Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e92d60d-f237-433e-b59b-27edfab50359.roa
File: 9e92d60d-f237-433e-b59b-27edfab50359.roa (raw, json)
Hash identifier: JBxANg5nzNB7GhJJuIkuseFwO31Uhux0v6bxVlydMdI=
Subject key identifier: 1E:F0:72:82:AE:B9:9D:9D:5E:5A:5C:50:73:C9:53:75:34:59:15:6E
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 603C42FB7C8927251EAF788FB6035CDA80A4A1D2
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e92d60d-f237-433e-b59b-27edfab50359.roa
Signing time: Sat 14 Dec 2024 00:00:00 +0000
ROA not before: Sat 14 Dec 2024 00:00:00 +0000
ROA not after: Sat 18 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dafb:7000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:3c:42:fb:7c:89:27:25:1e:af:78:8f:b6:03:5c:da:80:a4:a1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 14 00:00:00 2024 GMT
Not After : Jan 18 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bd:95:a5:5e:93:84:31:df:90:2d:65:98:d9:
09:f1:b2:dd:60:63:a9:c9:3e:6f:99:a6:19:dc:7b:
73:e0:6b:e9:aa:df:88:bd:0e:59:01:d1:db:16:7e:
d5:7c:43:4e:8d:9e:38:d5:99:38:12:e8:b0:e4:fa:
8a:f1:0a:d4:41:79:be:97:a7:ce:a8:a8:ef:03:71:
50:36:98:10:47:2b:fa:fd:bb:c3:65:af:b3:ee:70:
75:6c:8c:d4:a7:72:57:45:07:a1:cc:b9:19:ac:60:
4b:ec:85:6e:c5:ca:71:41:64:98:f1:a0:50:80:18:
67:a0:c6:a4:2e:3c:60:ce:1a:51:a4:70:61:90:2e:
56:d8:cf:7a:84:8e:0f:53:a2:a1:37:c7:8d:11:9a:
0e:bb:d8:24:59:ee:cc:32:b3:92:b4:6c:88:42:21:
f6:a8:4e:e9:e7:aa:7c:99:5c:40:a5:b6:74:de:10:
f1:f9:e4:6c:c9:35:c2:04:38:fa:87:c2:b4:fe:13:
63:82:9e:7d:c6:bd:58:1a:0b:45:bc:2c:7d:34:0e:
c2:7c:ba:1f:b6:15:e4:52:4f:bb:70:df:3d:d7:e2:
e1:9c:d6:b5:31:98:3c:47:dd:3a:60:f2:9a:f3:94:
6e:34:b2:70:b4:5a:f6:aa:1d:46:c5:52:2f:42:92:
2a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F0:72:82:AE:B9:9D:9D:5E:5A:5C:50:73:C9:53:75:34:59:15:6E
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e92d60d-f237-433e-b59b-27edfab50359.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dafb:7000::/40
Signature Algorithm: sha256WithRSAEncryption
a2:5e:99:89:7f:a0:be:6d:21:5a:24:21:63:69:8c:a8:18:15:
48:11:a5:ab:b2:a9:d0:cc:bd:3e:a2:df:d3:ed:45:d5:aa:33:
85:d5:f5:01:fb:59:66:dd:71:e1:40:04:07:5e:f7:df:81:18:
9f:24:7b:9a:d7:03:e7:7b:fe:76:53:cf:1b:8e:e6:d4:95:78:
15:c1:22:60:43:ab:33:65:4e:e2:40:fe:4b:93:62:91:72:41:
55:9d:e8:5c:ac:e5:10:0c:d0:26:01:54:fa:df:38:0c:c6:2c:
31:c3:17:6a:e9:45:b1:31:ce:7c:b7:35:58:54:2f:7c:11:76:
59:ca:4d:3b:6d:0a:ca:67:bc:2a:21:78:6e:76:e2:d6:9c:f8:
9e:e3:63:2e:17:7d:db:69:6d:df:30:bc:f5:2c:3f:9b:cb:0c:
a4:c0:db:1f:f4:c2:44:86:49:37:43:07:c8:27:df:89:d2:62:
13:e7:03:6b:6a:fa:01:b0:bb:10:71:2e:99:19:c0:01:54:34:
78:04:50:ea:02:54:fd:32:20:27:ba:0a:c0:c7:1a:4b:b2:7b:
30:75:f0:97:61:c9:a3:dc:08:c0:1e:d9:a9:a1:93:08:d2:45:
30:78:0e:73:e6:83:c9:a9:6d:70:ab:74:ad:f7:db:f0:6b:96:
e9:95:70:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:51 2025 by rpki-client