Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/589cbaa9-e0fe-4ad9-ba2a-25c4433a8da4.roa
File: 589cbaa9-e0fe-4ad9-ba2a-25c4433a8da4.roa (raw, json)
Hash identifier: vScSEvGLki/0XqnjRx8r5KUb0ImOvAHvlehuhPwHEk4=
Subject key identifier: 42:35:E6:E8:41:FF:49:AA:5C:A5:9E:D1:89:C8:DD:36:4C:D5:58:72
Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Certificate serial: 62C4839A80B8347058B786443259DE956AE15E47
Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/589cbaa9-e0fe-4ad9-ba2a-25c4433a8da4.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 240f:8000:4000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:c4:83:9a:80:b8:34:70:58:b7:86:44:32:59:de:95:6a:e1:5e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD28A0000
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: CN=4257e925-715f-47a2-893e-0e3f97ec7e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:b6:a4:47:30:37:33:4d:05:16:84:36:6a:
4a:2f:a0:94:87:52:9d:7e:d3:43:1b:d6:2d:1b:78:
c7:45:39:66:0b:63:a3:8d:a3:d8:22:1a:ee:72:d3:
ea:e5:de:8e:87:2a:9f:3e:e1:e4:36:b8:0f:d0:71:
b1:d3:99:74:a2:33:99:b4:9b:32:31:89:06:fd:67:
9d:ab:0a:24:18:68:ef:52:b8:75:08:90:97:f0:a4:
86:ff:d8:a3:4e:37:fd:19:8e:9f:76:c8:14:b6:c7:
cd:04:22:f7:00:02:d7:04:22:c8:82:71:65:1d:f7:
6a:83:9a:b6:3b:70:e4:15:0f:af:c4:b8:48:e6:9b:
a5:41:43:d1:c8:07:8e:57:66:dd:75:39:a7:5b:11:
b2:58:13:32:bc:18:b9:44:77:33:67:67:5a:fe:5d:
35:9b:5b:1e:f3:d1:53:a6:b9:de:b3:2a:6b:db:b4:
a3:d2:e9:fd:08:5a:cb:66:24:a2:d6:11:68:e9:82:
d4:9c:7c:9b:a1:22:d2:a6:da:b1:ef:d2:5f:44:44:
25:0a:d1:dd:a4:84:0e:5d:56:c0:2b:6f:e1:f4:f5:
3d:d3:75:19:bf:bf:87:8a:32:9c:cf:b9:80:40:ef:
76:aa:72:9c:11:b2:80:dc:dc:48:d9:ab:8c:5b:33:
08:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:35:E6:E8:41:FF:49:AA:5C:A5:9E:D1:89:C8:DD:36:4C:D5:58:72
X509v3 Authority Key Identifier:
keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/589cbaa9-e0fe-4ad9-ba2a-25c4433a8da4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240f:8000:4000::/40
Signature Algorithm: sha256WithRSAEncryption
19:7a:0f:27:a3:cc:6e:d5:3e:32:e7:f7:dd:dc:26:1a:cc:8d:
6e:50:81:cd:0c:92:d7:18:ab:d0:06:ee:5f:a5:43:12:f8:85:
0f:c5:03:49:5f:00:02:ba:9b:80:13:04:73:a9:68:52:54:06:
9e:75:22:56:b6:e2:39:8b:5b:af:f5:ef:0e:d9:1c:3b:60:d1:
02:69:fd:f0:7f:8d:d5:bb:92:43:ea:45:21:71:e7:d1:b4:64:
c6:93:02:5c:a1:51:cf:f4:1a:27:ff:ef:1a:26:e1:9d:ce:63:
cb:45:93:4c:b5:68:c9:d8:53:c3:8b:bf:d4:9d:f0:96:3a:08:
82:10:8e:2a:0e:47:3c:f9:04:03:92:a3:ff:86:f7:0e:72:1c:
ae:77:33:f8:0a:b1:00:6f:a9:7e:4a:33:42:00:0f:8f:6c:f7:
77:6d:81:5c:4e:ff:e2:4b:e1:e5:cd:e6:0e:fd:da:c5:9e:3b:
d9:04:10:4b:14:89:d5:e8:bb:44:da:81:9d:0d:c1:1f:df:90:
31:70:87:4e:f6:aa:bf:77:7f:67:83:d0:5c:45:b0:f0:88:d2:
cc:14:5e:75:1d:0d:de:34:fb:92:b1:f4:1b:4b:f6:7e:86:2a:
21:4e:e4:ff:58:09:8a:a8:cb:94:31:f0:96:a3:89:b5:73:23:
c3:e7:15:ec
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUYsSDmoC4NHBYt4ZEMlnelWrhXkcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz
NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI0MTIxMzAwMDAwMFoX
DTI1MDExNzIzNTk1OVowejFJMEcGA1UEBRNAM2I3MmRkZmUzMmExOTVlMTMxOTQ0
ODI2YmFlMTliYzNmY2Q4OWZjZjI1ODA1YTJmNTBlMjI5Yzc3YjcyMjc2ZjEtMCsG
A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu22pEcwNzNNBRaENmpKL6CUh1Kd
ftNDG9YtG3jHRTlmC2OjjaPYIhructPq5d6OhyqfPuHkNrgP0HGx05l0ojOZtJsy
MYkG/WedqwokGGjvUrh1CJCX8KSG/9ijTjf9GY6fdsgUtsfNBCL3AALXBCLIgnFl
Hfdqg5q2O3DkFQ+vxLhI5pulQUPRyAeOV2bddTmnWxGyWBMyvBi5RHczZ2da/l01
m1se89FTprnesypr27Sj0un9CFrLZiSi1hFo6YLUnHyboSLSptqx79JfREQlCtHd
pIQOXVbAK2/h9PU903UZv7+HijKcz7mAQO92qnKcEbKA3NxI2auMWzMIIQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFEI15uhB/0mqXKWe0YnI3TZM1VhyMB8GA1UdIwQY
MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO
MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2
LzU4OWNiYWE5LWUwZmUtNGFkOS1iYTJhLTI1YzQ0MzNhOGRhNC5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi
Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJA+AAEAwDQYJKoZIhvcNAQELBQADggEBABl6DyejzG7VPjLn993c
JhrMjW5Qgc0MktcYq9AG7l+lQxL4hQ/FA0lfAAK6m4ATBHOpaFJUBp51Ila24jmL
W6/17w7ZHDtg0QJp/fB/jdW7kkPqRSFx59G0ZMaTAlyhUc/0Gif/7xom4Z3OY8tF
k0y1aMnYU8OLv9Sd8JY6CIIQjioORzz5BAOSo/+G9w5yHK53M/gKsQBvqX5KM0IA
D49s93dtgVxO/+JL4eXN5g792sWeO9kEEEsUidXou0TagZ0NwR/fkDFwh072qr93
f2eD0FxFsPCI0swUXnUdDd40+5Kx9BtL9n6GKiFO5P9YCYqoy5Qx8JajibVzI8Pn
Few=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:47 2025 by rpki-client