Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6460c9b3-6c43-44da-84d4-a94399a0241b.roa
File: 6460c9b3-6c43-44da-84d4-a94399a0241b.roa (raw, json)
Hash identifier: iLB4eZeUuRhWzacjSHgwhBnylMq/+mbWbxdROt8szck=
Subject key identifier: 70:0A:19:6A:07:22:3D:55:FC:31:AA:18:F7:AD:64:EF:42:D7:5D:25
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 55120A99625CED2EE9935D5BFFACF13FCD8255B6
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6460c9b3-6c43-44da-84d4-a94399a0241b.roa
Signing time: Wed 18 Dec 2024 00:00:00 +0000
ROA not before: Wed 18 Dec 2024 00:00:00 +0000
ROA not after: Wed 22 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf0:6000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:12:0a:99:62:5c:ed:2e:e9:93:5d:5b:ff:ac:f1:3f:cd:82:55:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 18 00:00:00 2024 GMT
Not After : Jan 22 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f3:31:af:8f:24:09:1a:bd:44:fd:7d:a7:cc:
96:80:07:b4:ba:ed:de:43:3f:2f:97:e6:10:cc:61:
32:45:af:e9:bc:bf:df:15:f5:a1:e4:5c:3e:40:19:
29:d2:8c:7a:41:ff:0a:e1:df:fc:ae:82:44:dc:2b:
ad:55:11:bd:88:b1:b2:e1:3c:ab:d7:88:73:9f:74:
8c:63:75:16:27:5f:64:20:31:76:3f:c2:51:07:3a:
39:32:ba:97:e4:82:3c:2a:9b:37:93:bd:88:e5:72:
8a:6a:e4:65:e4:7c:6d:97:3d:52:02:cb:ff:3d:0a:
96:3a:f3:91:bc:5b:ce:b6:0f:87:90:09:aa:07:30:
b9:b6:16:db:ac:54:f1:39:c6:ab:69:d7:7c:37:40:
ee:85:36:cb:e2:49:16:32:c3:4f:73:31:f2:c3:3c:
27:7f:82:58:53:52:89:da:4e:0b:f6:ec:0b:a5:19:
ed:17:a0:e2:20:97:b4:ba:ac:03:26:56:db:2f:3c:
82:bd:76:68:ab:df:ad:8f:a6:33:c7:aa:fd:4c:4e:
2b:af:f8:99:9a:84:aa:02:ce:b2:2b:7c:86:a4:11:
16:f2:c2:a3:93:5c:6a:c2:bd:58:54:d3:cf:a3:f1:
2e:86:10:ad:b7:64:2c:5e:27:83:a1:e2:6c:8f:c3:
22:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0A:19:6A:07:22:3D:55:FC:31:AA:18:F7:AD:64:EF:42:D7:5D:25
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6460c9b3-6c43-44da-84d4-a94399a0241b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf0:6000::/40
Signature Algorithm: sha256WithRSAEncryption
a2:80:a1:96:04:fb:9e:f2:d4:fd:b9:36:38:ff:3a:0d:34:4a:
e1:a9:af:51:4f:c8:5c:15:6d:bd:fc:da:f5:d5:74:63:97:e0:
9d:8a:76:fd:ee:5e:8d:2b:3f:49:ee:b6:d7:eb:42:0a:11:1b:
a7:43:75:52:21:90:0c:8f:53:91:48:4a:e2:fa:d8:80:0f:e2:
96:ee:25:58:95:8c:1e:ac:06:33:71:11:0f:b6:ab:ec:92:55:
76:8d:c7:49:c1:5c:5e:47:94:bd:3c:36:b1:ba:d0:c1:87:17:
c0:0e:48:14:8f:bc:89:cf:0c:6a:44:a2:75:8d:b2:91:64:f4:
70:c2:b5:2e:35:96:f9:7a:4b:d1:b5:b8:36:99:95:dd:2e:5b:
71:0b:60:cf:02:82:3a:65:60:96:19:86:28:ea:43:66:44:03:
a4:64:5a:ad:3f:26:b8:b7:ce:7c:fb:29:fa:5c:ad:26:28:31:
87:12:a6:15:34:85:d8:4b:4b:ef:cd:71:80:34:52:d6:0a:c1:
e9:7c:1c:ee:ff:24:16:0b:e6:dd:26:72:ba:3d:df:ad:07:6b:
36:cb:d1:28:9d:c1:48:3c:36:33:eb:d9:01:47:6b:74:0e:83:
67:3f:66:1e:30:df:f3:d9:72:e9:6e:c0:70:59:20:83:99:f8:
ba:69:a3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:39:31 2025 by rpki-client