Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6844e4f5-7a9a-4b20-a5cb-36ce4a8e6507.roa
File: 6844e4f5-7a9a-4b20-a5cb-36ce4a8e6507.roa (raw, json)
Hash identifier: 29+tyE4FBMb5FA0U8jsQonzyD7ziljjTUvlUxKuqkwc=
Subject key identifier: 0B:76:59:74:3F:0E:00:7F:31:EA:BC:81:20:4C:CD:47:BD:99:70:27
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 2BC39C8EB512BF270A6A82C89CE413621539C93C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6844e4f5-7a9a-4b20-a5cb-36ce4a8e6507.roa
Signing time: Wed 01 Jan 2025 00:00:00 +0000
ROA not before: Wed 01 Jan 2025 00:00:00 +0000
ROA not after: Wed 05 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf7:80c1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:c3:9c:8e:b5:12:bf:27:0a:6a:82:c8:9c:e4:13:62:15:39:c9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Jan 1 00:00:00 2025 GMT
Not After : Feb 5 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:19:1f:cd:a1:b9:7d:06:e5:9e:38:77:a5:e7:
46:1c:16:e3:d5:1d:b3:fd:1e:f5:f8:fa:6f:77:85:
e9:91:cb:91:e8:91:bd:0d:da:d3:1f:c4:0a:0b:e0:
86:96:d1:a3:ec:f5:b5:e8:0b:3a:3d:fb:09:d9:a1:
49:77:d5:1d:74:c3:a4:30:35:4f:16:27:03:c4:63:
20:e6:ba:ae:50:53:46:88:cc:80:65:87:4b:8f:0b:
99:93:34:0f:67:8d:a1:97:ab:9f:67:2b:59:2d:db:
2d:e4:b9:7f:6c:d7:fb:fa:2e:5a:95:f2:b2:b1:c3:
50:b8:c8:25:a0:f9:b2:c7:6d:7f:86:cc:78:00:d8:
d7:e1:ad:52:d2:c8:1b:9f:56:d4:fc:6c:9b:4d:78:
fd:e5:0c:42:97:41:df:73:4f:3a:70:14:6a:d8:e5:
15:67:cb:bb:d4:13:f6:d5:4d:ba:01:12:f4:c7:ba:
ea:f5:26:3d:c3:f7:ee:91:2c:59:d6:72:38:59:73:
13:60:2f:ab:a0:3f:6e:9c:dc:46:8b:95:26:a5:31:
11:f0:f7:51:06:58:16:12:10:9a:de:13:a8:30:44:
34:6e:06:0f:b4:2d:99:f3:b2:b3:34:e6:df:2c:a8:
82:b6:67:9e:91:4c:4b:f2:2f:9b:29:b9:6f:c2:b6:
ed:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:76:59:74:3F:0E:00:7F:31:EA:BC:81:20:4C:CD:47:BD:99:70:27
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6844e4f5-7a9a-4b20-a5cb-36ce4a8e6507.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf7:80c1::/48
Signature Algorithm: sha256WithRSAEncryption
70:1b:f1:a4:02:cf:24:83:65:7f:ff:68:95:2e:f8:ba:63:39:
aa:c0:e4:21:71:c5:a9:d5:06:23:3f:30:f4:aa:bc:7b:07:eb:
af:9d:52:1a:4f:99:32:7a:f4:4e:41:66:cc:9d:97:70:22:0c:
91:3c:8a:32:c0:2f:4a:fe:2c:94:fa:6a:21:2a:74:83:97:ff:
a8:63:19:d3:a4:99:a5:14:f4:92:98:84:78:34:ba:cb:f7:95:
af:95:b9:db:43:35:d2:91:3b:1f:00:e6:52:7e:e5:9f:b5:88:
18:7c:d7:87:4f:3b:05:4b:5c:c5:b3:14:30:84:57:93:d7:42:
d8:ab:9e:35:af:67:d6:cb:63:cb:79:55:5b:26:95:4d:ac:6d:
d1:c9:d2:3c:01:48:15:6c:2b:8e:63:b5:2f:64:a5:e3:98:79:
42:63:a6:1c:7e:3c:a0:e2:2a:a5:df:13:c3:70:4b:d4:bc:c4:
d7:db:62:e7:54:e1:4e:85:c5:d8:8b:a1:ae:96:ea:62:f4:82:
15:3d:86:d5:2f:a0:4a:01:01:da:bc:17:63:dd:45:96:9f:87:
a2:d2:0d:af:ba:09:7c:35:96:20:db:43:6a:46:74:46:da:3c:
1b:bb:49:5a:01:71:3d:d0:0d:1f:3c:55:d4:3f:33:96:d8:8a:
1f:70:61:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:29 2025 by rpki-client