Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/34f76f8f-1e50-4f09-a641-c20d6c0ca6f8.roa
File: 34f76f8f-1e50-4f09-a641-c20d6c0ca6f8.roa (raw, json)
Hash identifier: nRo9YtWcRjB/bUUx5fzE0daT6yzliBPzph/NByW7bO4=
Subject key identifier: 15:F5:06:9B:17:16:90:AE:A8:60:16:87:7C:CE:B7:4D:27:A0:B7:7B
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 51FDC7DD314CD810886C8F1D8994B855E0BA2F29
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/34f76f8f-1e50-4f09-a641-c20d6c0ca6f8.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf9:9000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:fd:c7:dd:31:4c:d8:10:88:6c:8f:1d:89:94:b8:55:e0:ba:2f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:81:fa:85:eb:57:c7:4d:6b:dc:a2:20:bc:f2:
e4:bd:fd:7f:e7:1c:e2:a6:cd:b5:fc:45:36:f0:22:
e2:99:60:4e:fc:b9:5f:be:87:56:35:aa:cc:91:b9:
e2:cc:5f:2e:37:5c:b1:fb:0b:cc:53:34:8a:c0:be:
9f:f1:9b:73:9d:34:13:18:11:6f:7f:39:53:02:5c:
71:64:11:d1:b4:28:3f:db:6b:78:55:97:53:01:7a:
b1:99:81:7b:98:1e:d3:c4:3b:25:83:78:5f:74:62:
e2:a5:6d:68:a3:d2:1e:32:ba:75:97:ae:5b:0e:f7:
5b:f2:22:70:66:71:86:d4:97:8e:ed:53:c2:a1:24:
3e:00:a0:61:ba:b0:15:9f:c4:ff:7f:c7:bb:e6:8d:
ac:aa:21:63:ce:fe:ac:1d:a8:7f:20:e3:c9:57:b4:
a9:42:9c:ec:38:8b:86:d1:f2:39:6d:e9:7f:e9:b9:
59:70:e5:b2:29:f7:c7:a8:d8:a2:c0:7f:0d:69:85:
5f:91:f2:7d:85:15:f2:e1:7b:d9:50:b4:cf:e3:88:
11:24:4c:9c:9e:44:95:4e:18:c8:de:b0:90:85:3d:
0a:07:cc:e4:e2:d6:71:48:80:49:c5:69:c5:42:c1:
19:6c:92:74:2d:65:e8:10:65:9c:d3:b3:9c:69:34:
03:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F5:06:9B:17:16:90:AE:A8:60:16:87:7C:CE:B7:4D:27:A0:B7:7B
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/34f76f8f-1e50-4f09-a641-c20d6c0ca6f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf9:9000::/40
Signature Algorithm: sha256WithRSAEncryption
c2:36:8e:a4:90:f6:21:95:b7:bf:46:8e:c7:ac:88:9a:d6:6e:
3f:b2:77:1a:b6:ad:b8:7a:bb:78:de:14:62:14:2e:78:b0:b5:
3b:51:ef:f5:50:7f:84:3a:26:61:cf:e1:67:0d:20:74:07:82:
f1:8a:ef:6a:7d:be:bf:31:09:6a:63:3f:ab:cf:d0:bd:f2:49:
71:bd:81:38:f8:6a:07:d3:a2:ab:d5:aa:38:d1:80:fa:95:c9:
27:b9:27:6a:b0:e4:89:c7:be:24:49:c5:dc:78:60:2e:a1:9d:
40:1d:b3:33:eb:34:fc:4a:88:89:83:d6:5a:89:86:c2:75:54:
c0:14:db:41:95:89:b6:7a:6e:b0:64:6a:3e:5e:17:bc:17:8c:
22:eb:e0:f8:9b:87:cc:a9:c1:c2:d9:99:9c:d1:0e:a5:b0:e4:
24:29:29:d0:c2:7a:18:c0:48:48:20:92:f8:e3:18:b9:50:07:
3d:01:9d:1a:7b:8a:80:07:22:c8:cf:4b:05:f8:ec:9b:bb:5e:
1d:5c:a7:fc:a3:80:f1:f3:20:bd:a5:fc:c2:c3:b2:a2:a2:66:
a4:2e:7a:8c:a3:2a:de:7d:7b:c4:50:9f:72:a2:e4:ff:16:55:
b8:2d:f4:3c:3e:ba:1d:5b:50:f5:a9:ca:54:a2:f9:2f:93:ce:
cb:7a:a1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:55 2025 by rpki-client