Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f24045a5-5771-4886-b5e9-a11c9adba808.roa
File: f24045a5-5771-4886-b5e9-a11c9adba808.roa (raw, json)
Hash identifier: tO6rWJvsWLFWu+Zj+Uw/7EK4htmeTjYNx1UAPE16eDw=
Subject key identifier: 42:2B:3A:25:A9:9B:B1:AF:DB:8F:73:5B:0B:63:BA:E8:36:47:E3:81
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 72B1CC45CEA682B5DF1ED9394EA3399EA5DD1724
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f24045a5-5771-4886-b5e9-a11c9adba808.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 103.246.148.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:b1:cc:45:ce:a6:82:b5:df:1e:d9:39:4e:a3:39:9e:a5:dd:17:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:70:5d:f5:bb:0f:dd:47:99:bc:76:2f:36:3d:
6b:7b:99:32:14:e1:e9:54:c8:03:d9:51:90:bf:0d:
42:5b:f8:12:c5:cc:a0:df:d2:9a:6a:67:39:c4:10:
f2:dd:89:ae:2b:2e:67:da:ec:28:82:25:75:74:e3:
48:37:2c:5d:bb:e5:29:ba:5c:d7:bf:4c:57:df:a9:
a8:aa:a2:35:b8:43:1c:ce:19:4d:c3:b1:84:ca:ca:
71:f2:4a:ae:b4:f4:ef:02:3a:f2:27:5a:b6:72:9b:
0d:8a:cb:48:1f:8f:4c:ff:62:4e:88:16:45:43:da:
be:d4:56:cb:03:a3:ee:39:39:25:6f:84:dc:40:e3:
32:37:c6:21:9d:fe:4a:8e:2f:0e:dd:38:d8:25:11:
21:74:d0:94:11:43:31:90:2d:1e:09:74:57:e6:40:
37:0a:66:b8:e6:d2:9a:e5:d0:9b:42:bb:58:3d:4e:
fd:62:2b:2f:3a:c8:cf:21:e7:36:a6:10:d0:ae:2d:
1f:e8:c9:6b:76:34:24:e9:fe:f6:a7:9e:e2:6e:c0:
55:98:c4:cc:1c:43:17:0f:e1:07:5f:a1:8e:61:57:
ad:58:48:20:77:4e:97:c9:09:06:98:d2:bd:43:d8:
00:27:59:f7:96:9b:95:3a:7f:82:b5:7d:e0:d9:42:
d3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2B:3A:25:A9:9B:B1:AF:DB:8F:73:5B:0B:63:BA:E8:36:47:E3:81
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f24045a5-5771-4886-b5e9-a11c9adba808.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.246.148.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:e1:f1:53:dd:2a:11:44:61:5a:06:91:6c:43:85:2c:a4:05:
d3:12:69:33:b3:14:5b:35:d3:d1:fc:8c:bf:d3:8c:eb:11:46:
34:7a:bb:50:43:23:13:17:9e:f4:70:bc:38:83:84:de:dc:3b:
d7:04:66:f7:cd:52:aa:7a:a0:85:a5:4c:f8:9a:13:69:85:6d:
0f:3b:5e:ce:94:01:e6:05:e4:de:c6:62:40:9e:3c:c8:02:30:
22:c2:f6:01:95:9f:f1:0a:f2:1d:9a:37:3b:19:1e:c4:08:4c:
0c:a9:75:df:26:11:6e:d4:d5:35:13:08:aa:29:53:e5:b6:ad:
e8:6a:94:27:c3:56:8c:50:0a:c1:2e:3f:a5:f6:34:e4:78:13:
35:3c:53:b6:e4:2b:00:64:27:7f:cc:05:f5:59:5e:9e:ee:01:
be:13:3d:c3:0d:8f:5f:d6:31:31:5b:ea:08:29:a0:19:2a:2e:
a2:31:26:45:a4:9d:33:8c:7e:71:fd:1f:03:8f:3d:9a:fa:d1:
69:88:73:da:4f:ef:ce:2e:d5:b2:e9:94:1d:72:a4:6e:13:62:
70:6e:11:1b:73:e1:27:d2:04:4d:74:2f:03:64:7b:ea:fc:f5:
ac:f9:5b:89:27:b3:95:da:19:d2:a1:ee:6f:39:62:51:8a:28:
a9:a9:a3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:50 2025 by rpki-client