Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6fc682a9-47d4-4d99-aa1c-6d6d42a5717e.roa
File: 6fc682a9-47d4-4d99-aa1c-6d6d42a5717e.roa (raw, json)
Hash identifier: GlZBuO19lppPdFXwpIBeyQ9kt5PFVNqN47wZDM4cCNk=
Subject key identifier: 6D:1B:B4:25:3C:43:1C:5A:2C:8A:B0:E6:6F:3A:56:CE:F3:1C:9C:F4
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 0E9C8E3C784634741E597166D280C352B601ED8C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6fc682a9-47d4-4d99-aa1c-6d6d42a5717e.roa
Signing time: Wed 01 Jan 2025 00:00:00 +0000
ROA not before: Wed 01 Jan 2025 00:00:00 +0000
ROA not after: Wed 05 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf7:8000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:9c:8e:3c:78:46:34:74:1e:59:71:66:d2:80:c3:52:b6:01:ed:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Jan 1 00:00:00 2025 GMT
Not After : Feb 5 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:e2:5f:52:12:69:61:23:32:09:34:44:35:
cb:4b:37:27:28:8b:1f:c4:13:01:8b:b9:6f:06:75:
fe:7a:71:71:60:25:49:aa:69:4e:e6:fa:e6:f0:6e:
e0:60:f8:b0:5c:48:d6:40:cb:b7:9c:c9:c1:23:9d:
f8:96:37:ef:cb:56:36:e4:64:81:cd:c1:4e:a1:56:
29:fe:89:21:cd:b0:8c:ec:b8:4f:59:8c:b0:b0:b5:
e5:38:7e:48:05:a6:06:35:8d:93:ce:59:ea:43:77:
4f:c8:7f:46:f4:8a:89:f4:ff:65:57:41:50:71:28:
50:75:f7:6f:a7:f3:8c:7e:81:a4:40:23:17:f9:95:
c6:06:eb:00:de:0a:38:52:43:f0:5b:24:89:72:92:
b7:f4:e5:76:55:e2:01:46:9c:1d:f8:bc:f7:de:b5:
a9:e9:c4:a7:c7:e2:fd:80:39:cd:9e:c9:c7:bc:09:
d8:3c:a0:23:4e:ec:46:50:3a:2c:1e:b4:cc:d3:79:
28:5d:ad:de:f2:9f:05:22:a7:23:8f:77:8f:fa:6e:
05:9c:ba:1a:13:ce:f3:44:d7:96:58:12:cb:5a:49:
8c:99:65:9a:5c:fd:6e:2d:a5:bc:49:4e:b7:9a:6e:
e9:c3:ea:62:76:da:a7:e6:2b:3b:a9:41:e2:33:ee:
f3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1B:B4:25:3C:43:1C:5A:2C:8A:B0:E6:6F:3A:56:CE:F3:1C:9C:F4
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6fc682a9-47d4-4d99-aa1c-6d6d42a5717e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf7:8000::/40
Signature Algorithm: sha256WithRSAEncryption
c2:c4:ce:4f:3c:81:e4:58:80:f5:d9:cd:52:8a:aa:42:29:02:
fb:41:97:76:b8:26:1c:ad:97:a7:10:d1:00:1a:31:fc:00:8b:
07:1f:74:b6:9e:1b:2c:ee:3e:1c:cb:d9:07:54:0d:9b:e6:72:
b4:00:23:fb:2e:73:55:9b:61:65:ca:b1:b8:05:0b:54:89:e1:
83:44:fd:4c:84:e3:8e:4a:91:51:cf:ab:78:02:fa:4a:5f:bf:
cb:d8:67:55:c9:ce:3f:b6:88:c8:9e:81:43:28:33:d8:4c:6e:
6e:78:c8:55:f0:c3:30:3f:78:60:82:54:58:cc:ec:b0:5f:a7:
dd:54:f5:f8:2c:5a:cf:d7:cc:2e:ea:5d:1e:ba:2c:2d:cc:94:
15:03:51:42:17:52:3d:01:62:ad:ac:fe:32:76:42:e6:4f:ed:
8e:87:5a:ed:b2:06:2c:90:d5:a5:76:a0:f2:68:48:bb:e9:56:
af:b6:45:ba:a1:32:21:b5:70:04:db:f1:dd:07:ee:a2:6a:9d:
b4:3a:7d:99:97:bd:c7:a8:7b:84:dd:25:7d:89:e1:a0:40:8c:
e2:2e:1d:00:c9:ec:d5:fb:bb:7c:a9:3b:16:10:03:db:43:79:
0a:4d:01:29:de:13:f6:b7:c0:63:35:d6:44:a9:a5:70:c4:7d:
46:dc:b3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:51 2025 by rpki-client