Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fdcda5a-869c-4fdf-9147-e627a374b061.roa
File: 8fdcda5a-869c-4fdf-9147-e627a374b061.roa (raw, json)
Hash identifier: iI69hx8FK+YgM6oC1M1S06G52Jx0zqEPkKOJw2GMhMg=
Subject key identifier: A6:96:A1:04:D2:D2:3C:EA:E2:1B:4F:E5:45:80:29:22:5B:B2:A4:2B
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 6FC5FE8680781E3244F105E6EBB1DA7DF5961DDD
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fdcda5a-869c-4fdf-9147-e627a374b061.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf2:4800::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:c5:fe:86:80:78:1e:32:44:f1:05:e6:eb:b1:da:7d:f5:96:1d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:33:d1:15:19:6b:9d:6c:15:f5:38:fc:98:34:
c6:bb:a3:5f:5f:d6:53:41:07:90:8e:d3:c2:1b:c4:
42:7b:ed:f9:53:55:fe:21:cd:9e:c4:b5:1e:f4:71:
1f:6b:25:77:32:9e:6f:0e:af:28:79:37:20:6e:c0:
c9:c2:96:cc:80:a3:37:19:9d:7b:da:6e:2b:be:6d:
49:7e:f2:f1:2e:28:3f:46:9e:1f:17:79:7d:8a:41:
04:b8:62:41:03:a5:0e:87:0d:ee:20:a1:6e:dd:fc:
4e:85:1b:83:d0:80:03:66:ef:43:ec:6b:74:7d:26:
dc:3a:b1:4a:b9:1c:3b:99:f5:07:66:72:86:c5:b9:
9a:02:dd:bb:57:f2:16:21:0d:41:34:3f:bd:4e:22:
5f:3b:e2:4d:30:03:c8:e5:0c:d4:58:2f:45:b6:cc:
59:d6:b1:49:fe:62:70:da:82:19:0a:2a:bd:61:5c:
77:4d:3a:06:7b:b7:c2:0c:e7:32:69:5c:5b:55:fa:
b8:e9:03:94:23:27:8e:57:86:24:01:f7:7c:1c:1d:
09:b6:67:2b:a3:b3:4f:86:9d:dc:0b:d5:5b:0b:d7:
a5:49:cd:48:f3:6b:8e:20:b1:a7:4e:ee:0a:19:51:
bc:85:19:18:83:fe:b1:cc:0d:97:66:26:8e:a0:dc:
aa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:96:A1:04:D2:D2:3C:EA:E2:1B:4F:E5:45:80:29:22:5B:B2:A4:2B
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fdcda5a-869c-4fdf-9147-e627a374b061.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf2:4800::/40
Signature Algorithm: sha256WithRSAEncryption
b8:b3:7e:cf:ab:6f:8d:6b:59:77:f3:9a:99:37:38:47:d5:93:
0f:23:35:b7:b9:a3:44:65:72:50:4e:1e:dd:91:58:c4:82:cb:
f1:8a:fc:6c:cd:22:af:0b:b7:ba:e3:73:c2:6f:ae:71:4e:80:
4a:25:b2:29:42:ae:41:c0:07:95:49:d9:b7:d9:59:63:44:a1:
24:b0:30:ee:4c:00:d8:c6:d8:96:3c:de:52:db:3b:b9:99:db:
e3:a8:2a:02:fd:04:6b:bd:c0:7e:38:e7:91:8d:5f:50:a9:8c:
41:7a:55:19:ab:5c:dd:0d:e4:c3:bd:47:c3:fb:52:30:8f:23:
84:42:e9:ee:8d:07:db:52:a7:bb:a1:00:00:f8:ac:54:c5:fe:
16:a1:4c:50:ac:5a:68:b0:57:b4:da:7d:20:aa:e8:97:0c:a1:
72:76:43:84:dd:d7:c7:cf:63:1e:1d:65:7a:e6:53:c5:2c:25:
6a:ec:ef:ed:6a:cb:c6:49:90:05:ba:b1:be:4c:1d:6e:f1:95:
51:f2:3e:fc:31:07:6e:1e:78:6d:21:09:b8:60:ce:14:39:40:
4e:52:7d:d2:24:84:8f:cd:4d:46:23:07:ac:e1:bb:ee:40:5a:
a0:71:b4:a5:9d:27:d7:f9:c5:b8:71:af:c9:d2:c1:3b:40:69:
2b:49:b3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:30 2025 by rpki-client