Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5bb34d23-2626-486f-a789-4ec80a9dae3c.roa
File: 5bb34d23-2626-486f-a789-4ec80a9dae3c.roa (raw, json)
Hash identifier: x8TyVLUJZ2jJlHphSVM+c+JF6OWS+YuWnPXA+l/rwAU=
Subject key identifier: EC:39:09:27:74:FF:C6:9F:29:06:8B:37:56:F8:91:D9:84:A4:F5:5F
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 1A945529C3894CFFC84F83781A64911CD803D54A
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5bb34d23-2626-486f-a789-4ec80a9dae3c.roa
Signing time: Wed 01 Jan 2025 00:00:00 +0000
ROA not before: Wed 01 Jan 2025 00:00:00 +0000
ROA not after: Wed 05 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf5:c800::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:94:55:29:c3:89:4c:ff:c8:4f:83:78:1a:64:91:1c:d8:03:d5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Jan 1 00:00:00 2025 GMT
Not After : Feb 5 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:40:fc:bf:c5:f0:1a:90:d6:a3:63:ff:15:39:
ce:aa:72:4b:d8:6a:72:77:69:7d:dc:b0:2f:fc:76:
e7:b9:6c:7a:7f:01:73:d5:87:0f:37:cb:3d:d1:84:
1a:ac:89:ac:f4:3d:05:91:d9:3a:fb:98:fb:0f:42:
d8:65:98:e3:4e:3c:5e:d4:09:fa:b6:9f:f8:77:91:
6e:6b:39:a1:01:b4:06:b9:d9:fa:89:5d:cb:98:58:
38:f2:31:e9:7c:f6:3d:12:90:90:ea:bc:4f:5a:56:
7d:38:4f:28:af:5c:89:9e:8a:94:04:ae:06:1b:ba:
b0:7b:4a:e2:7d:a5:91:00:22:f4:9c:d6:7e:42:ac:
58:72:ca:30:db:ba:33:e2:be:12:7e:26:c3:af:86:
24:fc:40:d8:04:2d:34:54:c5:6c:44:a2:b1:9f:07:
04:3b:c5:8a:69:a6:10:df:1b:05:3d:bf:50:e3:07:
60:d7:8f:23:e0:cf:6a:35:a2:0a:f0:49:f8:19:ec:
a3:ae:46:b8:65:af:45:72:96:36:56:88:41:78:76:
20:1a:4e:e4:89:79:07:18:77:3e:8f:d3:fc:ef:5e:
bf:81:90:02:52:b6:c0:56:3e:65:11:da:4d:3a:25:
73:d9:08:bf:9e:eb:f6:d5:1b:7f:71:3a:34:49:3b:
da:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:39:09:27:74:FF:C6:9F:29:06:8B:37:56:F8:91:D9:84:A4:F5:5F
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5bb34d23-2626-486f-a789-4ec80a9dae3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf5:c800::/40
Signature Algorithm: sha256WithRSAEncryption
25:1e:6e:79:2c:2c:e9:d4:3c:ff:4b:24:cb:6f:fa:13:3e:36:
2b:82:e2:46:07:77:42:81:bb:f3:f9:7b:08:54:5d:d7:bf:83:
b3:04:0b:88:c1:3f:9f:84:e2:40:3a:31:2a:ae:2d:b0:7f:70:
44:c0:86:3e:49:d0:c5:1b:3f:9d:96:8f:34:c0:b2:a4:78:ae:
a7:e0:4a:4d:dc:14:aa:c0:37:ca:f7:26:c2:af:d0:a3:dc:88:
6f:cd:59:f3:70:58:fc:5e:b7:76:4c:15:06:d9:46:68:0e:75:
78:41:d7:9c:a7:a4:d4:3a:6a:f9:ad:37:f3:db:49:29:5e:c5:
8e:d3:92:22:4a:84:ab:3a:ea:91:27:1b:24:48:2a:f6:51:da:
df:7c:ad:0a:8f:cd:49:d4:d9:35:10:ea:7b:51:05:3d:86:fa:
c2:f3:f0:73:fb:43:67:ac:a9:9b:0c:86:80:ed:57:2f:21:b7:
32:fd:d4:38:5b:dc:82:4c:cb:81:9c:54:a9:36:e0:76:c0:c2:
eb:25:30:fa:85:a3:84:af:49:77:fa:6d:f0:e5:86:15:03:a8:
a2:dd:d9:07:95:f5:b1:4e:6d:b7:8b:59:eb:9b:9c:d4:d9:e6:
86:40:13:e0:3c:37:23:6f:7f:96:1e:af:be:99:4b:c0:02:7d:
c6:21:d8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:51 2025 by rpki-client