Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95f6a049-7e13-46df-915e-ddab481096ad.roa
File: 95f6a049-7e13-46df-915e-ddab481096ad.roa (raw, json)
Hash identifier: 7sVC+bEZ6iMancAvlpDmBlDv1vtjJ9C8WSfIG5xnIfQ=
Subject key identifier: DF:DA:B8:20:2B:22:59:4C:29:A5:1A:8D:00:EF:39:56:AF:65:D8:8A
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 1C806D0D622860B2C6931FBFE3464A2D9D3A2E13
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95f6a049-7e13-46df-915e-ddab481096ad.roa
Signing time: Wed 18 Dec 2024 00:00:00 +0000
ROA not before: Wed 18 Dec 2024 00:00:00 +0000
ROA not after: Wed 22 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf7:b000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:80:6d:0d:62:28:60:b2:c6:93:1f:bf:e3:46:4a:2d:9d:3a:2e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 18 00:00:00 2024 GMT
Not After : Jan 22 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:b7:0c:9d:ef:fd:1b:e6:f6:81:03:72:ec:
18:99:c8:ac:ab:aa:ca:63:13:1b:1d:2e:69:0f:87:
c4:4d:ac:26:64:68:eb:5f:6a:83:61:25:16:d7:92:
ca:eb:43:d5:77:bd:7d:69:55:c3:88:23:d2:a9:43:
9e:c0:de:69:77:5e:17:c9:8e:3c:fd:c6:10:81:dd:
14:76:40:8b:88:4e:b6:a5:4b:45:c2:43:3c:d0:66:
4f:4b:3c:ae:6b:7e:11:fa:eb:e4:bd:a9:44:25:47:
7f:e1:71:b7:54:a9:71:07:5c:90:ca:c8:ab:46:e1:
e0:c1:59:f5:40:b4:3b:04:1f:81:8a:b3:ee:97:b4:
06:1a:27:44:69:4d:70:a6:98:89:42:6b:66:8e:4d:
a0:2d:8d:19:b7:13:c3:64:28:f1:f6:13:5c:bc:51:
63:7f:da:68:ad:9e:9f:8b:51:c8:06:19:81:d0:da:
a7:0b:67:f0:7a:f2:dc:5d:dc:a4:bc:e3:d2:c0:e0:
bd:d7:8a:7f:7c:c7:ba:6d:93:af:c6:48:49:f7:fd:
2a:7a:d9:a0:cd:04:0b:bf:79:ee:e4:b2:5c:1d:ef:
50:af:d1:db:59:63:05:56:12:0f:6d:26:47:42:73:
16:c4:96:19:78:35:56:36:c3:a8:72:13:ec:c0:73:
62:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DA:B8:20:2B:22:59:4C:29:A5:1A:8D:00:EF:39:56:AF:65:D8:8A
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95f6a049-7e13-46df-915e-ddab481096ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf7:b000::/40
Signature Algorithm: sha256WithRSAEncryption
79:f0:ef:53:79:dc:4c:05:30:a8:96:30:fc:5f:f7:d7:72:31:
62:a6:4d:e6:43:b0:35:b6:8d:85:64:1b:f5:79:48:f2:5e:b7:
3b:f3:28:c9:c8:0a:57:64:c5:76:e6:0f:cd:7c:d9:e8:34:e5:
96:af:4b:34:95:cc:f8:c6:e8:09:29:83:58:68:d8:af:04:cc:
2c:56:fe:34:8d:e6:06:a2:d7:a2:39:42:72:75:47:f8:ca:d2:
76:d4:00:bf:f9:88:a7:49:9f:e2:b5:33:9f:b9:a2:30:a6:19:
9e:67:f8:f6:ac:2c:f8:51:45:75:1b:7f:d6:44:ea:e7:f4:83:
43:e2:f8:a0:6f:16:72:b9:f1:98:6a:3f:0b:5f:8e:6a:8d:ba:
7d:3d:62:72:2b:1a:ed:f1:df:ea:c0:39:21:b6:aa:85:66:f4:
bd:ae:5d:02:d5:fe:56:ac:68:63:7b:e7:54:74:15:9c:5a:d8:
49:75:3b:8a:cb:79:5c:85:86:cf:22:f4:b3:e4:33:e4:ff:bb:
b6:07:dd:19:ec:3d:df:b9:26:f5:50:b0:e8:0b:7b:5e:36:2f:
b2:4b:72:0a:43:e2:d5:80:6b:6b:4b:e0:44:23:11:32:c7:fc:
70:b6:fd:5b:2f:45:30:cf:a3:35:00:c4:de:43:64:d6:f8:5a:
e2:1e:09:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:33 2025 by rpki-client