Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd0c1635-33c3-4877-b1a3-ec831be118eb.roa
File: dd0c1635-33c3-4877-b1a3-ec831be118eb.roa (raw, json)
Hash identifier: Z/ZzScDSHphWbvm6ydjVbd5jmPL4wvpCtF8RLYeRg18=
Subject key identifier: B0:45:9F:94:F5:5F:B2:C9:54:4F:DB:27:9A:70:FC:4F:9A:42:36:0E
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 09B075200F19D8C34A884ED3D878CDF3E32D915F
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd0c1635-33c3-4877-b1a3-ec831be118eb.roa
Signing time: Sat 14 Dec 2024 00:00:00 +0000
ROA not before: Sat 14 Dec 2024 00:00:00 +0000
ROA not after: Sat 18 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da69:9000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:b0:75:20:0f:19:d8:c3:4a:88:4e:d3:d8:78:cd:f3:e3:2d:91:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 14 00:00:00 2024 GMT
Not After : Jan 18 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:46:2b:12:97:d3:94:7d:92:0f:76:aa:5f:41:
0c:7f:83:88:6c:81:09:50:7f:0f:2a:9e:3c:f5:26:
e8:ba:4a:b7:dd:46:69:01:39:93:04:c8:d6:33:14:
72:d3:f7:df:c5:f0:ea:1d:07:eb:1f:bc:dc:a1:e6:
28:5d:a0:00:1c:24:aa:d9:2d:86:b5:d4:f4:cc:de:
ef:26:d0:0e:71:d8:88:d1:bb:2f:19:c3:87:35:d4:
b7:d8:45:b8:10:d6:52:2c:ed:94:dc:ae:e2:57:36:
1c:37:71:7f:93:71:79:f3:0e:57:94:8b:b6:d3:ca:
89:1c:d4:7e:6c:5c:d2:f4:e6:ee:be:aa:6f:22:b8:
1b:31:20:0d:2e:da:c6:b3:37:81:39:1e:e2:08:ca:
7e:09:a1:df:a7:68:fb:69:ae:f9:78:4e:fe:6c:5c:
37:f4:49:b7:59:f5:08:c5:9e:bc:b7:95:6a:c9:c1:
71:27:5b:4e:fb:13:f2:45:09:22:44:4d:b8:2b:c5:
8a:a6:2b:36:33:fc:99:5a:d5:40:02:b5:cb:79:3b:
64:99:cb:66:fd:a6:29:9f:5e:f2:af:5d:81:c2:44:
1b:e5:4a:67:52:fc:60:2f:14:93:1f:3e:69:9f:58:
0a:82:9c:12:55:3c:1f:be:2d:d7:47:5f:74:e4:25:
e4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:45:9F:94:F5:5F:B2:C9:54:4F:DB:27:9A:70:FC:4F:9A:42:36:0E
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd0c1635-33c3-4877-b1a3-ec831be118eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da69:9000::/40
Signature Algorithm: sha256WithRSAEncryption
9f:41:34:2a:b6:04:e8:f1:9d:03:07:75:22:e9:45:9d:e0:8b:
79:ad:d0:e9:46:cd:62:44:28:cd:f4:a6:78:96:8f:57:d8:0c:
14:27:9d:4a:d3:13:2e:ec:ed:e8:0c:69:43:2c:d1:2f:c3:16:
da:43:52:46:d7:6c:96:8d:4d:fd:8b:85:66:7b:c7:3e:5e:3d:
f8:2e:bc:61:f3:89:4b:68:4b:fe:11:8d:c3:af:74:48:3e:b5:
01:d4:18:1e:11:aa:8b:83:3b:be:c0:c9:c4:94:2b:48:92:6b:
06:2f:66:bf:e4:a5:99:50:16:49:67:21:ae:16:54:70:3f:df:
6b:ac:f1:74:99:4e:84:45:67:d2:1f:04:e7:64:c5:b9:51:36:
60:76:51:ec:9e:66:3c:dc:65:a0:ed:16:6d:e4:40:54:bf:a2:
a8:00:55:ea:81:d6:be:94:29:7e:9e:bc:55:2d:b0:68:3f:6b:
87:fa:c5:f8:34:e9:12:72:70:ee:7d:b8:27:33:c2:8f:07:c3:
49:57:38:35:59:1d:57:ab:a8:93:9b:98:46:86:cc:8f:03:a8:
2d:20:28:18:47:9e:30:3f:78:bb:df:a7:66:ef:8d:be:3b:84:
01:9b:57:5e:bf:2a:4f:29:98:da:73:4b:80:a3:ee:f5:cf:1b:
5a:31:d0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:14 2025 by rpki-client