Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/578a19af-8138-49ac-8a51-a2bd148210a1.roa
File: 578a19af-8138-49ac-8a51-a2bd148210a1.roa (raw, json)
Hash identifier: bSOVHRcI9NnAk0JoqsB7ceHze0uLvvWP9Em+oCeE0jo=
Subject key identifier: 30:17:E6:C1:C5:9F:3F:A4:D3:8E:F0:17:61:A8:D9:82:05:40:0A:8D
Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Certificate serial: 0C6E61F69167214AE3690E388E81513D865C40CF
Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/578a19af-8138-49ac-8a51-a2bd148210a1.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2403:b300:1040::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:6e:61:f6:91:67:21:4a:e3:69:0e:38:8e:81:51:3d:86:5c:40:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918806F0000
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: CN=bb9a9116-f615-462e-a680-5266b327e0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:04:26:3f:23:1b:4e:2d:e7:1e:a3:df:27:9f:
47:f8:21:ed:f4:b2:64:7c:94:72:76:fd:51:c3:1a:
d0:c0:68:22:91:19:5e:93:d2:50:b3:8a:3f:7b:45:
d9:42:09:2c:b6:47:02:99:6e:82:02:cf:d8:2e:7b:
82:7a:1a:6e:df:4b:b3:49:72:1b:3e:0a:26:78:2d:
72:71:e9:9a:04:bb:27:5c:77:90:5d:8a:ab:d6:e7:
c0:70:cd:19:4f:9f:76:f1:f5:1a:23:2c:d9:06:0f:
7d:69:76:9d:b6:00:0d:b2:72:ea:db:81:42:da:f8:
58:31:fa:c8:76:52:ec:f9:7e:0d:d0:bb:7b:0f:3a:
15:35:0f:07:62:9c:4c:e0:e4:c1:99:6f:bd:83:79:
25:41:f7:79:f1:15:9b:42:34:43:a4:f6:6e:8d:26:
32:21:fb:f4:f7:46:48:d7:85:53:bf:68:37:98:dd:
d1:15:94:08:86:60:2e:64:19:e3:58:94:86:93:cd:
22:0e:aa:10:29:e8:04:58:55:07:97:48:80:d8:ca:
67:d3:64:23:15:f0:51:2c:a7:a7:ca:ad:c2:f5:fc:
b1:e7:03:91:8a:31:6e:ba:ee:17:a5:68:13:b6:9f:
98:f8:2a:c3:e2:ba:54:df:72:f8:25:24:0a:1c:d6:
1f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:17:E6:C1:C5:9F:3F:A4:D3:8E:F0:17:61:A8:D9:82:05:40:0A:8D
X509v3 Authority Key Identifier:
keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/578a19af-8138-49ac-8a51-a2bd148210a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:b300:1040::/48
Signature Algorithm: sha256WithRSAEncryption
2f:9a:21:c8:89:7d:7c:74:35:68:76:22:75:29:f8:c4:06:d4:
5c:00:1d:98:19:cb:12:b4:2b:43:47:d2:14:c9:1e:dd:d0:1b:
3a:ae:fe:5d:fe:0b:2e:86:1b:3c:e9:69:3b:30:d2:f9:a5:5b:
a7:87:55:8e:ea:06:c2:f9:61:26:23:d5:37:5f:9a:9b:51:fc:
fc:ce:a3:e9:80:14:9f:fe:9f:d7:06:91:07:20:28:a9:b9:f8:
58:90:f0:62:cf:62:24:07:70:75:f2:30:a5:59:a1:ca:27:87:
3d:f0:a7:2a:c8:40:fa:ee:f7:e2:4e:f1:f2:ad:b6:94:5d:df:
ed:56:f2:2a:ba:66:8f:a4:7c:e3:a5:79:a6:41:cb:da:8a:0e:
7e:c7:1a:bf:bc:de:a7:3a:1c:02:c2:b6:76:c5:6e:3b:05:e3:
02:4a:fb:01:e5:44:aa:ea:b1:d5:2d:4d:a5:3d:ec:71:2d:84:
5d:be:c2:79:48:00:0a:0f:18:27:1b:a6:f8:52:ea:44:92:80:
c9:dc:8b:6e:ff:c0:3d:9c:fe:78:24:aa:69:48:8b:20:f0:b5:
22:fa:c3:47:ca:29:7e:4b:01:c2:05:72:2e:18:b2:dc:c9:36:
89:89:a0:84:a1:43:22:c9:e7:46:2c:17:a4:a4:47:b9:88:f5:
a3:ad:e3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:29 2025 by rpki-client