Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1d9f7ab1-ee4d-4cc6-a171-690e28317e0c.roa
File: 1d9f7ab1-ee4d-4cc6-a171-690e28317e0c.roa (raw, json)
Hash identifier: b4ECQ9xF5y8i3ROZ8t1oPU0STC2gnGsCxYDI5m8g7Gs=
Subject key identifier: 89:4B:85:68:62:96:05:EB:55:BC:36:6B:B0:B3:8B:16:48:37:24:48
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 46F50AA19A13F4081DEA8BF97EE21968039F408B
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1d9f7ab1-ee4d-4cc6-a171-690e28317e0c.roa
Signing time: Sat 14 Dec 2024 00:00:00 +0000
ROA not before: Sat 14 Dec 2024 00:00:00 +0000
ROA not after: Sat 18 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da36:1000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:f5:0a:a1:9a:13:f4:08:1d:ea:8b:f9:7e:e2:19:68:03:9f:40:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 14 00:00:00 2024 GMT
Not After : Jan 18 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:c2:14:da:ec:5b:9d:3b:fb:10:c3:fd:01:
48:5f:54:5e:8e:0a:fa:69:3e:a8:7b:78:83:94:dd:
3c:cf:03:f8:e5:13:4a:f0:c9:ce:34:a0:bf:59:84:
df:24:34:e5:b2:b5:69:7f:0c:ef:df:4f:4c:6f:b4:
13:fe:20:d3:56:e8:40:7d:f0:b7:ec:46:1b:f5:6a:
28:be:88:58:c7:f0:cb:b3:e6:eb:e4:e0:4c:85:ce:
e0:01:c4:4c:0f:eb:f2:05:37:29:ae:d8:56:e8:7d:
25:55:31:d2:63:ad:ac:2b:21:ff:f2:ca:e9:65:e1:
20:46:ea:8a:b2:aa:e0:10:e5:94:da:f5:f9:ca:33:
62:2d:d2:be:08:7b:07:f5:30:41:89:ce:5b:98:e3:
5a:22:b9:a6:8b:9b:19:db:e8:e1:07:de:9d:6e:d2:
97:f4:52:6d:bc:10:35:7f:56:9f:a4:76:fb:02:5a:
75:2b:29:9d:cb:67:7c:24:44:04:d3:7e:79:8e:ef:
ff:14:4e:ad:1a:27:72:46:8b:a3:52:aa:fb:ee:45:
86:56:f7:fc:96:62:b9:a9:eb:01:a3:b3:70:d5:40:
71:af:22:ea:61:81:ab:ac:70:bc:b3:a0:c2:c2:00:
3d:64:ce:fa:c9:97:67:2d:80:58:d7:af:3e:3d:d6:
8c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4B:85:68:62:96:05:EB:55:BC:36:6B:B0:B3:8B:16:48:37:24:48
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1d9f7ab1-ee4d-4cc6-a171-690e28317e0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da36:1000::/40
Signature Algorithm: sha256WithRSAEncryption
55:18:40:18:4e:8a:06:bd:19:8c:ee:0c:b2:8d:c2:08:bb:1c:
b3:9e:66:e6:81:44:b4:2f:a0:46:1d:a0:0f:09:01:ce:e6:e1:
f1:62:96:9b:e1:15:9d:ed:3d:7c:3a:70:b1:fd:aa:06:c5:16:
50:4e:a9:2b:53:db:c0:f7:b9:1e:75:99:a2:bd:b4:a9:fe:e7:
fb:12:35:9d:f6:3d:43:8c:71:37:6d:fc:ad:5d:dd:3a:f2:c5:
cb:71:ed:98:ab:42:8c:34:27:12:6c:6e:de:05:25:da:b7:fc:
19:9c:83:37:7e:db:43:c3:1c:40:6c:ac:bf:5d:c4:68:29:b2:
41:ba:18:c4:08:a1:dd:18:f2:64:d3:f4:18:e1:97:1b:f5:56:
cc:02:0c:fc:f4:95:cc:7a:9a:8a:be:96:6c:3d:97:ae:43:c8:
c9:7c:2f:a9:b2:e3:06:28:7e:55:1f:8b:f3:33:1f:03:c1:e3:
c8:b7:12:98:1f:70:e2:42:42:f6:4d:c5:a5:82:82:f1:6a:60:
9c:b8:33:f5:f0:98:ed:ae:90:88:ac:c2:34:1c:dc:0c:f3:49:
fe:c1:53:81:38:fe:aa:28:68:bf:53:87:06:c8:fd:9d:52:ad:
47:60:6c:c8:00:2b:31:d7:35:8a:69:a1:24:8e:cb:2e:33:c6:
67:04:bf:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:22 2025 by rpki-client