Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/671d95a3-c003-4a86-88c6-405cd8ceff9e.roa
File: 671d95a3-c003-4a86-88c6-405cd8ceff9e.roa (raw, json)
Hash identifier: wNF8buuoGfSv6nefwpDuVED235/wwJNsRCNr4AFrW+o=
Subject key identifier: C2:CF:62:32:9F:3F:40:D5:03:43:7A:30:C3:D5:57:FE:95:4F:1F:36
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 54743B72E923775F20764F2FEADB336D6E11499D
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/671d95a3-c003-4a86-88c6-405cd8ceff9e.roa
Signing time: Sat 08 Mar 2025 00:00:09 +0000
ROA not before: Sat 08 Mar 2025 00:00:09 +0000
ROA not after: Sat 12 Apr 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2406:daef:c800::/40 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:74:3b:72:e9:23:77:5f:20:76:4f:2f:ea:db:33:6d:6e:11:49:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 8 00:00:09 2025 GMT
Not After : Apr 12 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8f:8d:8b:71:f9:99:a7:82:a5:66:b8:a8:90:
e8:05:11:12:80:7c:d0:72:e9:bf:4c:52:d4:dc:69:
90:e4:80:74:44:16:4b:48:59:75:59:e9:40:e0:57:
ab:fb:b3:9e:9b:f1:e2:13:f1:50:d5:98:15:75:bb:
41:e9:2b:6a:bc:c8:25:27:61:50:01:e6:b0:56:bb:
63:45:02:19:ff:0f:a5:7b:8f:c4:63:0d:08:f3:b4:
f9:ce:77:dd:5e:44:23:af:66:8c:cf:34:bb:0a:26:
e0:7b:46:6a:e7:0b:ea:c6:c3:a5:44:61:f9:20:64:
5a:53:07:33:9b:78:d5:17:af:75:cf:10:02:09:ad:
2b:ef:1f:f2:c9:35:43:ba:19:63:6a:53:27:1a:60:
84:34:b2:d1:32:1b:47:65:ca:e2:df:a1:6a:36:4b:
4c:fc:36:8a:1c:38:72:1b:e6:c9:d5:7b:f8:31:3c:
9d:f2:11:a4:a0:cb:a9:97:ac:04:8c:69:13:56:f3:
ba:bf:fb:8e:3b:e2:7b:5b:5f:36:ac:83:89:00:be:
d4:48:7f:24:ff:d7:f7:0b:7c:f6:5f:f4:02:a7:5a:
85:fd:2f:63:3f:1e:01:0e:1e:72:a7:05:53:c2:8c:
3e:df:f9:a0:16:b2:33:f0:61:93:39:19:64:db:9b:
ae:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CF:62:32:9F:3F:40:D5:03:43:7A:30:C3:D5:57:FE:95:4F:1F:36
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/671d95a3-c003-4a86-88c6-405cd8ceff9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daef:c800::/40
Signature Algorithm: sha256WithRSAEncryption
77:1c:0e:84:3c:55:6c:81:53:a7:36:5d:46:06:aa:02:6a:c5:
10:f1:89:0b:79:fa:f2:b0:a9:8f:78:68:b9:b1:e3:b6:fc:10:
d4:7d:de:3f:6c:97:48:df:80:28:8b:cc:3d:24:dc:fb:d1:1c:
1b:fb:76:3b:fd:7e:46:5a:8f:b9:36:ba:2b:80:6d:0d:d8:cc:
1d:3a:be:e7:38:e4:6a:22:4e:c1:0c:27:34:ca:f1:18:ac:6e:
fd:c1:63:0e:6a:79:ae:a1:cd:86:da:f6:c9:86:5d:16:08:d5:
fe:5d:d6:9e:e9:00:ec:b4:b1:87:11:63:8c:7b:da:1b:15:3a:
72:3a:55:b2:53:ca:77:58:28:e3:07:b8:0f:92:60:ad:b8:e4:
4f:ef:4c:6a:ca:b4:ba:1c:b4:92:d9:25:a1:55:bb:89:24:c4:
77:fa:71:a8:58:79:f4:ed:2c:cd:2f:d0:3f:77:e7:bb:48:4f:
54:ab:28:6b:8c:13:e0:0c:ce:65:ad:8f:f5:87:c7:73:a1:b2:
b8:35:41:fc:1c:68:02:ec:13:5a:04:7e:a4:06:63:72:a1:66:
08:f9:b0:26:08:a6:54:74:31:56:7f:16:7f:37:b6:e9:a9:31:
bd:8e:fd:68:01:e8:85:dd:3d:c3:4a:f5:a9:de:1b:a0:91:b0:
d1:e8:e5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:31:22 2025 by rpki-client