Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e24f6e7d-d541-4c32-b687-f5f034742eb4.roa
File: e24f6e7d-d541-4c32-b687-f5f034742eb4.roa (raw, json)
Hash identifier: UvstFDpSwPp3htb0kvm1mv6nRg46p7fCqmN+Ldiz5sU=
Subject key identifier: 05:E0:1D:9D:FA:85:B2:6D:AB:55:7B:C3:D1:9C:9D:04:79:BC:21:32
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 30EE407669A662AB5F6181CC2839ED3CB7A566A7
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e24f6e7d-d541-4c32-b687-f5f034742eb4.roa
Signing time: Sat 14 Dec 2024 00:00:00 +0000
ROA not before: Sat 14 Dec 2024 00:00:00 +0000
ROA not after: Sat 18 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da70:b000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:ee:40:76:69:a6:62:ab:5f:61:81:cc:28:39:ed:3c:b7:a5:66:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 14 00:00:00 2024 GMT
Not After : Jan 18 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fe:46:cb:19:63:2c:22:f9:41:f3:db:17:63:
62:d2:5b:0d:49:fc:84:da:cd:71:21:2c:f7:21:1c:
71:ff:02:ec:28:3b:b6:85:df:e5:4c:fd:0d:03:32:
0d:33:db:39:a0:09:24:b3:73:66:53:41:ae:7e:95:
9e:98:68:6f:d2:03:c3:e1:e4:61:8d:ec:69:1d:d9:
83:a2:4f:57:49:6a:7d:b3:ea:94:19:e2:9d:cf:48:
b1:c6:53:d9:3e:69:cd:cd:ae:40:1c:87:88:2d:16:
be:db:ab:f1:f4:4d:f5:f9:de:5d:eb:3c:9a:2a:e1:
f3:92:a8:b3:62:fc:5a:c6:4a:2c:fc:6f:b6:92:ce:
12:e8:9f:da:05:66:d5:53:12:3a:9c:2b:b5:78:29:
fa:90:d1:19:d9:42:5a:44:6e:a3:75:ef:bb:cf:5c:
00:b7:96:12:0c:05:49:77:ff:c5:5c:5e:6e:20:6c:
19:68:07:fe:9b:16:c3:32:d7:fc:f2:f6:29:db:0e:
1f:bb:7e:34:ec:0f:d7:fd:e4:f1:2c:3c:47:db:2d:
e7:64:41:85:18:35:06:e2:8c:16:57:48:64:b7:1f:
30:cd:b9:c5:ab:e5:b9:98:85:db:9d:ed:9b:d8:89:
fa:8b:f3:71:13:62:32:64:c7:d9:d7:18:06:fd:74:
1f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E0:1D:9D:FA:85:B2:6D:AB:55:7B:C3:D1:9C:9D:04:79:BC:21:32
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e24f6e7d-d541-4c32-b687-f5f034742eb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da70:b000::/40
Signature Algorithm: sha256WithRSAEncryption
03:cf:12:67:b0:b9:a4:c2:6e:63:7d:5b:06:45:2f:da:a3:db:
42:d5:d6:f2:01:81:35:9d:8c:1c:fd:4c:e2:00:e2:f5:9f:82:
f0:82:6d:10:8f:17:04:6d:cc:81:1c:aa:5b:07:a2:5b:e3:64:
45:43:36:b8:80:44:c9:09:24:5a:64:a8:99:6a:e3:15:41:32:
66:73:64:0d:b6:f4:38:2d:15:b9:8a:4d:6b:a9:c2:12:b3:2a:
98:d8:d8:82:65:bd:7f:e5:dc:1d:1d:90:ef:38:e2:06:b9:be:
fb:7d:7c:d9:a8:66:69:fd:dc:25:ad:f4:47:75:4c:78:6e:29:
38:72:1d:52:28:c3:04:fc:d6:ea:53:94:9e:9b:53:d3:21:93:
86:e0:54:90:42:22:64:28:95:48:35:6f:4d:65:c8:c3:07:d8:
ea:a9:e2:87:14:ec:63:69:08:b0:6b:99:5c:04:1e:28:0e:39:
15:97:8f:f1:04:08:e2:40:57:b9:11:c8:12:da:2e:b9:d3:ca:
db:4a:44:51:27:ab:38:91:67:e0:96:ee:1d:ef:cb:f4:e6:50:
a7:d0:79:b5:01:80:2b:26:6a:27:f9:4c:b2:cf:bb:0d:4a:0a:
8e:b5:58:14:ed:36:d8:cb:fb:a7:50:e0:ed:76:d1:dc:c1:39:
7d:a4:a9:9d
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUMO5AdmmmYqtfYYHMKDntPLelZqcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTIxNDAwMDAwMFoX
DTI1MDExODIzNTk1OVowejFJMEcGA1UEBRNANWYzYWY4MWFmMjQ1MDllOTg1YjM5
NWNiY2E2M2JiM2FjNWFlYWM5ZWM5ZjBmYzhhZTJhZmQ1MDM4ZjRjNTRhYjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4P5GyxljLCL5QfPbF2Ni0lsNSfyE
2s1xISz3IRxx/wLsKDu2hd/lTP0NAzINM9s5oAkks3NmU0GufpWemGhv0gPD4eRh
jexpHdmDok9XSWp9s+qUGeKdz0ixxlPZPmnNza5AHIeILRa+26vx9E31+d5d6zya
KuHzkqizYvxaxkos/G+2ks4S6J/aBWbVUxI6nCu1eCn6kNEZ2UJaRG6jde+7z1wA
t5YSDAVJd//FXF5uIGwZaAf+mxbDMtf88vYp2w4fu3407A/X/eTxLDxH2y3nZEGF
GDUG4owWV0hktx8wzbnFq+W5mIXbne2b2In6i/NxE2IyZMfZ1xgG/XQfgQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFAXgHZ36hbJtq1V7w9GcnQR5vCEyMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2UyNGY2ZTdkLWQ1NDEtNGMzMi1iNjg3LWY1ZjAzNDc0MmViNC5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAbacLAwDQYJKoZIhvcNAQELBQADggEBAAPPEmewuaTCbmN9WwZF
L9qj20LV1vIBgTWdjBz9TOIA4vWfgvCCbRCPFwRtzIEcqlsHolvjZEVDNriARMkJ
JFpkqJlq4xVBMmZzZA229DgtFbmKTWupwhKzKpjY2IJlvX/l3B0dkO844ga5vvt9
fNmoZmn93CWt9Ed1THhuKThyHVIowwT81upTlJ6bU9Mhk4bgVJBCImQolUg1b01l
yMMH2Oqp4ocU7GNpCLBrmVwEHigOORWXj/EECOJAV7kRyBLaLrnTyttKRFEnqziR
Z+CW7h3vy/TmUKfQebUBgCsmaif5TLLPuw1KCo61WBTtNtjL+6dQ4O120dzBOX2k
qZ0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:52 2025 by rpki-client