Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b187890-685c-4969-8caa-cdf63b9dfbf4.roa
File: 5b187890-685c-4969-8caa-cdf63b9dfbf4.roa (raw, json)
Hash identifier: z63m2+n2CRfro3+WoEWiU4kPu5oRZ5O29P7wcesMKck=
Subject key identifier: 2F:C9:93:E9:73:B7:BA:21:76:EA:89:5E:7D:53:89:36:33:B4:D9:6A
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 1C380C20265C5CC56F1F3E9293D9819E10A68E90
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b187890-685c-4969-8caa-cdf63b9dfbf4.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da36:b000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:38:0c:20:26:5c:5c:c5:6f:1f:3e:92:93:d9:81:9e:10:a6:8e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8b:a7:12:b2:30:d7:1a:0e:e0:6f:22:36:65:
d1:07:b5:5e:c3:d6:a5:62:d7:0a:ff:62:39:8d:e7:
06:59:58:6c:e4:2f:87:6c:1e:f1:a6:1b:69:5c:74:
1b:79:33:b2:03:c0:e5:ad:6c:fc:04:69:58:5f:0f:
db:71:06:ca:53:c4:8c:50:b7:a0:9d:f1:d6:bb:be:
cc:81:7e:03:ed:27:22:78:66:e0:b5:7d:a1:17:ca:
6b:d5:c9:48:bb:32:98:02:1d:03:be:a3:8d:6a:07:
5a:ee:1e:c0:a9:17:53:3e:29:35:b2:8f:cd:1f:8b:
cf:a1:a9:9e:84:0a:c5:36:08:cb:60:cd:e6:21:8f:
3d:a7:e0:c0:e2:df:8c:04:1e:df:5d:fa:8c:59:c9:
d7:81:e5:f8:cd:a9:73:d4:d9:cb:e3:8c:fc:9b:94:
9c:9b:39:da:e5:27:bd:48:56:3b:3c:be:6b:f4:5d:
06:6b:85:44:ed:1a:ee:36:4c:d7:85:79:8b:04:3f:
1a:8c:54:c3:c7:c4:6f:8c:d7:57:ee:6b:0a:c2:24:
cc:57:e2:58:39:e9:9a:53:f4:08:e3:90:a0:33:8b:
11:98:52:36:60:10:5c:a8:b2:d7:f5:5f:23:ac:23:
6d:0c:0e:71:f3:e7:c7:e9:24:4b:74:c4:f4:3a:2d:
91:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C9:93:E9:73:B7:BA:21:76:EA:89:5E:7D:53:89:36:33:B4:D9:6A
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b187890-685c-4969-8caa-cdf63b9dfbf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da36:b000::/40
Signature Algorithm: sha256WithRSAEncryption
2b:ca:fd:12:b1:f3:d7:66:81:e7:75:e1:ca:3c:b8:d4:b4:42:
c5:49:98:28:e3:21:4b:24:0d:99:c0:7b:50:aa:15:a7:1f:4c:
75:e3:9f:84:7b:09:71:92:34:69:52:c4:16:7c:9a:5f:d3:3c:
da:7a:86:36:4a:7f:e3:fc:93:e8:ce:7b:d4:c7:58:30:58:77:
8c:4f:d2:43:1a:fd:4a:72:df:d0:06:9c:5c:75:d9:00:2f:cd:
85:28:9c:2c:db:a9:2b:3d:2d:9b:ee:7e:a0:23:96:ac:0d:0c:
ed:43:c7:2a:19:c7:ea:c2:dd:6b:de:3f:83:76:c9:9b:20:c7:
11:7a:2a:18:b4:3d:90:c5:e8:a4:12:65:e6:9a:13:1f:c6:5e:
45:30:44:4b:ff:29:5b:90:10:23:90:3d:4c:0c:3d:22:72:0c:
78:55:b9:db:75:78:b2:28:df:36:5e:2d:1c:a1:5d:27:c4:d5:
09:b8:87:72:4d:2c:7a:88:cd:65:0f:b5:42:10:d2:1b:7b:e5:
72:97:e1:be:4d:af:f1:ec:27:5f:12:d1:28:99:81:d5:f7:72:
4b:ed:c0:f4:5b:2c:92:7b:08:32:c0:f2:aa:17:9b:b5:f9:50:
0e:1b:3a:eb:8a:fc:44:33:c0:60:21:6b:d9:68:27:a0:35:0c:
b6:3f:c8:80
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUHDgMICZcXMVvHz6Sk9mBnhCmjpAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTIxNjAwMDAwMFoX
DTI1MDEyMDIzNTk1OVowejFJMEcGA1UEBRNANWIzYWM4Y2E1NDEzMDkyNTE1Njk0
YzQzMWE1ZTg2NjI1ZDMyNjEzNWI0MTM0MThjNTZjNzBhMjM4MjhjMGMzNTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoounErIw1xoO4G8iNmXRB7Vew9al
YtcK/2I5jecGWVhs5C+HbB7xphtpXHQbeTOyA8DlrWz8BGlYXw/bcQbKU8SMULeg
nfHWu77MgX4D7ScieGbgtX2hF8pr1clIuzKYAh0DvqONagda7h7AqRdTPik1so/N
H4vPoamehArFNgjLYM3mIY89p+DA4t+MBB7fXfqMWcnXgeX4zalz1NnL44z8m5Sc
mzna5Se9SFY7PL5r9F0Ga4VE7RruNkzXhXmLBD8ajFTDx8RvjNdX7msKwiTMV+JY
OemaU/QI45CgM4sRmFI2YBBcqLLX9V8jrCNtDA5x8+fH6SRLdMT0Oi2RxwIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFC/Jk+lzt7ohduqJXn1TiTYztNlqMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzViMTg3ODkwLTY4NWMtNDk2OS04Y2FhLWNkZjYzYjlkZmJmNC5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAbaNrAwDQYJKoZIhvcNAQELBQADggEBACvK/RKx89dmged14co8
uNS0QsVJmCjjIUskDZnAe1CqFacfTHXjn4R7CXGSNGlSxBZ8ml/TPNp6hjZKf+P8
k+jOe9THWDBYd4xP0kMa/Upy39AGnFx12QAvzYUonCzbqSs9LZvufqAjlqwNDO1D
xyoZx+rC3WveP4N2yZsgxxF6Khi0PZDF6KQSZeaaEx/GXkUwREv/KVuQECOQPUwM
PSJyDHhVudt1eLIo3zZeLRyhXSfE1Qm4h3JNLHqIzWUPtUIQ0ht75XKX4b5Nr/Hs
J18S0SiZgdX3ckvtwPRbLJJ7CDLA8qoXm7X5UA4bOuuK/EQzwGAha9loJ6A1DLY/
yIA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:58 2025 by rpki-client