Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3138f034-62ea-42a6-afd1-3976e52776de.roa
File: 3138f034-62ea-42a6-afd1-3976e52776de.roa (raw, json)
Hash identifier: oB0P2k9waU63Nc2YOTa5GVl8kj70T+qTVANck++pso4=
Subject key identifier: AC:16:63:6C:8E:B7:05:37:E8:94:24:D1:30:25:DC:2F:0B:FE:E5:28
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 6FB750C75360B1F740BEDC9041F5BD683F7143F1
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3138f034-62ea-42a6-afd1-3976e52776de.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da36:f000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:b7:50:c7:53:60:b1:f7:40:be:dc:90:41:f5:bd:68:3f:71:43:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:05:09:08:ed:ea:29:30:b5:1e:cd:9a:46:
e1:66:a1:34:c8:aa:8f:a7:20:2e:c8:cb:ec:d3:54:
3a:d8:79:21:de:04:56:d2:8c:86:b6:42:32:fa:ec:
40:20:d2:b3:45:f7:63:3c:66:99:08:8b:03:ce:3a:
24:9c:67:b8:f7:71:71:c9:8d:f4:f1:9e:4c:fd:5d:
a7:2b:7c:40:a3:09:12:65:91:48:e3:a3:0c:eb:bb:
54:5b:50:bb:4d:24:ec:18:67:2f:98:83:62:e6:94:
0d:63:07:e1:68:d4:51:fe:50:34:bf:d1:68:0f:c2:
0b:8e:8b:86:fc:a5:17:18:70:4b:cf:c6:ba:53:81:
6a:59:31:26:1d:88:8e:1e:a1:ff:55:b5:0f:b5:6b:
9b:30:28:37:d3:02:4e:40:c2:b0:96:5e:58:f0:51:
6c:6c:07:0d:25:2f:25:f4:71:ca:72:ea:84:c0:06:
bd:83:d3:74:4b:1a:97:90:aa:4f:22:4c:d9:57:de:
a4:2b:16:3a:a5:19:cf:17:da:14:e0:dc:97:19:82:
27:19:39:ac:20:ca:4f:67:42:df:7a:5f:8b:ed:a8:
97:b9:90:1a:0c:f0:6d:7c:85:8a:72:6a:9f:7f:fc:
fa:53:fa:41:6d:c0:5f:1c:42:8f:b9:ae:b7:07:ad:
4f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:16:63:6C:8E:B7:05:37:E8:94:24:D1:30:25:DC:2F:0B:FE:E5:28
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3138f034-62ea-42a6-afd1-3976e52776de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da36:f000::/40
Signature Algorithm: sha256WithRSAEncryption
55:53:bc:ab:b2:59:12:7f:f2:d5:a8:b5:96:e7:d4:d1:db:98:
be:73:ce:23:9d:43:54:c5:ff:61:6f:5c:58:cc:dd:dd:c4:24:
e4:01:a2:1d:44:59:31:69:f9:9c:5c:88:bb:34:9c:bb:66:b2:
6c:e1:4c:98:2a:5d:96:e8:16:b7:19:cb:f1:9f:54:8e:6d:ab:
9f:0f:b0:f6:19:72:2d:a3:8f:1c:76:f5:11:4b:76:ab:ee:a0:
3f:53:33:bd:21:54:d4:b8:8c:5c:1c:a2:a7:bc:09:cf:a0:fb:
65:ce:1b:b0:15:d5:39:16:c6:f3:27:40:e0:31:3d:ed:15:0e:
4b:7f:49:cc:9d:66:85:4d:8f:1f:41:8b:f8:a7:fc:91:e5:f2:
a3:b4:3d:bc:6d:fa:a2:a8:c1:69:74:5b:36:e7:ee:f7:be:1f:
87:92:bb:d4:9b:13:f3:94:bb:ea:a7:37:57:72:46:59:aa:df:
6b:e8:8c:6f:70:f5:d8:56:91:a4:57:8a:96:81:85:cc:cc:97:
dc:91:a1:1c:3e:ff:ec:49:05:46:ea:fd:a7:2f:4c:fd:d5:f5:
39:e9:11:15:26:d6:49:93:35:ab:2c:03:bc:af:3d:1f:62:ef:
d1:6c:82:6d:e3:c5:37:f1:df:ca:0d:20:59:bd:39:cf:98:b9:
3a:15:15:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:13 2025 by rpki-client