Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3f99746d-82f2-4c5b-b34e-101f9d258abc.roa
File: 3f99746d-82f2-4c5b-b34e-101f9d258abc.roa (raw, json)
Hash identifier: CilPXc/hEa6aun4BFbd8a7f5Ftp8RXkBZ9ZQrp4TdRo=
Subject key identifier: 5F:68:66:BD:6A:3B:08:BF:A3:06:3B:A4:D0:CB:80:71:EF:39:B9:29
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 645BD2DDB90FF1185E27C3AFC6D738294FA07CFA
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3f99746d-82f2-4c5b-b34e-101f9d258abc.roa
Signing time: Wed 18 Dec 2024 00:00:00 +0000
ROA not before: Wed 18 Dec 2024 00:00:00 +0000
ROA not after: Wed 22 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daff:800::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:5b:d2:dd:b9:0f:f1:18:5e:27:c3:af:c6:d7:38:29:4f:a0:7c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 18 00:00:00 2024 GMT
Not After : Jan 22 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d9:08:d2:20:3e:8a:08:97:89:ee:5e:b1:c6:
3a:da:50:ad:4b:f2:75:98:43:72:88:31:ee:ac:34:
75:5f:93:3f:ae:d1:e7:27:58:fc:37:74:df:22:02:
28:3f:7c:73:fd:40:56:0f:c9:bd:b9:c7:a7:53:e1:
eb:a5:fd:7c:37:cc:51:69:b4:48:53:74:65:af:de:
ca:23:7b:57:8d:af:ee:ea:d2:96:df:2e:bb:19:e0:
5b:30:25:34:9c:25:8d:e1:8f:66:cb:aa:ae:1f:fc:
26:bb:63:87:25:d9:25:7c:68:78:9f:99:0b:20:12:
5d:f3:22:47:54:4a:ef:74:c0:61:1a:31:1c:e8:6c:
97:c4:e1:7d:38:42:68:31:e1:83:0b:30:be:00:e8:
11:c3:a5:52:3c:6f:11:36:f1:e4:80:ec:ef:4e:75:
36:25:d3:b8:27:c1:67:b0:51:69:d0:1c:06:75:74:
7f:e1:6a:fb:c6:4b:fe:c8:b5:14:76:33:a6:05:5f:
3e:21:28:2d:84:3d:3c:b0:43:e2:f9:b1:58:86:df:
48:51:5d:54:44:cb:60:18:7a:1c:8b:21:b2:03:a5:
19:61:a7:0d:ac:22:ad:c3:73:65:48:e8:e9:26:07:
5a:78:90:9b:80:4b:34:39:d2:30:97:1e:88:9d:92:
02:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:68:66:BD:6A:3B:08:BF:A3:06:3B:A4:D0:CB:80:71:EF:39:B9:29
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3f99746d-82f2-4c5b-b34e-101f9d258abc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daff:800::/40
Signature Algorithm: sha256WithRSAEncryption
5e:20:c5:70:91:bc:14:16:72:8d:92:db:f9:d4:ef:b0:65:09:
72:22:e2:dc:07:38:19:36:91:af:d2:99:89:2a:26:6a:ab:6d:
09:00:c9:4b:77:0b:10:eb:4b:df:56:e3:fd:bc:8c:ba:88:b8:
41:34:ec:76:cd:ad:a1:7c:6e:3b:54:f4:a8:a1:e9:00:c6:72:
2e:21:68:db:00:e5:63:52:8d:d4:7f:a2:66:a4:7e:74:fe:07:
2e:5d:03:e6:db:42:7e:21:46:88:d2:bb:8e:6a:7d:cf:fe:ab:
28:08:1a:9e:6f:f5:5e:09:f1:5c:6a:06:d2:4c:b4:f2:a4:37:
9d:5b:f6:e3:d4:3d:a0:71:f0:bf:7e:42:0f:1f:7f:96:6b:50:
bd:0f:24:6e:84:6e:c9:f6:2c:d1:b3:cd:8e:12:77:77:fb:a4:
a5:df:8a:69:45:1f:35:3e:2b:55:37:cb:82:1e:7f:7c:36:8e:
82:95:d9:b4:cc:90:06:0d:f1:00:71:ea:fb:61:6f:b2:37:2e:
43:f4:b1:59:7f:59:b2:31:c3:6a:1a:be:25:33:88:8b:67:49:
03:f9:5c:de:64:4b:8f:f7:df:e4:1a:50:d1:e9:6a:7c:dd:8c:
04:78:07:55:70:59:43:86:76:4d:8f:6b:cc:a5:c2:51:0b:39:
b9:f7:52:3e
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUZFvS3bkP8RheJ8Ovxtc4KU+gfPowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTIxODAwMDAwMFoX
DTI1MDEyMjIzNTk1OVowejFJMEcGA1UEBRNAZDcyNjAzNmE3MDhmYzUxZTdjOTZk
MjgwMDYxZWI5N2U0MThhYjEyZjk4ZmIzYzY2MzgyYmVlMGZiZDQ5YjlhNzEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNkI0iA+igiXie5escY62lCtS/J1
mENyiDHurDR1X5M/rtHnJ1j8N3TfIgIoP3xz/UBWD8m9ucenU+Hrpf18N8xRabRI
U3Rlr97KI3tXja/u6tKW3y67GeBbMCU0nCWN4Y9my6quH/wmu2OHJdklfGh4n5kL
IBJd8yJHVErvdMBhGjEc6GyXxOF9OEJoMeGDCzC+AOgRw6VSPG8RNvHkgOzvTnU2
JdO4J8FnsFFp0BwGdXR/4Wr7xkv+yLUUdjOmBV8+ISgthD08sEPi+bFYht9IUV1U
RMtgGHociyGyA6UZYacNrCKtw3NlSOjpJgdaeJCbgEs0OdIwlx6InZICEQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFF9oZr1qOwi/owY7pNDLgHHvObkpMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzNmOTk3NDZkLTgyZjItNGM1Yi1iMzRlLTEwMWY5ZDI1OGFiYy5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba/wgwDQYJKoZIhvcNAQELBQADggEBAF4gxXCRvBQWco2S2/nU
77BlCXIi4twHOBk2ka/SmYkqJmqrbQkAyUt3CxDrS99W4/28jLqIuEE07HbNraF8
bjtU9Kih6QDGci4haNsA5WNSjdR/omakfnT+By5dA+bbQn4hRojSu45qfc/+qygI
Gp5v9V4J8VxqBtJMtPKkN51b9uPUPaBx8L9+Qg8ff5ZrUL0PJG6Ebsn2LNGzzY4S
d3f7pKXfimlFHzU+K1U3y4Ief3w2joKV2bTMkAYN8QBx6vthb7I3LkP0sVl/WbIx
w2oaviUziItnSQP5XN5kS4/33+QaUNHpanzdjAR4B1VwWUOGdk2Pa8ylwlELObn3
Uj4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:26 2025 by rpki-client