Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f05037b4-d77c-4c95-ad2c-2fcb3e6d0418.roa
File: f05037b4-d77c-4c95-ad2c-2fcb3e6d0418.roa (raw, json)
Hash identifier: t1SluoCZHnSTXCidB8DoL2qTuqEwn1eOuxlOdLRYnI4=
Subject key identifier: 87:4D:91:87:A1:25:3B:3C:BC:B1:5E:EC:53:08:16:19:67:1A:CD:5E
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 724ADAF375F0AAAC536641209375DB08D04CCA96
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f05037b4-d77c-4c95-ad2c-2fcb3e6d0418.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da38:a000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:4a:da:f3:75:f0:aa:ac:53:66:41:20:93:75:db:08:d0:4c:ca:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:31:40:f6:2d:d0:6e:a0:55:38:fa:40:b4:
56:94:27:32:89:c1:ca:61:c4:32:28:d0:f8:11:e3:
35:0c:b7:28:fc:1d:f8:3b:72:38:a9:54:c5:85:88:
d2:58:92:37:39:08:16:4f:48:2e:8a:1f:05:20:c6:
c8:c2:5e:95:6f:c6:95:a1:c3:23:f4:dd:ae:06:06:
a5:1d:a8:76:d2:f6:f6:aa:6d:1d:52:43:d8:04:be:
ba:bf:b0:0c:f6:8f:ec:0c:a5:18:b9:e6:62:9f:c8:
3d:67:98:ab:cc:a4:c8:ea:27:36:ec:ca:55:cc:ee:
0e:ec:ed:c8:95:34:ee:ce:38:23:59:ce:b4:ed:9c:
89:59:f9:27:0a:cb:97:c7:e6:09:a9:5d:3e:cf:24:
3e:f9:c0:db:cf:a7:5a:83:a9:36:09:3c:ef:70:42:
d1:a4:37:f6:a3:fb:7f:a7:39:8a:22:4a:15:46:cd:
16:d0:92:64:b1:f7:60:0d:f9:91:36:f1:64:26:cf:
25:2b:63:02:af:04:11:71:b1:fb:1b:ef:d9:fc:08:
ff:37:21:94:25:00:b9:6c:80:43:40:47:86:f2:d9:
dd:f2:a2:24:e7:b8:e2:fe:ea:5f:ea:ad:d5:20:d4:
19:fe:af:77:89:c5:50:1e:15:be:68:9e:10:b3:2f:
2c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4D:91:87:A1:25:3B:3C:BC:B1:5E:EC:53:08:16:19:67:1A:CD:5E
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f05037b4-d77c-4c95-ad2c-2fcb3e6d0418.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da38:a000::/40
Signature Algorithm: sha256WithRSAEncryption
be:da:6d:99:31:7d:d9:2c:0e:c6:94:93:4e:3d:3b:5a:2e:49:
f2:51:c8:70:3b:60:ed:1b:72:c2:36:51:b0:44:9f:13:4a:53:
61:dc:6f:30:78:b1:78:9d:16:e4:68:ec:c8:8b:e6:6a:0b:16:
13:6c:8f:b3:30:36:32:ad:00:2d:a9:b4:9b:97:8d:6c:55:ab:
6d:23:41:2b:b8:ca:d8:ab:3f:49:85:5c:b2:6d:0b:f6:7c:5f:
09:91:86:90:ae:8f:f4:3e:7a:d0:83:c8:dd:c5:16:f5:2f:61:
d6:ef:21:8a:98:86:fd:f8:ae:b6:73:cd:fd:1f:25:0a:5e:da:
22:61:f6:0e:94:79:d1:73:a4:68:a7:ed:85:bc:67:ab:14:30:
ae:a8:1f:49:d4:77:f8:1f:65:7f:a8:bb:98:01:95:64:2a:c7:
d2:10:86:5e:3d:f0:cf:e8:6d:62:98:b1:4c:03:32:8b:d4:66:
8e:8e:97:9f:77:23:ec:4c:ae:7e:3a:7c:e0:0f:12:29:fb:f6:
f3:3e:59:cb:60:39:6f:0d:56:77:8e:bc:6e:2b:5f:19:a2:e3:
a0:bf:2c:58:ab:a9:05:cb:64:0a:7d:85:66:93:8b:02:a2:26:
13:c4:37:f9:2a:75:58:14:26:ec:0f:8c:fd:d3:8a:a0:47:16:
34:cd:9d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:22 2025 by rpki-client