Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f1ccb23a-389c-4dbf-ad4d-5d2c87756cd4.roa
File: f1ccb23a-389c-4dbf-ad4d-5d2c87756cd4.roa (raw, json)
Hash identifier: hzTjtJT2Q0QlOhaE7VfsueFLxnKUbnrx0gqem87Z5Hs=
Subject key identifier: EF:06:E8:B4:10:39:30:1D:61:27:A0:E8:9C:3B:4B:DF:20:7D:37:DC
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 45A25C42F8F1332DD4364A387B31A7C0088D55DC
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f1ccb23a-389c-4dbf-ad4d-5d2c87756cd4.roa
Signing time: Sat 14 Dec 2024 00:00:00 +0000
ROA not before: Sat 14 Dec 2024 00:00:00 +0000
ROA not after: Sat 18 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daff:8000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:a2:5c:42:f8:f1:33:2d:d4:36:4a:38:7b:31:a7:c0:08:8d:55:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Dec 14 00:00:00 2024 GMT
Not After : Jan 18 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f7:8d:5b:ff:39:d9:97:40:e1:42:90:2b:90:
f0:df:60:3e:1c:35:dd:aa:94:4f:cb:7a:06:ef:96:
b1:ec:ad:9e:68:2c:8e:2f:a7:a2:c2:8b:d1:c9:51:
d6:da:1e:a0:48:fd:3f:a6:0b:39:5a:c8:7d:61:e8:
fc:c5:c0:d3:90:39:1c:b7:95:b7:ad:8b:4d:4d:75:
84:a0:25:f1:90:7f:8a:d9:d2:08:df:28:7f:b0:31:
70:ed:fa:51:cf:14:1d:56:75:40:88:3f:26:5c:66:
53:ef:e0:58:42:a5:5d:90:e7:ae:76:d3:e2:9f:58:
ea:5c:64:72:f1:fc:94:02:6b:35:8a:b3:42:82:c9:
7e:3e:f1:75:48:c9:d4:a4:c0:7e:6c:48:c6:d8:9d:
4e:b1:e5:4d:3b:f5:bd:a4:7d:65:60:be:e3:5d:fd:
4b:bb:17:ee:37:a6:49:3b:81:70:75:c7:6b:0e:40:
ba:32:98:fa:e0:fa:34:1c:cc:73:7e:58:ce:ff:65:
5c:fe:27:57:42:14:4e:fd:e8:8e:48:1d:86:7c:df:
4d:c4:97:22:32:f2:5b:9c:94:d1:08:8d:86:37:80:
de:fe:ff:a3:93:f5:4d:33:73:6a:31:65:b1:f3:26:
9a:60:18:2a:e9:3d:7b:b9:1a:36:0e:aa:23:f8:c8:
90:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:06:E8:B4:10:39:30:1D:61:27:A0:E8:9C:3B:4B:DF:20:7D:37:DC
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f1ccb23a-389c-4dbf-ad4d-5d2c87756cd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daff:8000::/40
Signature Algorithm: sha256WithRSAEncryption
b8:68:7a:df:2b:5e:95:34:0f:46:f4:07:77:ba:89:06:65:87:
26:b8:48:7a:26:43:74:d1:a0:d8:c3:a1:cb:fb:de:57:8f:c7:
af:b2:de:dd:a9:5a:e4:36:8d:87:4d:33:f7:b9:9f:8e:85:c3:
97:d4:13:ae:a3:26:71:46:77:19:49:72:01:34:32:7c:d0:e0:
47:d6:8f:33:0d:68:9a:8d:1c:61:ac:69:6f:f2:24:46:46:10:
86:99:82:7c:fb:ef:dd:d1:2b:55:77:56:5d:88:89:0c:b0:85:
1e:a4:4a:03:66:8c:06:94:6b:35:5f:dc:8c:83:97:e3:7b:33:
9f:65:e7:db:2e:e0:93:09:a9:44:1d:f7:71:25:cf:01:17:3d:
81:ae:a6:2a:85:b3:e7:c2:53:56:85:84:b1:5f:99:b0:44:ca:
4a:78:d1:90:48:53:72:3e:22:34:6c:3b:07:91:77:b6:51:e3:
3b:f0:89:45:0d:9b:a2:2e:df:18:34:2f:0f:d7:bf:52:55:81:
7e:15:9d:b3:8d:2e:9a:74:9e:58:f3:bd:9d:44:63:10:16:d9:
14:c7:f4:9f:d6:19:c4:53:4c:ca:0d:1b:d2:5a:45:e2:ef:38:
f0:41:72:44:22:bb:6d:03:18:90:2c:b4:13:70:72:38:ac:37:
3c:86:7a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:44 2025 by rpki-client