Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77a9f8d1-509c-4f4d-a248-d84efce8e569.roa
File: 77a9f8d1-509c-4f4d-a248-d84efce8e569.roa (raw, json)
Hash identifier: yeLTSjDSAesGBMixdSqTiHG2cJE+Rm1YUVtWDD2ndjA=
Subject key identifier: 01:AD:63:C9:13:AC:65:52:86:B1:6F:D8:78:39:4F:55:DA:28:14:69
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 0C6D1AE06E1DC3E00904561B8EBA00C838E4B029
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77a9f8d1-509c-4f4d-a248-d84efce8e569.roa
Signing time: Wed 18 Dec 2024 00:00:00 +0000
ROA not before: Wed 18 Dec 2024 00:00:00 +0000
ROA not after: Wed 22 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da61:e000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:6d:1a:e0:6e:1d:c3:e0:09:04:56:1b:8e:ba:00:c8:38:e4:b0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 18 00:00:00 2024 GMT
Not After : Jan 22 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:f0:5b:08:55:f5:bb:b8:1a:7e:34:0d:5d:
b0:3b:b7:cf:f3:89:7b:9a:c9:f7:bc:12:0d:a4:f2:
06:d8:41:a3:5d:31:3c:6d:84:44:46:96:32:f0:39:
00:78:05:fb:e1:74:31:69:e4:6e:7b:9d:c3:4d:f7:
e8:3d:74:06:63:0d:fa:ea:42:f9:a6:a7:5d:74:54:
a3:22:a9:40:26:52:37:6c:74:86:e9:93:f4:ea:2b:
d9:f8:6d:e7:b2:69:0c:1e:bd:52:20:c0:89:17:2e:
8b:91:c6:2b:8c:54:d1:ec:78:d6:44:7b:94:63:5d:
91:fe:25:dd:75:99:f3:9c:59:34:8d:9c:bf:b4:91:
2d:bf:bd:da:e8:09:45:11:50:b4:56:20:90:6c:fd:
67:f4:2c:4f:b1:72:94:1d:2e:84:a6:30:a5:f3:e3:
de:4e:da:74:67:c5:1c:e6:47:14:26:da:98:6c:a0:
85:12:b8:1c:98:1c:f3:69:54:8e:17:3d:d3:44:70:
8a:33:f3:1d:e9:92:6f:8f:42:66:39:eb:3b:48:4f:
5d:0c:ea:4c:48:19:ea:09:7f:0e:e4:ce:ed:7d:1f:
00:19:6a:56:e8:b7:b3:a7:8c:ac:66:dd:3e:4c:fe:
5e:bb:37:89:dd:eb:8b:fd:69:15:b2:8e:e2:4b:a9:
ab:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AD:63:C9:13:AC:65:52:86:B1:6F:D8:78:39:4F:55:DA:28:14:69
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77a9f8d1-509c-4f4d-a248-d84efce8e569.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da61:e000::/40
Signature Algorithm: sha256WithRSAEncryption
3c:2c:60:ae:8d:6b:7c:de:55:68:7b:ec:01:67:36:cf:3f:75:
6d:ca:e5:53:eb:9d:85:9f:e3:80:17:49:5a:0a:eb:92:66:a9:
5f:18:a9:af:ef:b5:b9:79:09:74:73:ff:46:59:3f:05:76:17:
4c:87:c3:7b:47:86:17:71:96:c5:c7:a9:20:6e:c1:a8:88:9a:
e4:b4:15:58:c5:7c:15:84:e7:d3:b0:9f:00:e3:cd:76:a1:c5:
cb:4b:e1:bc:9d:29:d7:28:f6:76:4c:8e:53:a6:58:35:10:63:
9c:51:36:df:9e:54:f3:a0:ba:f5:4a:a9:8f:59:df:0f:e6:5c:
9e:c7:4f:ac:d8:b2:cd:0b:0a:b0:61:36:b0:65:2c:52:09:13:
d9:d4:ad:25:d0:2a:7a:9f:13:66:3d:7f:ed:99:25:83:04:33:
71:13:78:01:c3:3d:97:8e:4f:03:ab:05:6d:e9:ff:b8:2b:e1:
f8:77:8e:d2:0e:c7:61:2c:24:f0:8e:38:38:f3:94:d1:bd:75:
02:3e:8f:6f:0d:73:7b:24:ec:83:7b:9d:43:66:71:bf:10:b8:
d9:36:2e:8c:72:17:d9:9e:9e:9f:f6:74:68:ea:57:7b:de:c3:
5a:a5:7a:b9:a4:e9:f9:82:02:ad:2c:27:bc:40:a1:14:6e:17:
7b:38:91:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:08 2025 by rpki-client