Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8c8a33d0-bd84-4de2-b341-d71e7eb325f2.roa
File: 8c8a33d0-bd84-4de2-b341-d71e7eb325f2.roa (raw, json)
Hash identifier: ohguLXDF19T0fNUWgu9tU0XWEAxvw/XKynoUy4yPS+8=
Subject key identifier: F7:AD:3B:1F:94:22:A3:76:CC:4B:CE:6B:42:C3:7E:DF:8D:F0:B5:F9
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5997F9B2D4B89FE0739C46EE5C2A5DB7E3382E2D
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8c8a33d0-bd84-4de2-b341-d71e7eb325f2.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da32:9000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:97:f9:b2:d4:b8:9f:e0:73:9c:46:ee:5c:2a:5d:b7:e3:38:2e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:2b:73:28:5f:21:09:2a:4b:c7:74:56:c9:
eb:d4:06:bd:bc:09:10:58:5b:84:ff:a1:8f:28:11:
99:6b:17:f3:01:19:52:52:14:8f:39:e6:c3:a5:4b:
5a:c2:bd:15:b4:4c:b8:c2:b4:a7:e2:1c:57:21:34:
92:16:cd:68:5c:5f:02:8e:4f:73:03:58:78:96:37:
d0:72:34:e1:09:86:17:4a:1c:28:a1:1d:af:a4:25:
e4:0f:75:6f:24:5f:18:fa:b5:89:7d:8c:64:90:87:
53:70:eb:da:d7:5b:7a:62:ac:7e:4f:3a:7c:82:15:
95:2d:75:c2:e7:53:3c:25:21:0c:d3:72:9e:c4:ef:
a3:33:fa:5e:fc:0c:73:1a:5b:64:f1:d6:d6:29:f0:
fb:28:57:cc:61:2e:66:b9:4b:30:f1:4f:99:06:aa:
a6:22:df:f3:a5:93:82:dd:cc:d0:80:b0:c5:9e:90:
e4:a5:10:a9:0a:ad:76:6c:f5:6a:90:62:5f:17:2a:
96:ce:1c:a0:5c:e4:3f:5c:98:fd:74:77:3c:c4:1b:
03:83:b7:2e:ce:00:fa:8d:cb:ed:0d:9b:39:dd:ba:
80:c8:81:7d:d9:5c:b2:01:2d:0f:30:26:74:04:c5:
bb:ff:48:dd:e8:42:9d:7f:4b:32:f8:22:0b:ad:9c:
fa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AD:3B:1F:94:22:A3:76:CC:4B:CE:6B:42:C3:7E:DF:8D:F0:B5:F9
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8c8a33d0-bd84-4de2-b341-d71e7eb325f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da32:9000::/40
Signature Algorithm: sha256WithRSAEncryption
2b:0d:bb:e4:30:fd:d4:6c:42:33:62:70:6a:9a:77:be:b0:4c:
ae:c9:bf:8f:42:f1:7d:6f:95:ce:da:ad:f3:7d:61:ae:5e:6a:
c9:e6:2c:76:12:b5:39:0d:0a:49:4c:e1:51:f6:61:1f:9d:89:
29:d2:50:23:b7:23:c1:b2:f2:df:36:44:c1:26:5b:25:2b:05:
92:43:4d:b9:d4:a1:cb:0f:ab:b8:aa:ed:09:36:af:4d:f2:a0:
40:b1:66:f6:07:6c:41:41:4b:39:3e:b6:7b:78:6c:fb:3e:bc:
ae:97:10:91:3d:e5:fd:e5:73:80:bd:c2:fd:03:e5:2a:d8:7e:
42:96:b8:b9:8e:52:c6:22:79:6d:6d:48:59:5b:62:75:93:89:
ac:13:29:d3:60:86:e4:50:0c:89:a2:db:92:59:03:58:79:32:
10:0e:8a:9b:3c:ab:e2:4e:27:c5:ac:d9:d8:d2:a6:09:43:f1:
5e:d9:df:b9:4b:be:e0:d3:8f:be:20:7e:2c:92:09:83:ae:de:
a5:55:06:05:b3:77:34:f4:13:e4:3c:8e:e1:4b:0c:7c:27:6d:
67:03:82:6e:5c:b0:28:b3:73:d1:7e:29:32:5e:ed:90:6b:b5:
26:04:bb:49:60:e8:b8:d2:36:35:e1:e8:1f:46:ba:06:ab:c9:
5f:fc:18:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:14 2025 by rpki-client