Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e3bbb66-0246-4c16-ac30-46380740bfd9.roa
File: 6e3bbb66-0246-4c16-ac30-46380740bfd9.roa (raw, json)
Hash identifier: OY6I2YG9WN/OO/tIhcfvS8v1t3fnUYQbi2Ysec8wwRM=
Subject key identifier: 2C:60:91:95:AB:1D:3D:9B:B4:E5:04:EB:55:7F:02:A6:1D:10:F1:E2
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 3B699F42C5E17475ABCC3D7AF0ACC9542ADC9FFB
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e3bbb66-0246-4c16-ac30-46380740bfd9.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf0:7000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:69:9f:42:c5:e1:74:75:ab:cc:3d:7a:f0:ac:c9:54:2a:dc:9f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:07:7f:13:ad:ac:f2:8c:cf:7c:0e:f0:89:9c:
b2:60:a6:01:da:e6:27:72:82:a6:20:aa:61:8b:6d:
da:48:88:c2:15:3d:8c:ee:c6:90:32:80:47:b9:0f:
69:fc:43:78:90:b5:07:02:12:91:74:38:d4:60:b0:
3d:69:3e:15:f9:da:07:84:7d:0b:0c:77:ff:3d:05:
a4:cb:7b:46:e3:02:d2:39:05:03:b0:a3:ae:2f:b7:
ae:54:9f:ff:38:05:0e:4d:d1:66:95:cb:e4:86:7d:
cc:8e:84:51:7f:22:30:cf:f1:ae:bc:c7:3c:b4:7a:
24:bf:74:02:1e:f9:ee:46:4d:1a:63:cf:9e:0e:44:
3e:62:55:85:8b:90:ee:8c:cf:b2:12:58:77:5e:98:
f3:0b:59:67:f6:d6:91:3d:c6:c9:6a:04:32:5c:76:
2b:b0:83:47:2f:57:7b:31:ec:45:fc:9f:7d:a8:73:
a3:10:8c:04:8d:b1:dc:fa:39:e9:c3:80:64:41:0d:
17:9a:23:d2:a9:ae:36:64:23:15:88:38:61:c3:72:
ad:66:57:b5:1e:f1:8b:60:97:f4:ca:6a:91:91:41:
f9:1d:3d:ce:b3:5f:b2:d3:6b:16:97:58:2a:fe:f0:
13:b6:fb:16:8d:03:77:d1:b8:72:1f:d2:54:92:de:
a2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:60:91:95:AB:1D:3D:9B:B4:E5:04:EB:55:7F:02:A6:1D:10:F1:E2
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e3bbb66-0246-4c16-ac30-46380740bfd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf0:7000::/40
Signature Algorithm: sha256WithRSAEncryption
cb:fb:cb:0c:a4:59:cf:c9:c4:63:1c:cd:04:e7:06:9c:8c:21:
0b:4a:47:d5:03:fc:76:80:95:79:72:76:e0:dd:21:7b:6b:ac:
77:8c:28:f7:3a:e5:36:29:8d:c7:77:a2:fe:db:04:12:58:cf:
86:cf:97:95:ab:db:26:b8:79:c7:01:ff:4e:a0:80:b2:e9:b8:
78:83:1f:e3:a6:75:02:5f:4f:81:52:c3:4e:5c:76:17:21:aa:
87:d6:12:d3:d4:45:b4:26:20:98:e1:0d:b7:44:ea:8e:5a:5e:
01:8f:82:ab:05:42:12:40:7c:d5:74:88:6b:d6:6d:4e:84:19:
87:7f:36:bb:86:18:0e:43:cb:33:88:1f:95:80:06:2f:e8:09:
4d:8a:96:70:6c:64:4e:d4:ae:f2:61:d9:72:a3:5f:79:52:84:
0b:db:8d:32:90:5c:8c:e3:13:33:2a:af:2e:9b:0e:5d:15:bc:
3b:d9:6d:33:b3:40:91:5b:7f:00:08:74:9d:97:ac:8a:40:f4:
8a:0e:5d:e0:b2:de:78:7d:cd:2c:cd:67:5b:56:3e:f4:4e:fc:
44:62:da:3e:37:42:b9:18:b6:c4:90:33:3b:12:9e:d7:db:ad:
76:80:ef:73:5f:99:f4:7e:37:1a:94:42:b4:c0:30:ea:86:49:
b4:17:c6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:34 2025 by rpki-client