Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3119727a-0085-4a38-8cdf-7eaddddb55e5.roa
File: 3119727a-0085-4a38-8cdf-7eaddddb55e5.roa (raw, json)
Hash identifier: nb0n3cEa0LexblQjtYsCiuKCWR6QbmMDGu5dRJ3KPDg=
Subject key identifier: CA:BC:02:5C:A2:31:D0:18:9A:0B:84:1E:C4:AB:5F:31:07:26:A1:0B
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 0EF7A1D388C1847B6714EA6E3F731940FE44CC4F
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3119727a-0085-4a38-8cdf-7eaddddb55e5.roa
Signing time: Fri 21 Mar 2025 00:01:36 +0000
ROA not before: Fri 21 Mar 2025 00:01:36 +0000
ROA not after: Fri 25 Apr 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2406:da60:800::/40 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:f7:a1:d3:88:c1:84:7b:67:14:ea:6e:3f:73:19:40:fe:44:cc:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 21 00:01:36 2025 GMT
Not After : Apr 25 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:49:01:2b:4b:ee:62:76:dd:7b:2e:22:8e:cf:
3d:93:6b:79:b8:aa:87:ed:9b:ac:f8:20:ad:6a:62:
5e:75:19:20:b8:4b:3c:de:73:71:a1:4b:d9:55:51:
d0:3f:da:db:70:98:16:12:31:2a:33:a4:bb:59:28:
f1:29:be:40:ad:e2:ee:8a:6f:59:41:89:fa:17:23:
12:84:97:2e:0c:91:84:6e:47:e2:cb:d0:51:93:ee:
a2:ce:7f:fd:8d:7e:be:41:18:bd:40:b9:18:af:79:
a3:fe:7a:e1:96:b6:15:58:78:84:ac:77:0e:a8:6f:
01:14:5a:41:9f:36:a4:28:ac:99:c6:4b:4c:f8:1e:
40:65:89:33:a7:7a:74:96:43:1f:ec:af:44:0b:23:
c4:f4:88:44:21:1c:3a:92:cf:96:03:11:49:2a:63:
a6:70:a1:b1:44:51:64:94:f1:6e:7c:67:4f:80:94:
78:88:23:34:d8:73:fd:49:87:74:a0:83:8e:01:7e:
5b:83:af:56:55:d0:5d:7c:39:15:c5:ce:37:54:4f:
df:38:d8:44:5b:c2:85:b2:52:a1:be:6c:20:fd:d1:
a6:b5:d0:dc:2d:e1:f4:a3:35:e4:b3:e5:54:d2:58:
72:b6:dd:ea:d8:15:7e:3b:27:a0:1b:c7:fa:0c:4c:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BC:02:5C:A2:31:D0:18:9A:0B:84:1E:C4:AB:5F:31:07:26:A1:0B
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3119727a-0085-4a38-8cdf-7eaddddb55e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da60:800::/40
Signature Algorithm: sha256WithRSAEncryption
15:49:2a:da:c0:ab:18:d2:e2:f5:1e:4e:4e:08:18:26:fd:60:
85:ba:1b:54:74:8f:86:7a:c8:3a:61:6c:e9:cc:fd:ac:14:65:
18:91:ec:72:72:39:37:4d:ea:be:81:63:1b:b1:e3:39:09:81:
06:22:12:69:a6:05:02:f1:cb:74:8b:6d:ca:e6:84:d7:37:3f:
9c:6f:6e:ea:25:54:1f:05:5c:16:ee:cd:8b:6a:74:12:0a:99:
62:0f:26:3b:6b:79:af:0c:50:63:2d:2c:10:b5:02:dc:18:9c:
bf:df:6f:4f:b9:83:90:d4:cd:b5:ca:2a:87:ee:8c:10:76:d3:
f9:49:50:20:4e:43:54:42:b2:db:a9:b0:26:0d:0b:ac:f2:25:
4e:1b:63:dd:80:80:49:63:3a:83:70:62:b8:08:a5:1a:67:64:
56:89:e0:95:9b:77:91:83:32:87:c0:63:63:79:bc:01:4f:e2:
34:5b:f5:22:c3:d9:73:d2:89:21:fe:d1:a3:89:62:cb:d9:52:
bb:dc:84:87:29:c3:b0:a8:5e:73:28:4f:0b:51:a3:50:5c:c6:
6d:14:5f:29:8b:e7:7f:5c:64:27:84:05:d1:79:6b:00:7a:d9:
dd:42:49:e6:ed:6a:16:ce:fa:22:16:18:32:70:48:b3:b4:ad:
4f:e6:3a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:10 2025 by rpki-client