Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1990951-8da7-4b5a-9ffc-5e2bf9ee7dbe.roa
File: b1990951-8da7-4b5a-9ffc-5e2bf9ee7dbe.roa (raw, json)
Hash identifier: symlHC1EpXeSg0VO5djNV0firlspM0/E8Ot4277fsPU=
Subject key identifier: BA:61:4D:84:1B:20:29:01:6F:4A:35:F1:DF:3E:60:06:1F:00:E1:E8
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 3EC24CB7242F30EBEAD3467DA66C9EDD7A40D7DA
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1990951-8da7-4b5a-9ffc-5e2bf9ee7dbe.roa
Signing time: Wed 18 Dec 2024 00:00:00 +0000
ROA not before: Wed 18 Dec 2024 00:00:00 +0000
ROA not after: Wed 22 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da61:4000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:c2:4c:b7:24:2f:30:eb:ea:d3:46:7d:a6:6c:9e:dd:7a:40:d7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 18 00:00:00 2024 GMT
Not After : Jan 22 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:23:6e:f3:f7:82:ae:e6:91:03:ea:07:95:6f:
ed:30:66:1f:26:5d:7f:fc:0d:dd:1a:b5:90:6d:70:
b0:71:9e:d3:73:cc:cb:49:83:50:60:51:7a:bc:55:
18:65:b4:35:48:b7:9c:bc:06:8f:0c:0f:b5:64:a2:
35:b6:de:77:92:18:71:26:7c:a2:77:05:55:8e:48:
79:7a:e7:53:34:05:0e:2d:ae:ea:84:f7:af:0a:c3:
e0:03:88:b4:2c:63:f6:37:63:e3:11:bf:80:04:54:
46:58:a5:1e:57:55:81:25:3e:d6:81:98:82:ed:b1:
9e:e2:ea:f5:3f:79:73:af:99:5e:a0:e9:91:cc:5e:
a0:9e:73:7c:d4:49:3b:40:ef:73:50:48:cc:db:a5:
a5:7d:57:a5:e5:db:a1:f2:4f:64:63:2b:59:34:d6:
0e:0a:7b:e1:a5:39:a3:a0:7b:62:2d:a9:cf:19:5c:
63:01:7e:8f:3e:d6:14:1b:d8:42:6d:69:2b:92:75:
49:5d:5b:92:de:35:b4:50:13:9c:56:98:a1:3a:3a:
a1:1c:31:7c:77:15:b7:5e:a3:0e:6a:dc:fa:ea:4f:
fe:e7:a1:e8:b2:c1:0a:06:ec:ee:f6:5e:5d:9b:68:
a6:47:b9:bf:21:f6:38:f3:d6:6e:97:fc:05:0c:91:
9a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:61:4D:84:1B:20:29:01:6F:4A:35:F1:DF:3E:60:06:1F:00:E1:E8
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1990951-8da7-4b5a-9ffc-5e2bf9ee7dbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da61:4000::/40
Signature Algorithm: sha256WithRSAEncryption
a5:07:ed:22:2f:91:0d:2e:9c:a6:9a:c9:26:07:59:b5:37:c5:
f2:7b:8b:62:f7:a3:12:8a:aa:f7:ed:de:a5:89:5a:43:94:fc:
7d:0b:a6:57:1f:6f:43:ac:3e:82:b2:96:84:29:0e:0d:79:c3:
f8:df:8b:30:bf:e7:8a:c0:17:d8:38:69:67:25:23:7d:81:f4:
0d:13:85:36:d5:a9:07:04:63:53:f3:02:8f:47:b0:7f:32:9c:
33:0e:3c:8f:53:e2:3a:51:22:e7:e3:45:32:90:00:61:31:ea:
b8:f8:5f:ff:36:75:fa:f7:eb:88:14:9f:d9:76:49:5e:4a:3a:
d0:70:83:df:43:ff:ef:98:66:ae:ed:f3:c5:b5:3f:e9:6d:8f:
80:46:61:00:b4:1f:27:88:9e:61:f7:48:90:40:72:05:da:10:
0d:42:27:30:37:45:71:50:8c:eb:c3:be:88:50:96:93:c1:d0:
f0:b0:32:98:02:02:1f:c3:f9:58:cc:46:31:e6:92:5e:0f:eb:
27:d6:19:2f:05:e3:e5:97:59:d0:d5:6d:eb:97:27:32:28:39:
b3:06:64:ec:73:0d:d4:5a:b5:79:e9:92:fd:73:f3:b7:b2:f1:
65:72:b6:67:e0:b8:6b:9a:5b:5c:f6:2b:ca:d0:cb:00:74:ea:
7e:03:6f:50
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUPsJMtyQvMOvq00Z9pmye3XpA19owDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTIxODAwMDAwMFoX
DTI1MDEyMjIzNTk1OVowejFJMEcGA1UEBRNANjhiOWYxN2I2OGEyZWJhNjc3NWJk
MmQ3MGRjZWFjNGZiNjlkMzQ5ODY4YjhmZjVjODBhY2RiZTljYWUxMzc3NDEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiNu8/eCruaRA+oHlW/tMGYfJl1/
/A3dGrWQbXCwcZ7Tc8zLSYNQYFF6vFUYZbQ1SLecvAaPDA+1ZKI1tt53khhxJnyi
dwVVjkh5eudTNAUOLa7qhPevCsPgA4i0LGP2N2PjEb+ABFRGWKUeV1WBJT7WgZiC
7bGe4ur1P3lzr5leoOmRzF6gnnN81Ek7QO9zUEjM26WlfVel5duh8k9kYytZNNYO
CnvhpTmjoHtiLanPGVxjAX6PPtYUG9hCbWkrknVJXVuS3jW0UBOcVpihOjqhHDF8
dxW3XqMOatz66k/+56HossEKBuzu9l5dm2imR7m/IfY489Zul/wFDJGaWQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFLphTYQbICkBb0o18d8+YAYfAOHoMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2IxOTkwOTUxLThkYTctNGI1YS05ZmZjLTVlMmJmOWVlN2RiZS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAbaYUAwDQYJKoZIhvcNAQELBQADggEBAKUH7SIvkQ0unKaaySYH
WbU3xfJ7i2L3oxKKqvft3qWJWkOU/H0Lplcfb0OsPoKyloQpDg15w/jfizC/54rA
F9g4aWclI32B9A0ThTbVqQcEY1PzAo9HsH8ynDMOPI9T4jpRIufjRTKQAGEx6rj4
X/82dfr364gUn9l2SV5KOtBwg99D/++YZq7t88W1P+ltj4BGYQC0HyeInmH3SJBA
cgXaEA1CJzA3RXFQjOvDvohQlpPB0PCwMpgCAh/D+VjMRjHmkl4P6yfWGS8F4+WX
WdDVbeuXJzIoObMGZOxzDdRatXnpkv1z87ey8WVytmfguGuaW1z2K8rQywB06n4D
b1A=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:42 2025 by rpki-client