Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/90f0b1bf-fe82-4a72-8412-44b4a2968155.roa
File: 90f0b1bf-fe82-4a72-8412-44b4a2968155.roa (raw, json)
Hash identifier: E5OLXiAyc56M9Fa5RqHbVDAnk3GrVCi90py+yVzzGTM=
Subject key identifier: 42:0F:8A:53:5B:92:C9:4E:EF:60:C4:92:BF:51:A4:73:38:3F:29:3E
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 1D896E4122619B49A0CFB850F5397930C0897BC8
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/90f0b1bf-fe82-4a72-8412-44b4a2968155.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf6:9000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:89:6e:41:22:61:9b:49:a0:cf:b8:50:f5:39:79:30:c0:89:7b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:30:40:de:87:de:6b:d4:8e:60:28:89:19:d6:
5a:ca:19:6a:22:25:70:63:28:8b:3f:d4:88:d4:06:
f4:95:01:b0:0e:bd:06:76:53:c8:a1:8d:34:41:da:
96:97:2b:5c:30:51:a0:50:31:ba:4b:11:99:77:18:
9a:c2:24:4b:1d:14:0c:36:8e:e7:38:43:26:99:e1:
a6:91:74:13:b0:09:9d:cd:ff:1a:19:61:c5:9f:ec:
52:ee:8f:ea:3a:d6:75:ef:0e:fa:ff:37:02:a1:4c:
ff:73:91:ba:7f:c6:20:36:46:1e:ca:52:ff:e1:31:
f5:83:9d:55:21:3f:8f:98:b7:3f:1a:31:ef:2d:2d:
5a:63:f7:72:06:e8:88:6d:bd:2b:42:fa:a4:a8:3f:
77:90:77:42:45:a8:a5:4c:82:d2:ee:83:1c:06:24:
7e:4d:6e:a0:32:44:ec:40:2a:28:bd:09:2d:71:44:
db:1f:83:2e:90:f4:34:ce:f8:fa:b5:84:6a:fb:d9:
a0:90:64:4a:64:f2:97:e9:4b:40:87:7c:3a:08:38:
41:04:f5:4f:7c:c3:4f:2b:f3:01:49:f1:66:75:a4:
7b:53:e2:4a:5d:30:37:3b:86:89:1e:97:ae:36:a4:
35:ad:58:0a:ac:26:a7:a7:11:e3:79:1a:0c:80:6d:
bd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0F:8A:53:5B:92:C9:4E:EF:60:C4:92:BF:51:A4:73:38:3F:29:3E
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/90f0b1bf-fe82-4a72-8412-44b4a2968155.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf6:9000::/40
Signature Algorithm: sha256WithRSAEncryption
37:36:61:dd:4d:35:89:07:8b:6e:ef:13:f4:26:e9:4e:bc:74:
5d:28:9a:83:62:85:26:ae:0e:f3:54:13:55:98:ba:4a:2b:f4:
a1:55:4a:85:25:85:5a:bf:22:00:da:c1:99:7f:f9:38:cd:35:
5f:53:10:b5:0f:f7:9f:00:ff:d3:92:3f:e4:69:ef:a1:21:51:
66:f8:af:8f:08:50:27:d0:d6:dc:2a:2e:54:65:91:74:0a:a7:
18:ff:58:a2:45:b3:ef:07:b9:ca:2c:a0:f0:a9:1a:22:68:76:
1e:28:f3:6d:a7:85:93:6a:fc:d6:ae:de:69:c0:c6:40:a3:53:
66:3f:1d:e0:43:f2:82:27:23:8a:46:42:2a:04:f8:a6:bd:f9:
62:40:a7:e2:9e:9e:44:60:00:97:b2:79:bd:7c:f0:76:b1:ab:
fd:6c:aa:aa:52:51:c8:a1:38:1f:bc:55:c1:75:21:a1:e0:04:
0f:1d:09:50:04:b9:17:d0:7f:07:f4:aa:59:c5:b1:70:76:de:
15:95:4b:4a:9f:cb:af:ee:e4:20:5e:e8:96:45:0b:1b:44:7f:
7e:be:02:c1:cf:ff:ad:09:48:32:3c:86:05:b9:b9:03:41:9e:
31:a9:45:a0:27:85:a6:ba:32:de:3a:8b:47:9d:4d:20:90:41:
48:57:b2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:51 2025 by rpki-client