Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d43a2e56-2d58-4c7d-8ee2-0ca6ac8a6275.roa
File: d43a2e56-2d58-4c7d-8ee2-0ca6ac8a6275.roa (raw, json)
Hash identifier: F+CmUYrgg8f+bJDHcKj4r5Ftmb0I3yk3pz339lzTA4A=
Subject key identifier: B1:D6:47:83:80:34:9A:24:B9:A7:AC:C2:5C:4E:3C:B5:17:02:49:CA
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 0BF410C50B71C203FA7D4590A8A36D27C1CF1632
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d43a2e56-2d58-4c7d-8ee2-0ca6ac8a6275.roa
Signing time: Sat 08 Mar 2025 00:01:19 +0000
ROA not before: Sat 08 Mar 2025 00:01:19 +0000
ROA not after: Sat 12 Apr 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2406:daef:2800::/40 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:f4:10:c5:0b:71:c2:03:fa:7d:45:90:a8:a3:6d:27:c1:cf:16:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 8 00:01:19 2025 GMT
Not After : Apr 12 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:40:8e:b4:79:89:c7:d3:95:ed:6e:ef:8c:fc:
e5:e0:b4:18:17:c5:f9:39:db:a1:10:e6:ad:29:d2:
69:f0:09:a0:27:aa:ae:88:55:d9:79:cb:62:3e:3b:
f4:74:6f:e5:3a:62:86:27:c9:41:12:f7:5a:af:b3:
21:bc:c0:13:da:ba:11:27:9d:61:ca:86:fe:8c:8a:
2e:dc:db:5f:39:be:de:2f:1e:b1:e7:e0:21:ab:c4:
35:96:8f:db:27:79:cd:ac:87:c1:22:01:59:38:64:
d3:a6:12:09:a7:da:82:a7:6f:f4:d3:26:f6:91:a3:
86:78:1f:6c:21:28:81:59:97:bd:73:a4:a5:e2:9c:
b8:ab:8d:7b:b5:bb:e0:88:64:38:e7:c6:66:a6:86:
34:77:7b:e9:73:77:f0:70:c3:55:f6:49:25:63:31:
b9:b1:6b:68:94:69:dc:98:34:26:c2:e1:0b:ee:82:
50:fe:a2:5b:64:bb:97:d3:b0:69:15:96:dd:7a:2a:
db:64:f4:03:c4:ec:bd:89:a9:ea:94:07:54:c2:bb:
70:c4:bb:02:6d:2c:5e:4c:d6:fd:c3:30:fa:7c:9e:
61:ea:ac:2a:1b:71:c3:13:f8:f3:80:a5:62:64:eb:
28:50:a4:dd:25:25:6a:18:15:c3:32:3d:05:b3:b9:
49:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D6:47:83:80:34:9A:24:B9:A7:AC:C2:5C:4E:3C:B5:17:02:49:CA
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d43a2e56-2d58-4c7d-8ee2-0ca6ac8a6275.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daef:2800::/40
Signature Algorithm: sha256WithRSAEncryption
3f:ee:4f:dd:4b:58:94:e3:f7:2a:f8:bc:81:7d:be:7b:76:7e:
60:a9:91:43:f7:1e:06:e3:18:34:13:67:66:c3:9e:48:e5:e4:
15:e0:e2:85:e4:4d:79:22:33:88:0e:42:e9:0e:17:80:0a:05:
0a:93:bc:bf:17:b2:73:30:8a:83:16:8a:23:13:18:24:f8:0a:
19:df:c1:1b:4e:4d:56:07:45:b9:85:df:96:24:67:9c:d8:e8:
e2:16:17:c4:24:a5:b9:1a:2e:1f:44:5e:88:25:ac:57:0c:2e:
2c:37:ae:3c:52:42:a6:91:31:7e:04:69:86:5d:01:ac:ba:86:
82:b8:94:2d:d0:35:57:0c:f5:64:53:e5:79:ef:3c:f9:d4:ef:
f4:e8:38:78:8a:32:30:39:d8:90:05:f5:53:fd:25:6e:fb:c6:
70:b9:a2:89:0e:4e:af:01:b3:58:ca:8b:58:8f:74:29:5f:d8:
0e:9c:f4:86:99:5b:46:08:c3:e5:0e:bf:d8:00:c4:c3:d6:4e:
8f:2c:c0:72:05:e2:74:2e:cf:77:e4:d5:fb:88:4f:38:6f:21:
c9:b7:c5:d2:81:39:09:d7:58:11:61:18:96:d2:a0:95:39:cc:
7e:85:5e:12:5c:28:8d:9d:3b:d6:63:16:47:d3:d8:82:29:5a:
3a:a5:7a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:30:18 2025 by rpki-client