Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/51948e3c-37a6-4d66-a172-46657634e09a.roa
File: 51948e3c-37a6-4d66-a172-46657634e09a.roa (raw, json)
Hash identifier: o5BfEFtt6RK5FKEha/keK8y68jwkS6ilS0pJvOV7Q+4=
Subject key identifier: D3:CD:CB:5B:65:AC:BC:78:49:31:26:E3:E7:3E:45:64:9F:A3:FE:F4
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 25123562CDF13F65F4F2D197F394F2CDDAC4C8CA
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/51948e3c-37a6-4d66-a172-46657634e09a.roa
Signing time: Sat 14 Dec 2024 00:00:00 +0000
ROA not before: Sat 14 Dec 2024 00:00:00 +0000
ROA not after: Sat 18 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf2:b000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:12:35:62:cd:f1:3f:65:f4:f2:d1:97:f3:94:f2:cd:da:c4:c8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 14 00:00:00 2024 GMT
Not After : Jan 18 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:a0:78:15:4c:71:43:ce:11:66:44:70:d2:
56:27:69:b4:ac:a0:0a:3a:ae:84:fd:1e:74:7d:47:
aa:c6:8c:6e:4e:e1:8b:2e:9b:fa:df:34:12:77:67:
09:14:0e:03:77:af:03:df:ad:30:26:48:d2:3f:c2:
8e:6f:81:38:d9:67:e2:0e:05:3d:e4:2a:27:72:63:
08:13:4c:73:9e:71:07:4e:24:ae:aa:02:80:20:2f:
54:d1:7a:52:e6:24:00:4a:05:75:e9:8c:47:d2:37:
04:bc:c9:21:c8:f9:c2:32:58:43:c1:73:d5:56:8f:
42:bc:00:3d:7f:16:99:fc:3f:cc:30:8d:63:82:64:
cf:4d:a8:16:72:2f:a7:d1:7d:ee:fe:f0:47:33:c3:
08:d7:aa:e3:5b:54:b9:64:ec:07:c5:84:74:43:22:
b7:33:57:21:06:8f:69:95:10:e0:0d:bf:c0:85:57:
05:61:fc:ae:7b:04:a3:f9:85:b5:09:7f:74:15:5b:
c7:ab:af:f4:33:97:68:f9:36:e4:c3:42:cd:cf:a5:
9e:3b:1a:50:09:b6:f1:2f:0a:1b:ba:e6:1c:cc:79:
22:3a:18:b7:d8:33:34:14:7e:a0:7d:46:ae:f9:49:
ba:bc:6c:ca:8d:a5:88:a0:10:f4:29:1d:c8:62:7e:
aa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CD:CB:5B:65:AC:BC:78:49:31:26:E3:E7:3E:45:64:9F:A3:FE:F4
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/51948e3c-37a6-4d66-a172-46657634e09a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf2:b000::/40
Signature Algorithm: sha256WithRSAEncryption
8e:f5:8f:83:fa:1f:9a:d3:60:80:0f:45:31:22:be:37:3a:75:
7f:08:dd:64:9c:c1:12:15:e0:d1:a9:6a:05:a0:28:99:09:d3:
58:3f:36:91:32:80:88:e4:84:71:bd:7d:49:8f:6b:3c:4c:6b:
f5:f9:a6:36:8e:72:76:58:53:d1:87:05:a7:1a:a2:e5:11:6a:
44:cc:92:fd:a4:07:6b:48:59:6d:03:58:24:d1:5e:a9:ec:52:
7c:70:b8:35:fa:ba:c9:3b:dd:01:d1:70:f8:7e:30:cc:be:c4:
a1:e0:8c:d1:7f:27:78:f0:e2:1a:3f:e2:3f:b4:ee:db:e0:af:
03:85:b0:d7:d2:ed:31:fc:9d:4d:f2:a7:ca:03:b7:88:aa:f4:
a8:60:15:9d:3b:28:5b:60:f9:d7:3b:01:f8:d9:2e:8b:31:ae:
18:ff:d9:80:74:41:5f:f6:9d:d7:02:e4:50:6d:bc:45:32:aa:
d8:6f:0d:ab:b0:98:0c:b9:44:fb:88:52:04:73:4f:56:69:c3:
d2:5a:01:4b:b2:5e:83:a8:e3:e1:ae:7d:31:a2:8b:ed:3d:d5:
63:ab:d2:bf:6d:b3:59:4d:ef:40:ca:63:49:72:fe:cc:b6:11:
fb:20:33:8f:d5:be:db:1b:4a:f4:7f:14:cc:d3:11:4e:6e:00:
b6:2f:83:7a
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUJRI1Ys3xP2X08tGX85TyzdrEyMowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTIxNDAwMDAwMFoX
DTI1MDExODIzNTk1OVowejFJMEcGA1UEBRNAZDNkNzNlNzEyOTkxNzEzM2M5NGNh
OWRhMjY3YTdmOGM4NTU3MTM5MjQxMjg3ZWRlZTQ3YjAxMDU4NDg3NzljMDEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3GgeBVMcUPOEWZEcNJWJ2m0rKAK
Oq6E/R50fUeqxoxuTuGLLpv63zQSd2cJFA4Dd68D360wJkjSP8KOb4E42WfiDgU9
5ConcmMIE0xznnEHTiSuqgKAIC9U0XpS5iQASgV16YxH0jcEvMkhyPnCMlhDwXPV
Vo9CvAA9fxaZ/D/MMI1jgmTPTagWci+n0X3u/vBHM8MI16rjW1S5ZOwHxYR0QyK3
M1chBo9plRDgDb/AhVcFYfyuewSj+YW1CX90FVvHq6/0M5do+Tbkw0LNz6WeOxpQ
CbbxLwobuuYczHkiOhi32DM0FH6gfUau+Um6vGzKjaWIoBD0KR3IYn6qowIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFNPNy1tlrLx4STEm4+c+RWSfo/70MB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzUxOTQ4ZTNjLTM3YTYtNGQ2Ni1hMTcyLTQ2NjU3NjM0ZTA5YS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba8rAwDQYJKoZIhvcNAQELBQADggEBAI71j4P6H5rTYIAPRTEi
vjc6dX8I3WScwRIV4NGpagWgKJkJ01g/NpEygIjkhHG9fUmPazxMa/X5pjaOcnZY
U9GHBacaouURakTMkv2kB2tIWW0DWCTRXqnsUnxwuDX6usk73QHRcPh+MMy+xKHg
jNF/J3jw4ho/4j+07tvgrwOFsNfS7TH8nU3yp8oDt4iq9KhgFZ07KFtg+dc7AfjZ
Losxrhj/2YB0QV/2ndcC5FBtvEUyqthvDauwmAy5RPuIUgRzT1Zpw9JaAUuyXoOo
4+GufTGii+091WOr0r9ts1lN70DKY0ly/sy2EfsgM4/VvtsbSvR/FMzTEU5uALYv
g3o=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:11 2025 by rpki-client