Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/edbc6fb5-ebb3-4ac4-9475-ea43f00f10e6.roa
File: edbc6fb5-ebb3-4ac4-9475-ea43f00f10e6.roa (raw, json)
Hash identifier: JyTEa9bCxqG39t71LX4v1IIaC1CpGSGnKcBPXV/qQ0s=
Subject key identifier: D5:1E:76:EB:83:82:F6:10:79:A7:DB:7C:3B:0C:C1:B4:21:2E:F6:58
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 7DBA95064A6C4A590D3725309821168629CB441C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/edbc6fb5-ebb3-4ac4-9475-ea43f00f10e6.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf9:f000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ba:95:06:4a:6c:4a:59:0d:37:25:30:98:21:16:86:29:cb:44:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9e:6b:47:05:27:b6:99:82:86:5d:0a:e7:01:
de:16:6a:6e:56:fc:64:91:43:4f:c3:23:b8:2c:14:
cf:d2:a7:13:d2:f2:4b:2a:a1:9e:8b:07:41:be:fe:
cd:64:e7:cf:aa:89:9e:b4:3f:58:3a:c6:7a:f4:3f:
a8:69:db:9b:a3:71:dc:b1:7e:42:0e:9e:20:a3:7e:
2e:00:27:e8:0c:cd:13:22:37:a7:7d:64:87:9a:ff:
9c:66:30:ed:c3:d9:84:62:94:e1:5b:01:3c:76:46:
f8:c9:88:d6:da:f3:bd:e8:d5:7b:fc:00:23:a0:38:
5a:40:f8:81:09:0c:cb:67:ca:47:c6:b2:19:5e:20:
ec:7b:58:41:62:c6:20:f5:de:82:19:f2:1c:86:2b:
8c:ce:6e:c1:24:27:08:d8:8c:3f:3d:34:47:c4:cf:
1e:bd:84:48:45:68:26:d9:c8:a1:61:da:e2:c3:a0:
eb:97:47:34:1f:7a:b1:9c:08:cc:03:f2:29:e3:ef:
c8:66:8d:95:e3:db:48:4f:b2:64:7e:d5:47:de:08:
35:67:19:d5:35:65:48:15:38:3d:3b:9a:e4:78:72:
cf:61:13:6a:3e:75:bd:58:8e:f5:81:c8:f8:b5:32:
25:b6:11:b9:e0:03:03:d7:b2:dd:e3:41:e8:53:ec:
df:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1E:76:EB:83:82:F6:10:79:A7:DB:7C:3B:0C:C1:B4:21:2E:F6:58
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/edbc6fb5-ebb3-4ac4-9475-ea43f00f10e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf9:f000::/40
Signature Algorithm: sha256WithRSAEncryption
70:2c:59:4c:7b:63:89:02:97:0e:d5:a4:bb:ab:5a:ae:2b:91:
b3:12:72:e2:34:c4:b5:23:19:21:ce:04:b0:d0:f8:f2:50:2a:
a3:0f:6d:1d:79:d3:95:ab:27:b2:89:9d:22:58:e0:5b:5e:fc:
6b:d2:bd:04:1d:bc:93:35:34:8f:bc:43:cd:df:2e:66:64:92:
59:78:51:90:99:0d:b6:6c:26:78:bf:dd:43:ce:45:1f:b7:dc:
6f:d9:dc:86:d5:46:4c:9d:84:41:08:91:34:0e:19:58:a3:7f:
79:91:62:6c:09:c0:15:11:9e:ac:fc:43:8c:90:ff:5f:79:0c:
00:14:16:3e:59:f4:91:7d:24:38:c1:f6:ac:a2:a0:bc:27:21:
f2:13:0f:91:09:a0:1e:1b:32:81:f8:f3:3e:bb:90:4c:4b:9e:
56:93:87:5a:e0:e7:f1:81:31:ce:88:7f:00:aa:88:95:6b:02:
02:80:38:8a:8b:d1:79:cd:e9:99:32:00:23:76:67:eb:d9:1c:
0d:1f:16:3c:11:cc:3d:25:d2:fb:c0:8b:3d:1a:9b:46:3d:57:
d1:9a:0c:31:97:fb:9f:a9:ca:c1:00:83:96:10:1c:0d:7d:69:
94:6e:a2:80:ed:15:f0:52:c5:6d:12:31:4d:dc:a1:13:63:a2:
05:1d:ec:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:29 2025 by rpki-client