Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/75bbbb98-6cd7-4ba1-ad79-bb09021a8497.roa
File: 75bbbb98-6cd7-4ba1-ad79-bb09021a8497.roa (raw, json)
Hash identifier: oxkMS63OUjB6g38m/f6NN3T5HLfzsrjy5upsYHoWy5U=
Subject key identifier: 65:1B:74:21:06:5F:50:35:2F:95:58:68:55:FC:E8:75:C4:15:13:D2
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 2AFB65466D00635D1A42849D9695387807AA2157
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/75bbbb98-6cd7-4ba1-ad79-bb09021a8497.roa
Signing time: Tue 31 Dec 2024 00:00:00 +0000
ROA not before: Tue 31 Dec 2024 00:00:00 +0000
ROA not after: Tue 04 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da00:c800::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:fb:65:46:6d:00:63:5d:1a:42:84:9d:96:95:38:78:07:aa:21:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 31 00:00:00 2024 GMT
Not After : Feb 4 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6c:f0:ca:f3:59:22:61:e9:28:cb:f2:b2:ab:
d1:84:2d:26:5c:92:d4:6f:b3:d0:e8:92:c1:2f:13:
b2:eb:b6:1f:3a:89:4a:a3:16:45:20:9d:68:c1:98:
7c:16:c0:e1:b8:62:37:f1:6c:96:99:2d:bb:27:d6:
04:87:d5:1d:8d:6a:c4:91:db:16:e4:fc:75:3c:53:
00:fc:3c:57:20:bd:64:c2:a5:40:d9:d1:fd:44:be:
bb:51:ab:06:f6:94:54:b1:98:e4:db:65:70:53:3a:
84:c1:3a:39:5a:65:e3:60:04:77:fa:35:90:45:81:
c8:59:46:b1:0b:55:90:7f:88:c8:b5:a5:a8:8d:7c:
89:65:6e:76:80:c0:72:db:67:0a:f3:93:68:5d:c5:
a7:2e:48:5b:e1:e7:a9:a5:2a:ce:b3:09:37:85:bc:
9d:b2:f9:29:fb:3d:30:0d:59:d0:44:02:c1:58:2a:
1a:1e:1d:38:17:0b:a8:09:06:b2:a3:d9:5c:e1:7b:
76:47:63:08:16:d5:82:51:c4:7d:21:53:7b:13:45:
b1:49:30:3b:a2:97:ec:b9:ad:ca:97:c9:8e:86:d1:
c3:d1:b0:60:f9:d5:14:b3:c9:89:8d:aa:bb:42:dc:
d8:d9:6b:00:6a:02:11:0d:d2:4f:b3:a5:76:9b:f0:
52:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1B:74:21:06:5F:50:35:2F:95:58:68:55:FC:E8:75:C4:15:13:D2
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/75bbbb98-6cd7-4ba1-ad79-bb09021a8497.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da00:c800::/40
Signature Algorithm: sha256WithRSAEncryption
46:8a:f8:c7:38:f9:25:3f:65:aa:e6:32:e4:29:78:32:f0:87:
e8:e5:35:0b:96:53:09:56:4b:ef:14:ea:e2:2f:33:91:44:fe:
68:f7:c7:f3:70:c1:d6:49:0f:49:a0:c5:07:3d:ac:2d:b4:d1:
81:11:16:24:d1:a3:5f:e0:b2:3f:34:b0:21:6b:75:7f:66:a9:
ad:1c:dd:00:0b:60:52:c2:eb:c5:fe:86:d3:22:bb:77:55:06:
20:d3:23:23:89:c9:61:4c:a2:e5:43:54:96:dc:65:3e:81:a3:
ce:70:f7:7c:ee:ca:cf:09:83:69:25:33:4e:74:2b:11:f7:2d:
a6:10:83:a9:fd:19:57:5f:ea:fc:05:bf:3f:a7:6b:d6:8b:f3:
db:3b:93:38:22:ee:e0:f6:c6:4e:3a:ab:f4:a8:15:b4:19:8f:
4b:5c:c3:e4:53:45:c1:05:49:cc:45:ab:3a:db:0c:fc:ae:14:
e2:d2:57:cc:1e:db:00:f0:e9:8f:22:f1:7b:e8:27:c2:47:52:
e6:4e:3f:f9:67:ed:82:07:51:5b:1a:40:c1:77:79:05:43:c2:
4d:04:0a:24:ca:c7:77:f3:d9:e3:10:7f:a1:16:38:46:a4:57:
09:db:05:46:a8:fe:f5:65:6c:0b:0d:29:64:94:51:e4:6c:c0:
0a:8c:9d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:17 2025 by rpki-client