Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d73d01a1-2a90-4550-88ef-5b66b2c6ef22.roa
File: d73d01a1-2a90-4550-88ef-5b66b2c6ef22.roa (raw, json)
Hash identifier: OQwlLnFtncJJw+uvDNWpjrI/wUQGiW7tTBgx+7J8XZ4=
Subject key identifier: 50:B7:64:72:72:53:8C:21:E7:86:7F:4B:6C:64:B6:26:5C:6E:BC:D9
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 4CBAFBFCFC80F6D2418A904912856F9CD1BE1AE5
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d73d01a1-2a90-4550-88ef-5b66b2c6ef22.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da61:6000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ba:fb:fc:fc:80:f6:d2:41:8a:90:49:12:85:6f:9c:d1:be:1a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e4:59:61:18:37:9f:6d:35:2c:a9:d6:f9:78:
33:34:a2:1d:26:40:bf:7f:c2:38:57:cd:e9:66:ae:
0f:20:5e:47:02:8a:ea:7a:7f:f5:68:f0:75:cd:c5:
76:cf:3b:e1:bf:78:c7:5f:2c:a4:21:b3:31:4e:39:
ab:29:4e:30:36:18:85:65:06:1d:bf:ce:92:c9:58:
ce:e8:7b:16:79:2b:e4:6f:10:09:71:a0:6b:43:b1:
0f:81:83:a4:9e:bc:4f:81:b7:c3:30:7f:11:59:32:
45:c8:24:07:80:37:bc:7f:1d:3a:db:90:aa:a5:b7:
bf:0b:5b:3f:7e:17:c9:b8:06:ff:21:fc:c2:b3:ef:
5a:5c:a2:18:c6:60:15:77:cd:2e:d5:23:29:1a:a6:
96:c7:43:9b:8a:a9:2d:bc:0a:09:d9:f0:12:81:32:
24:f9:5d:5d:4e:87:be:b7:3f:dc:ac:2a:6f:c9:4e:
9a:b1:0f:f5:98:ed:31:c4:de:12:01:06:ea:e9:5b:
d5:d2:20:fe:93:07:71:ea:5d:2e:16:c8:60:85:36:
73:7b:0c:8b:21:92:c6:54:4b:a7:6e:f3:87:9a:e9:
ac:67:2c:7a:49:0e:16:be:f1:ce:7c:b3:6b:98:50:
db:f7:1b:61:bb:c2:df:ad:67:45:5c:5f:71:a9:08:
2f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B7:64:72:72:53:8C:21:E7:86:7F:4B:6C:64:B6:26:5C:6E:BC:D9
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d73d01a1-2a90-4550-88ef-5b66b2c6ef22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da61:6000::/40
Signature Algorithm: sha256WithRSAEncryption
09:35:6c:ef:79:ad:63:a7:cb:06:a7:39:65:b5:d5:65:ed:e2:
23:8d:89:5b:47:63:54:00:20:bc:bd:94:cf:6a:fb:26:e7:c6:
90:f2:c3:5c:69:d1:c0:85:33:00:43:17:df:ba:32:0b:c9:d4:
70:1b:2b:cd:23:dd:6b:be:6e:15:b9:05:3a:a7:cb:3c:8b:7f:
9b:f1:a8:62:78:a3:77:e3:f6:e6:ff:38:e1:54:2b:51:13:65:
04:e6:db:c4:ca:f8:c7:c1:5e:8e:49:41:b3:6c:d9:c6:e6:87:
7d:86:d0:f1:44:33:eb:6d:65:ab:0b:af:bb:df:fa:59:c4:d9:
5c:ef:43:bc:5c:4f:ce:21:14:f0:e6:27:f8:27:58:38:17:e9:
2f:64:b7:f4:68:79:1c:07:9b:d4:b6:e9:a7:71:da:29:d4:9e:
32:97:73:07:85:73:66:66:f0:87:5d:df:1e:74:c6:47:fc:cb:
51:6b:2c:40:1b:5f:a0:0e:bd:09:b8:84:0a:89:da:62:33:df:
1c:5b:cc:bd:4b:9e:cc:fe:f2:5b:93:b0:de:a6:15:2a:49:8a:
92:11:be:af:f8:6d:bf:11:0e:7e:b2:3f:b2:44:e1:e5:2b:50:
06:6e:82:9a:45:87:1e:70:9d:30:e3:e4:f2:d5:ef:1d:be:34:
1c:ce:b7:ad
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUTLr7/PyA9tJBipBJEoVvnNG+GuUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTIxNjAwMDAwMFoX
DTI1MDEyMDIzNTk1OVowejFJMEcGA1UEBRNANGE2MDViZDA0YzAxOGJlZTRkZDA0
YjE4NjlhYmY1NTZkNzk0NDMyNTM1MWYzZGYzYzRjYmYxY2JiYjU5MmIzZjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+RZYRg3n201LKnW+XgzNKIdJkC/
f8I4V83pZq4PIF5HAorqen/1aPB1zcV2zzvhv3jHXyykIbMxTjmrKU4wNhiFZQYd
v86SyVjO6HsWeSvkbxAJcaBrQ7EPgYOknrxPgbfDMH8RWTJFyCQHgDe8fx0625Cq
pbe/C1s/fhfJuAb/IfzCs+9aXKIYxmAVd80u1SMpGqaWx0ObiqktvAoJ2fASgTIk
+V1dToe+tz/crCpvyU6asQ/1mO0xxN4SAQbq6VvV0iD+kwdx6l0uFshghTZzewyL
IZLGVEunbvOHmumsZyx6SQ4WvvHOfLNrmFDb9xthu8LfrWdFXF9xqQgvuQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFFC3ZHJyU4wh54Z/S2xktiZcbrzZMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2Q3M2QwMWExLTJhOTAtNDU1MC04OGVmLTViNjZiMmM2ZWYyMi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAbaYWAwDQYJKoZIhvcNAQELBQADggEBAAk1bO95rWOnywanOWW1
1WXt4iONiVtHY1QAILy9lM9q+ybnxpDyw1xp0cCFMwBDF9+6MgvJ1HAbK80j3Wu+
bhW5BTqnyzyLf5vxqGJ4o3fj9ub/OOFUK1ETZQTm28TK+MfBXo5JQbNs2cbmh32G
0PFEM+ttZasLr7vf+lnE2VzvQ7xcT84hFPDmJ/gnWDgX6S9kt/RoeRwHm9S26adx
2inUnjKXcweFc2Zm8Idd3x50xkf8y1FrLEAbX6AOvQm4hAqJ2mIz3xxbzL1Lnsz+
8luTsN6mFSpJipIRvq/4bb8RDn6yP7JE4eUrUAZugppFhx5wnTDj5PLV7x2+NBzO
t60=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:18 2025 by rpki-client