Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eac3eaf9-d837-4f7f-bdb2-0d2d31583fde.roa
File: eac3eaf9-d837-4f7f-bdb2-0d2d31583fde.roa (raw, json)
Hash identifier: U6NiXjicNfcoCV3g4q+cchkfFQbGIl0ytbBtUxf7SZI=
Subject key identifier: 04:CF:6C:10:0C:FF:B8:EA:7C:AA:34:B4:FB:BF:9F:76:8D:58:AF:91
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 4A57DEF01376F89416F84BC6464F59D77B64B97B
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eac3eaf9-d837-4f7f-bdb2-0d2d31583fde.roa
Signing time: Sat 08 Mar 2025 00:01:16 +0000
ROA not before: Sat 08 Mar 2025 00:01:16 +0000
ROA not after: Sat 12 Apr 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2406:daef:8000::/40 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:57:de:f0:13:76:f8:94:16:f8:4b:c6:46:4f:59:d7:7b:64:b9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Mar 8 00:01:16 2025 GMT
Not After : Apr 12 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:21:8e:a2:47:e0:9c:42:e7:74:1d:ef:ed:
e9:79:f5:76:c6:56:c3:4b:80:19:81:01:5d:7a:fc:
34:bf:09:4b:aa:a3:87:1f:23:33:54:e9:c6:c3:0c:
9c:8b:0f:e5:53:1e:3b:c4:66:08:e3:20:15:be:64:
0e:1d:76:c9:4a:d0:ee:21:5d:8c:a4:0f:55:3e:16:
3c:ca:5c:15:a2:9f:f0:b0:76:9d:d8:e2:10:5a:14:
77:84:c5:79:0c:24:a8:71:1e:81:9d:5e:72:17:4a:
49:93:e6:cd:d6:3e:13:35:b6:ed:7b:d1:c4:e0:83:
6d:93:41:aa:bb:08:0f:8e:e3:83:0f:a3:b5:7e:ae:
84:3f:f7:ad:37:6d:a4:4e:42:f7:83:e8:a7:aa:e7:
dd:25:a1:12:96:ab:c1:2f:62:70:87:34:54:e6:50:
dc:fb:cd:da:c8:36:9d:2c:d1:7a:86:02:54:7c:6f:
2b:9b:6d:f6:74:46:12:9a:38:6f:2f:29:be:6a:e0:
dc:b0:b7:40:c9:5e:47:cb:3a:31:58:54:02:1b:01:
85:fa:0e:d5:c8:3c:1a:eb:5e:4c:c0:d5:94:9b:09:
25:41:28:74:85:24:9c:5b:f3:09:8f:f0:dc:e0:d0:
50:c2:48:86:e6:3e:65:a0:b6:a4:0e:85:37:e0:4e:
ee:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CF:6C:10:0C:FF:B8:EA:7C:AA:34:B4:FB:BF:9F:76:8D:58:AF:91
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eac3eaf9-d837-4f7f-bdb2-0d2d31583fde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daef:8000::/40
Signature Algorithm: sha256WithRSAEncryption
b7:d6:09:2e:de:14:ed:bb:83:06:74:9d:6b:c2:36:ed:12:38:
0e:39:d0:80:cb:8c:57:ba:a8:b6:ab:af:14:0a:09:57:56:14:
c8:73:55:d5:c9:7c:b7:86:e2:97:58:d3:dc:8d:64:7b:33:26:
c9:5e:a2:eb:ff:0e:8e:83:fa:b2:6f:64:1b:dc:c8:07:46:64:
d3:5b:7b:50:ae:3c:40:f5:d7:d1:58:b4:cc:5a:f1:e4:f2:c2:
82:c6:66:07:01:1f:03:01:f4:9f:d8:59:60:dd:55:e0:d8:6d:
ac:4b:7d:ee:11:5f:f3:1d:06:ef:4d:cf:e4:c4:93:a0:86:ec:
ce:03:55:f2:ef:0e:a8:18:58:fc:eb:e4:ea:13:94:42:fd:2c:
ef:2a:da:c6:79:a2:4f:8a:f9:66:b9:c5:6b:b7:2f:56:80:4d:
0b:27:8f:ad:a2:06:78:7e:9e:5e:0c:1d:f8:71:9c:05:7f:78:
2e:6f:b7:31:61:e4:a2:9b:00:75:48:4c:95:e4:9e:8b:3b:83:
55:68:ab:a9:c4:3e:cc:6f:05:3f:1c:43:b5:92:e6:e0:2a:e7:
95:1c:c7:1a:cb:c9:11:8d:15:3e:51:80:35:99:bf:ed:6b:d6:
25:b3:71:4d:c7:0e:1f:b7:c1:09:f2:84:ce:bd:9a:95:31:d0:
9e:9b:08:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:32:44 2025 by rpki-client