Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/96128b18-ab6a-4022-b474-5230bdada633.roa
File: 96128b18-ab6a-4022-b474-5230bdada633.roa (raw, json)
Hash identifier: s5ffU4MgcVJe/x4zRihG7A1vZcIqXoCPVfYOJAuveJg=
Subject key identifier: F5:C1:3C:D7:87:AF:16:49:92:67:62:A1:EB:B3:D9:45:BE:29:D3:5D
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5EC390CAEA5BAE69C5DEADCA310E73A26AB4BE26
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/96128b18-ab6a-4022-b474-5230bdada633.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da10:8000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:c3:90:ca:ea:5b:ae:69:c5:de:ad:ca:31:0e:73:a2:6a:b4:be:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:be:c8:06:87:e2:52:b4:68:ff:5b:f9:10:
d9:c7:75:70:7b:01:1e:60:71:40:f8:17:67:34:d2:
de:89:63:0d:2d:8d:7f:3d:d9:be:08:41:33:01:f5:
e2:92:45:84:fc:56:11:94:d1:da:06:29:17:e8:b8:
8b:a7:28:35:61:ef:59:b3:73:54:11:22:47:41:b4:
93:29:01:39:03:ab:32:0c:91:26:3b:1d:92:06:38:
2a:fc:a8:61:43:5b:ea:40:77:97:14:72:f7:8a:6a:
24:51:23:ea:49:5a:24:fe:1e:aa:0e:fa:12:05:46:
94:f9:b1:7d:d1:09:1f:64:0a:b7:25:2f:ed:a0:d8:
de:e0:2b:c6:45:04:00:aa:2b:bb:fe:35:bf:14:3a:
7d:86:06:8b:d4:e5:2b:dd:3d:e5:6c:68:68:44:96:
2e:e3:89:68:f1:98:93:0b:06:a0:79:17:1e:50:78:
2e:45:55:64:06:31:aa:69:0f:02:f9:d7:4f:b3:12:
77:ca:db:06:46:85:97:3a:72:61:39:c3:eb:41:f7:
d1:54:a4:ea:3f:cd:42:c1:c4:5d:f6:16:05:4d:52:
a9:d4:5c:57:e6:77:73:02:f0:5d:1b:bc:8a:2b:e0:
f6:6f:74:2a:2d:c7:5d:44:2c:be:3d:bc:b3:b0:6e:
32:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C1:3C:D7:87:AF:16:49:92:67:62:A1:EB:B3:D9:45:BE:29:D3:5D
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/96128b18-ab6a-4022-b474-5230bdada633.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da10:8000::/36
Signature Algorithm: sha256WithRSAEncryption
3c:d5:9c:a9:53:28:28:03:60:97:bb:53:47:e6:9d:b8:6f:dd:
29:d2:af:a5:62:ef:41:87:21:23:4b:b7:c0:a2:d9:07:e4:36:
5d:9b:9a:76:44:b0:6f:92:7f:d1:cd:1e:1d:a0:48:57:c3:e0:
cf:d9:51:f3:c0:8e:02:7d:f0:db:8a:02:3d:4f:15:ff:77:da:
3f:da:39:fe:8a:f6:0a:20:c6:e8:e6:14:77:22:52:6e:02:d5:
1b:11:5b:71:6e:39:94:73:0d:39:d9:3c:18:5d:c2:12:86:4d:
e3:5b:8c:52:a5:70:1c:a4:17:f6:08:9d:d0:5d:05:e1:d0:50:
f1:5b:97:97:b6:f8:f5:07:95:cd:f8:57:b5:2e:6b:56:fc:da:
39:5f:20:b8:05:54:59:e3:e9:ae:88:c6:4b:2a:86:97:75:64:
51:f5:3b:3f:6c:17:8d:15:9e:d9:af:7c:a3:71:78:1b:46:57:
62:70:43:54:45:f4:0c:54:7e:ca:2c:18:a6:fd:60:30:18:98:
82:39:db:07:3b:4d:21:02:1f:fd:e6:0e:97:1d:88:eb:ca:ad:
00:c9:bb:4e:8f:c2:8d:dd:52:21:61:41:e8:e4:d8:22:36:71:
4d:61:29:f3:5d:21:47:0f:f1:9b:f6:4a:69:5a:26:38:61:ed:
27:9a:79:01
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUXsOQyupbrmnF3q3KMQ5zomq0viYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTIxNzAwMDAwMFoX
DTI1MDEyMTIzNTk1OVowejFJMEcGA1UEBRNANjlkNGIzZmFjMTFlNmNkZjdjMWFi
NGZjNzY3ZTY3M2JmOGI1NjBmMzhmNTU1YWNiOWY1YjQ4MGExZWMwYjg1NjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWS+yAaH4lK0aP9b+RDZx3VwewEe
YHFA+BdnNNLeiWMNLY1/Pdm+CEEzAfXikkWE/FYRlNHaBikX6LiLpyg1Ye9Zs3NU
ESJHQbSTKQE5A6syDJEmOx2SBjgq/KhhQ1vqQHeXFHL3imokUSPqSVok/h6qDvoS
BUaU+bF90QkfZAq3JS/toNje4CvGRQQAqiu7/jW/FDp9hgaL1OUr3T3lbGhoRJYu
44lo8ZiTCwageRceUHguRVVkBjGqaQ8C+ddPsxJ3ytsGRoWXOnJhOcPrQffRVKTq
P81CwcRd9hYFTVKp1FxX5ndzAvBdG7yKK+D2b3QqLcddRCy+PbyzsG4y0QIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFPXBPNeHrxZJkmdioeuz2UW+KdNdMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
Lzk2MTI4YjE4LWFiNmEtNDAyMi1iNDc0LTUyMzBiZGFkYTYzMy5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYEJAbaEIAwDQYJKoZIhvcNAQELBQADggEBADzVnKlTKCgDYJe7U0fm
nbhv3SnSr6Vi70GHISNLt8Ci2QfkNl2bmnZEsG+Sf9HNHh2gSFfD4M/ZUfPAjgJ9
8NuKAj1PFf932j/aOf6K9gogxujmFHciUm4C1RsRW3FuOZRzDTnZPBhdwhKGTeNb
jFKlcBykF/YIndBdBeHQUPFbl5e2+PUHlc34V7Uua1b82jlfILgFVFnj6a6Ixksq
hpd1ZFH1Oz9sF40VntmvfKNxeBtGV2JwQ1RF9AxUfsosGKb9YDAYmII52wc7TSEC
H/3mDpcdiOvKrQDJu06Pwo3dUiFhQejk2CI2cU1hKfNdIUcP8Zv2SmlaJjhh7Sea
eQE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:59 2025 by rpki-client