Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f08523a3-9e09-448f-83cd-696ae8bf3990.roa
File: f08523a3-9e09-448f-83cd-696ae8bf3990.roa (raw, json)
Hash identifier: ifg3/Xp1diWbTBsv2JcfsKqYFSGiaS6rw9q97QGaCbs=
Subject key identifier: F5:94:50:9C:3C:C9:27:BE:64:B5:36:85:11:A5:74:7B:49:CE:80:04
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 25BBAFF2BC332EE7C4132192D6F192D4D76C2C13
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f08523a3-9e09-448f-83cd-696ae8bf3990.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf4:a000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:bb:af:f2:bc:33:2e:e7:c4:13:21:92:d6:f1:92:d4:d7:6c:2c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b4:ec:d9:5b:4f:44:58:6c:60:00:17:d8:f3:
e5:f6:14:5f:9c:96:f3:47:fc:64:71:78:f9:f4:21:
ad:05:3b:b4:00:d7:56:28:e8:27:b2:92:6e:31:96:
f3:eb:ea:89:ad:39:5f:7f:27:e5:7e:52:b6:b3:e9:
f1:d6:ea:0c:8b:75:e6:e8:c6:c3:78:e4:b5:43:2f:
66:72:4d:0c:f6:55:78:35:b9:13:fd:9c:47:d0:ea:
0c:02:c3:26:2a:8e:cd:62:4f:e2:32:72:58:d1:26:
da:11:5b:52:70:29:ef:07:ab:64:16:a9:03:ef:b9:
2d:df:8a:a4:bb:44:02:74:cb:90:91:60:91:cd:4d:
1b:2f:05:ff:2b:0d:ea:b5:7e:43:c3:69:76:c9:1c:
b5:06:a7:4a:12:d6:20:60:51:df:72:eb:1b:21:d7:
74:e3:f2:b5:68:c6:43:7f:30:c2:fd:78:0d:a5:b2:
7e:db:f0:c5:0e:a5:a2:54:c8:c3:05:b8:fb:d0:6e:
14:20:a6:9d:f8:47:d7:db:88:51:44:bc:60:8f:0c:
0c:a4:0b:66:5d:75:9e:61:d5:7e:85:79:57:1e:70:
d2:6d:87:7a:5b:7d:b1:13:fa:83:cd:b9:fa:0d:cc:
ba:ba:57:d9:7e:95:3f:2a:e4:75:fc:e0:e9:80:fb:
0c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:94:50:9C:3C:C9:27:BE:64:B5:36:85:11:A5:74:7B:49:CE:80:04
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f08523a3-9e09-448f-83cd-696ae8bf3990.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf4:a000::/40
Signature Algorithm: sha256WithRSAEncryption
4c:42:ec:f5:57:77:df:a4:f6:4f:65:78:94:92:3e:84:3b:1c:
67:41:c8:55:bf:ac:16:5f:e3:1f:cb:34:b1:bd:58:ce:42:8c:
76:2a:e9:3d:99:e3:67:0e:64:0c:f2:91:15:31:66:02:e4:75:
7a:23:56:da:12:ba:6a:28:8a:96:68:37:51:f8:aa:26:dc:a0:
08:99:7c:fe:65:b6:1c:62:bd:c5:16:98:d9:b1:20:00:1d:2a:
0b:7b:e1:1b:39:0c:52:9e:42:c4:a5:90:34:72:e3:19:cd:22:
f2:ca:88:6e:2e:54:c3:c8:f8:43:6f:6e:1d:49:6a:1a:8f:04:
26:d5:7c:98:81:4e:b7:de:5e:03:18:5a:df:06:c8:d1:1e:05:
72:36:45:44:c0:7e:84:ff:21:dc:71:09:72:05:4f:22:11:f1:
1c:3d:90:b8:7a:6a:47:92:93:5b:a8:bc:36:6a:96:e6:45:2d:
cc:eb:89:3b:a8:f4:f3:c3:26:09:13:b3:73:ba:7a:ec:ba:0c:
01:f9:5b:b2:a7:87:56:82:ee:60:75:8d:b3:2f:b3:cb:40:61:
49:4b:34:ee:d9:ef:a0:62:55:aa:b1:14:e1:78:12:71:5e:07:
a1:60:7f:bb:d3:d5:1e:4d:22:0f:57:c2:d0:09:26:d1:d1:a2:
2f:be:ed:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:34 2025 by rpki-client