Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/9ecc0bd6-104c-43e2-9db8-92afcb871843.roa
File: 9ecc0bd6-104c-43e2-9db8-92afcb871843.roa (raw, json)
Hash identifier: ciVUaDFLZtBq77ZJ236aXtPMC2K4bxdOId+7BtAC4Ks=
Subject key identifier: 71:0C:FF:C4:D5:19:47:26:E2:76:31:97:56:07:6F:6B:71:55:EF:19
Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Certificate serial: 2EFE86BC469AA8BC92BFCAD7B462044B8F0A09A5
Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/9ecc0bd6-104c-43e2-9db8-92afcb871843.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2403:b300::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:fe:86:bc:46:9a:a8:bc:92:bf:ca:d7:b4:62:04:4b:8f:0a:09:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918806F0000
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: CN=bb9a9116-f615-462e-a680-5266b327e0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:d5:30:2e:89:6c:45:ad:49:b2:1c:ff:96:
2e:21:31:71:a8:20:37:aa:e7:9d:87:c5:0e:96:20:
46:d6:21:59:9b:14:da:ae:d4:9f:e2:af:f5:f8:c0:
a5:b0:24:39:4c:c3:c6:4d:09:07:d2:f3:7c:18:a4:
93:de:e7:40:1f:61:81:1b:05:d8:87:63:ae:cb:70:
e0:e0:13:f7:35:16:16:62:55:98:51:3a:c5:d5:cc:
ce:b2:93:23:e0:96:c6:a5:5c:68:4c:20:30:f7:ff:
94:ec:85:7d:93:e2:03:bc:79:f4:2e:b7:df:c6:30:
63:bd:44:52:26:77:9c:dc:9f:d8:64:6c:04:7a:96:
a8:74:7c:68:c9:be:1c:f6:e4:79:69:04:7b:22:b5:
e3:96:f8:4b:85:4c:7b:ce:c0:98:15:f2:e2:5d:7b:
ea:93:e3:42:d0:21:73:72:0f:28:bd:54:63:96:60:
89:92:d6:c7:30:72:d2:9b:4d:3b:48:aa:ad:13:eb:
84:10:3f:6c:e5:70:75:ab:c9:b4:ea:39:b2:ce:85:
dc:fa:9f:51:a8:c1:91:9c:3f:aa:43:97:d1:f9:7f:
77:1a:21:d8:5d:27:7a:9e:20:b1:e9:0c:11:2d:70:
7d:d1:1b:5f:64:52:65:7c:bb:4e:04:09:d9:3f:db:
73:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0C:FF:C4:D5:19:47:26:E2:76:31:97:56:07:6F:6B:71:55:EF:19
X509v3 Authority Key Identifier:
keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/9ecc0bd6-104c-43e2-9db8-92afcb871843.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:b300::/32
Signature Algorithm: sha256WithRSAEncryption
8f:ac:fe:86:e2:a3:29:09:a8:49:e3:e0:67:0d:89:b6:8d:f8:
e3:f9:4a:0b:b5:40:aa:0c:61:8c:c7:67:52:8f:74:ba:3b:b0:
63:2e:65:d5:d0:3a:42:6d:8e:97:53:1b:28:84:51:95:08:a8:
83:75:08:97:c3:6c:e8:9f:28:c3:fd:3d:a3:b5:df:47:d9:ca:
9d:bb:67:f9:d2:57:ee:61:7c:94:db:da:04:81:48:bf:2a:44:
a8:44:c6:9b:7d:99:8a:07:c4:a6:1b:19:78:92:d5:61:34:eb:
f8:40:d5:7c:6a:d4:57:8f:2d:6d:3d:d2:18:6a:8d:32:6c:1e:
e3:6b:8b:40:af:ca:69:9f:a1:cb:79:04:b4:3a:e1:dd:a2:43:
9e:c8:fe:f2:c5:63:1f:33:ad:e3:89:7b:de:83:b2:8e:73:76:
03:7c:8b:64:2d:3b:9e:9d:6e:f6:9d:b4:62:2c:de:6c:cc:bc:
6d:db:d6:51:93:42:f4:f5:8b:02:47:b3:7e:c4:4a:10:25:6f:
76:76:dd:55:b8:ff:c6:fb:ed:02:64:a7:a1:12:34:82:b6:01:
7c:4d:23:15:e6:7d:bb:83:90:df:b7:fa:0c:af:81:97:b1:74:
45:12:aa:1d:08:ec:03:3a:68:ea:d5:41:f0:20:b4:e1:9b:fb:
7d:9e:cf:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:02 2025 by rpki-client