Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26c0d750-3b77-46aa-a2cc-95174572fcb2.roa
File: 26c0d750-3b77-46aa-a2cc-95174572fcb2.roa (raw, json)
Hash identifier: XNFgBnUMpFszpgSSELxOuLiIr43YtQTNA/3Mn12UyN4=
Subject key identifier: ED:99:D8:CB:B4:9F:EF:60:5C:4D:8D:06:7D:EB:79:1B:35:A1:24:08
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 476505C106A335C980A5690FA357E8BE6989F097
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26c0d750-3b77-46aa-a2cc-95174572fcb2.roa
Signing time: Sat 14 Dec 2024 00:00:00 +0000
ROA not before: Sat 14 Dec 2024 00:00:00 +0000
ROA not after: Sat 18 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da00:6000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:65:05:c1:06:a3:35:c9:80:a5:69:0f:a3:57:e8:be:69:89:f0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 14 00:00:00 2024 GMT
Not After : Jan 18 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:78:ee:43:2a:43:13:79:7f:24:b9:96:dc:0d:
93:b4:5c:0f:c8:a8:5f:a2:b8:e4:0e:c8:1f:6e:17:
4b:54:19:27:d7:eb:6b:3c:4d:fe:71:ff:66:51:cf:
c2:fb:bd:c8:29:bb:63:61:c5:8e:15:da:64:e1:73:
ff:b2:c8:69:23:87:e7:6f:86:79:55:6f:66:c4:cd:
bb:c6:ce:07:30:ec:86:2c:d8:ff:10:1d:9b:b2:30:
98:b7:e8:b9:58:a4:97:06:29:bb:72:03:8c:32:66:
cf:2b:ba:4f:63:89:6b:d7:79:f7:53:66:8c:3f:0c:
89:f3:64:91:3e:17:7d:b6:65:7b:bb:21:09:51:73:
a1:f7:e4:ee:99:ea:96:1a:bc:15:94:79:37:33:a4:
48:35:15:8a:5a:60:c4:fe:29:c0:11:86:0d:07:9f:
c7:5c:d3:47:b7:51:73:ee:a4:4a:c8:68:a3:10:20:
42:ba:61:30:59:91:7a:42:9d:f9:3c:19:67:a2:cd:
5f:50:af:48:aa:bf:0e:7b:b3:f8:13:e9:99:6e:a8:
ba:33:38:40:47:4a:b2:7f:6c:00:81:8b:ec:69:f7:
c7:d3:11:a3:28:56:f4:1f:3a:70:5a:36:fb:34:a8:
a4:ab:0e:bb:ff:72:50:f5:9e:78:90:28:b0:65:20:
e4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:99:D8:CB:B4:9F:EF:60:5C:4D:8D:06:7D:EB:79:1B:35:A1:24:08
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26c0d750-3b77-46aa-a2cc-95174572fcb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da00:6000::/40
Signature Algorithm: sha256WithRSAEncryption
16:52:cb:99:4c:ec:a9:be:c5:c2:d9:54:dc:00:12:4e:a0:7d:
a0:b0:92:8d:89:35:62:50:c9:e1:fa:07:58:ce:2a:36:7c:06:
2c:81:7d:f9:86:a1:75:6d:6c:c8:eb:a0:b2:72:ed:60:3d:06:
c1:75:70:41:24:00:08:8c:04:2e:f5:dd:46:ae:06:ea:0d:85:
e1:55:95:d6:08:94:8b:41:1f:bd:25:66:6d:48:e2:0b:3e:cf:
02:cf:47:26:37:b1:9c:9b:ef:d1:25:9b:fb:ec:82:2d:9f:01:
39:c8:5c:f8:d4:a6:03:30:fc:10:63:3c:79:d8:44:0e:90:c8:
bc:36:60:5c:8c:a7:19:68:cf:b6:47:70:e3:ab:e4:bc:d8:63:
15:9c:c1:2f:43:e5:0e:4e:24:e8:08:3f:98:b0:37:29:fa:51:
b3:9c:8b:64:f2:c1:8c:48:64:ee:0b:56:45:3e:ad:e2:4b:1c:
c6:f9:a8:a3:87:5b:fc:5b:2f:db:44:e2:81:e0:28:2a:11:9c:
37:a5:23:07:f8:81:51:ba:e6:57:9c:3a:1f:c9:f5:94:6f:42:
e7:65:57:97:74:e2:3f:ca:32:ca:08:77:f0:d5:9a:a3:1e:d7:
bc:56:a9:73:fe:90:ff:20:31:b8:75:89:10:77:f3:29:17:46:
d5:6d:46:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:49:22 2025 by rpki-client