Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/66a22d15-e4e0-49c9-b90c-be6a64ee7b7c.roa
File: 66a22d15-e4e0-49c9-b90c-be6a64ee7b7c.roa (raw, json)
Hash identifier: vwnZR49m7vbdUdq8+c89+u25m5Sws4keVg6h6ahijGY=
Subject key identifier: 06:2E:09:7E:C8:F3:D4:F5:59:98:DF:BF:48:0E:5E:AD:52:EA:B3:71
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 59C64E21201EA640C74AB4A1B3C421AD8C2001A5
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/66a22d15-e4e0-49c9-b90c-be6a64ee7b7c.roa
Signing time: Sat 14 Dec 2024 00:00:00 +0000
ROA not before: Sat 14 Dec 2024 00:00:00 +0000
ROA not after: Sat 18 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daff:c000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:c6:4e:21:20:1e:a6:40:c7:4a:b4:a1:b3:c4:21:ad:8c:20:01:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 14 00:00:00 2024 GMT
Not After : Jan 18 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:68:c0:cd:3a:e0:13:1e:74:ec:c9:d9:5c:3f:
62:18:98:78:af:1a:4c:0c:5e:70:3e:34:4f:14:43:
df:a3:a8:a8:56:3a:06:99:95:9d:67:ae:13:5a:e0:
91:7b:31:e4:40:28:70:6f:1e:e0:d7:4f:a4:0c:30:
0b:a0:09:7f:98:bb:06:1e:61:f4:bc:37:f0:37:7a:
4c:49:b4:60:5b:43:58:71:06:ce:16:ee:3d:ae:0c:
22:04:9a:8a:42:1f:cf:29:ec:b4:0d:83:2a:40:45:
c8:87:2f:48:90:7f:cc:75:c9:40:8b:2b:c3:d8:d9:
eb:36:6e:80:44:fa:12:53:81:cf:6e:af:f2:28:c7:
6c:0d:77:16:12:f2:40:1f:84:5f:56:7d:d9:1c:e7:
df:31:4e:6b:d3:51:29:bb:b0:46:1b:b6:34:6a:5e:
e5:a5:ed:6f:98:d3:ee:b7:c9:f7:3f:b3:91:ca:c1:
b4:e1:8c:dd:36:0a:c3:bc:e2:b7:ac:d4:53:25:e9:
5f:92:96:de:2d:3c:d5:6b:2b:84:c5:9d:7b:be:59:
73:d8:9c:4f:24:79:78:56:68:5c:94:b4:99:51:dc:
d8:22:e6:e5:03:ae:66:b1:06:c9:91:0a:e5:17:e9:
e1:96:4d:0d:90:ea:c1:4e:32:6d:b6:ec:7f:77:fd:
39:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2E:09:7E:C8:F3:D4:F5:59:98:DF:BF:48:0E:5E:AD:52:EA:B3:71
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/66a22d15-e4e0-49c9-b90c-be6a64ee7b7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daff:c000::/40
Signature Algorithm: sha256WithRSAEncryption
c8:8e:e7:c4:d3:99:e4:6f:e3:9f:9a:f1:16:20:a0:f9:80:b6:
9d:b0:e8:91:82:7a:dc:8f:9f:27:13:1e:29:3f:a6:a1:3e:fa:
1e:fe:c9:ad:76:32:a5:7a:45:c2:42:57:83:3b:98:35:d4:e8:
3f:4f:ad:ce:00:68:39:ce:69:80:03:33:67:fe:ae:8c:fc:72:
4a:29:92:ab:b2:ff:ae:99:cc:6f:43:9f:41:9a:09:f2:24:70:
ef:a9:22:a7:af:b6:45:0f:6c:6a:c5:66:50:fd:63:9f:19:8f:
54:ba:3a:4e:bc:8f:fa:b0:5b:e2:66:f8:b2:83:ca:27:a6:6e:
2e:7f:03:22:37:c9:c0:3d:11:31:f3:3a:79:9e:c1:92:60:43:
27:99:96:3e:d9:e9:91:c5:5d:d6:f5:85:2f:fa:99:eb:4b:90:
74:4b:80:90:df:06:c6:d5:a6:e4:25:78:f1:1d:5b:59:c7:cb:
ea:bc:27:ed:51:4d:bc:7b:46:c9:3b:ea:3f:21:08:38:34:8a:
17:dd:af:b1:02:14:45:c6:55:c9:2c:48:e7:05:87:2b:75:36:
bf:b1:53:73:07:9c:d6:e9:0c:2e:be:dd:dc:87:fc:eb:b5:f5:
20:80:a0:19:a8:1c:7c:6a:fa:92:50:1f:28:a5:e3:e7:40:6b:
52:f0:4c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:53 2025 by rpki-client