Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fe19152-7abd-42e4-92e8-3f1518eeed7d.roa
File: 8fe19152-7abd-42e4-92e8-3f1518eeed7d.roa (raw, json)
Hash identifier: 0GYm6Wiefhk5IaJ4X8GVhj4Wue+QE7/LiP7ta0T+w3Y=
Subject key identifier: F0:E7:D2:06:62:52:05:6D:4D:9D:6E:72:88:D6:E0:D2:9A:E9:62:39
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 0E467863FB883B0DC61D0C03EE2798D1178DAEBD
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fe19152-7abd-42e4-92e8-3f1518eeed7d.roa
Signing time: Wed 18 Dec 2024 00:00:00 +0000
ROA not before: Wed 18 Dec 2024 00:00:00 +0000
ROA not after: Wed 22 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da1a::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:46:78:63:fb:88:3b:0d:c6:1d:0c:03:ee:27:98:d1:17:8d:ae:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 18 00:00:00 2024 GMT
Not After : Jan 22 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:14:0f:6f:fd:c4:b8:6b:5f:f4:49:d4:83:
fc:88:71:ca:e0:fc:dd:6a:99:3c:f1:69:c9:f8:1f:
07:58:e4:a9:ea:ab:8b:d7:6a:3f:60:4e:bd:85:31:
37:f5:82:60:30:35:77:7f:54:ed:8c:83:eb:e4:65:
89:cf:b4:a4:d7:a1:03:f2:9f:64:3f:0e:21:32:b9:
34:ba:5e:eb:41:86:80:3d:ea:30:b4:92:2b:58:c0:
14:ec:a0:cb:95:5e:1f:04:09:6e:59:b6:06:d2:df:
9a:01:57:65:31:ed:5e:8e:ec:27:c2:1f:0c:ea:ca:
d7:34:ab:d6:6b:11:00:99:6d:f0:0b:31:34:d0:a0:
97:d3:09:39:47:65:ce:f1:e1:67:80:cf:bf:65:f2:
d3:52:9e:6f:28:2e:aa:a9:e9:3d:89:85:b8:64:72:
e9:c5:93:b3:e3:2f:a0:d2:ef:e2:36:78:36:b4:fd:
f1:a6:78:d0:92:bd:b4:2f:d8:43:17:09:c5:84:77:
4e:61:1b:b5:d2:11:fe:2a:5e:fb:ae:e7:9c:24:6f:
e2:16:69:52:7f:db:35:a4:d4:bc:7c:7d:c0:ff:d3:
0e:44:7b:f8:f9:31:fa:00:5a:4e:e7:3e:48:67:48:
08:91:db:aa:e9:9e:5f:d8:0b:7e:8d:e0:f8:b0:18:
bf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E7:D2:06:62:52:05:6D:4D:9D:6E:72:88:D6:E0:D2:9A:E9:62:39
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fe19152-7abd-42e4-92e8-3f1518eeed7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da1a::/36
Signature Algorithm: sha256WithRSAEncryption
04:9f:f3:b8:6b:74:aa:8d:da:ec:72:6a:22:26:55:38:e7:0c:
34:d5:c9:b1:a4:d8:b6:30:ed:d2:3c:3c:9f:49:9e:af:39:f6:
b0:3a:c4:b0:82:42:fd:62:7a:b4:7c:85:52:16:a5:e9:cd:b8:
4b:e1:88:c1:72:10:be:1a:4c:f9:28:32:9a:bf:f3:a5:45:63:
97:ee:fc:75:0e:f2:02:53:dc:e9:08:ad:90:15:9c:0d:70:de:
47:c8:b5:23:2c:c1:6d:44:e5:22:d7:4e:ba:cf:49:2c:86:4f:
d6:ee:ea:ef:c1:a7:11:6f:35:3a:8e:1e:71:e5:5c:b5:90:7d:
00:bb:d8:b4:83:e1:57:4f:fe:ff:0e:37:89:34:22:3f:30:79:
41:5f:08:bf:00:ff:6b:2d:dc:b8:7c:73:21:b4:f7:a9:5d:6b:
e2:47:57:79:a0:73:3c:e1:fa:e6:b0:c3:b5:d4:fc:35:0b:d0:
f6:9c:c1:0a:c8:65:f7:1a:5a:df:a4:a6:fe:14:7b:63:ea:48:
e8:49:12:e1:06:39:c8:29:2f:0e:40:43:eb:5b:04:d4:d4:19:
95:b1:68:1a:42:5b:3b:10:77:a3:2c:80:55:6f:03:6a:f4:7d:
73:bb:36:ac:8d:90:a3:9e:a2:60:45:43:a1:df:58:4e:bc:ed:
d8:58:ac:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:13 2025 by rpki-client