e:2a:
d6:0b:5d:7a:69:a6:62:44:9a:d7:61:5c:6f:f3:29:c4:1f:3d:
31:da:fd:4c:12:6a:c1:d4:50:ea:3b:53:18:8a:05:03:50:d2:
7f:28:cf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:05 2025 by rpki-client