Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02d14050-b24e-4c05-94a8-c7eb472390d3.roa
File: 02d14050-b24e-4c05-94a8-c7eb472390d3.roa (raw, json)
Hash identifier: 6iNja9Lxan8GSj9UFwxU5lC/HLmug4YDCKgHrmrkUrE=
Subject key identifier: 19:ED:8A:19:DF:33:08:1B:77:65:AC:E5:A4:F8:F0:BC:6E:A8:B7:B8
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 397183F8C7E4F7493A8F0A4A245B410FF39D9D24
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02d14050-b24e-4c05-94a8-c7eb472390d3.roa
Signing time: Tue 31 Dec 2024 00:00:00 +0000
ROA not before: Tue 31 Dec 2024 00:00:00 +0000
ROA not after: Tue 04 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da32:e000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:71:83:f8:c7:e4:f7:49:3a:8f:0a:4a:24:5b:41:0f:f3:9d:9d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 31 00:00:00 2024 GMT
Not After : Feb 4 23:59:59 2025 GMT
Subject: serialNumber=aff878e8199cfc870669808b22359cf00b5657a499c38f1f977553efd2b24568, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:71:b8:16:01:25:ca:a6:d9:1d:c3:7c:43:d8:
50:32:25:44:4b:fd:74:ee:83:50:f1:9c:28:fd:b5:
8d:9f:98:bc:4a:db:0b:b4:42:0e:c1:d0:75:aa:72:
2e:bc:db:3f:e0:88:3a:cb:82:6f:5d:07:7f:77:6c:
41:84:33:56:46:23:ff:ce:7e:8a:3a:96:28:f8:43:
73:a6:ea:c2:08:d0:21:a8:34:e1:c2:df:20:2c:f5:
7a:fd:82:39:6f:fc:fd:9b:25:77:9b:b5:6f:b9:55:
8b:30:0e:33:ba:33:44:e3:11:e3:2d:5d:57:07:68:
7c:91:35:33:c6:52:77:a9:59:e4:46:db:e4:5d:6e:
ca:26:28:73:c3:db:6b:3b:c0:03:df:c3:a6:92:55:
a6:46:bc:33:c0:e5:c8:87:6e:7a:96:c9:c5:2b:22:
de:01:c9:40:6c:58:90:7a:6e:91:b6:0b:b7:cd:95:
07:f4:bc:8b:e7:14:06:5d:80:27:38:ea:46:2b:a7:
2f:3a:76:0c:85:e1:e8:e6:20:67:fb:a7:eb:83:64:
d4:72:f9:ff:50:15:f3:0a:f5:17:5b:ff:f9:35:77:
52:c3:55:d6:84:b9:4c:41:4b:ca:8e:ec:fb:74:48:
05:41:51:10:06:b6:02:f1:1a:13:fd:0a:b8:d2:2f:
71:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:ED:8A:19:DF:33:08:1B:77:65:AC:E5:A4:F8:F0:BC:6E:A8:B7:B8
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02d14050-b24e-4c05-94a8-c7eb472390d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da32:e000::/40
Signature Algorithm: sha256WithRSAEncryption
b3:41:e9:bc:0f:e5:ba:03:27:16:5b:92:3e:5d:75:b7:61:be:
04:19:56:26:a0:a3:a5:b1:7f:ef:36:9c:a8:93:71:5a:14:db:
b2:23:ae:0a:81:8a:83:69:e6:4a:e7:de:2e:c0:a3:c1:28:76:
14:6b:7f:80:10:5b:ba:7d:b1:1b:47:77:eb:e6:59:24:5c:91:
b8:fb:6e:28:2e:ac:08:b4:10:5d:5e:a9:01:2b:ad:1d:a7:83:
76:69:ce:31:cf:8f:f1:00:d6:ad:cf:11:a2:6b:91:5c:62:5c:
d8:1a:ff:71:f5:cd:c7:2a:3d:b2:52:0c:a7:f2:e8:90:17:c3:
1e:98:33:90:c4:b1:5a:03:02:25:04:8c:59:06:49:0c:f6:54:
eb:da:f4:ea:df:2e:ea:a6:f5:05:af:57:c0:01:41:83:02:19:
06:0e:d4:34:53:48:c6:27:0a:95:a3:40:44:68:7c:32:23:b0:
b5:a5:c9:3b:d6:0c:59:a2:b7:bc:02:db:2f:8d:97:87:91:8a:
07:06:43:6e:40:d2:d5:78:96:8f:9b:bc:12:5e:53:b5:a7:ec:
23:0e:f2:b9:df:ca:b8:56:c0:ca:17:6c:9f:b5:36:2f:ae:b0:
75:85:05:77:ae:f8:7d:7c:ab:69:ab:72:2e:ef:65:37:63:3a:
14:18:15:43
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUOXGD+Mfk90k6jwpKJFtBD/OdnSQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTIzMTAwMDAwMFoX
DTI1MDIwNDIzNTk1OVowejFJMEcGA1UEBRNAYWZmODc4ZTgxOTljZmM4NzA2Njk4
MDhiMjIzNTljZjAwYjU2NTdhNDk5YzM4ZjFmOTc3NTUzZWZkMmIyNDU2ODEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHG4FgElyqbZHcN8Q9hQMiVES/10
7oNQ8Zwo/bWNn5i8StsLtEIOwdB1qnIuvNs/4Ig6y4JvXQd/d2xBhDNWRiP/zn6K
OpYo+ENzpurCCNAhqDThwt8gLPV6/YI5b/z9myV3m7VvuVWLMA4zujNE4xHjLV1X
B2h8kTUzxlJ3qVnkRtvkXW7KJihzw9trO8AD38OmklWmRrwzwOXIh256lsnFKyLe
AclAbFiQem6Rtgu3zZUH9LyL5xQGXYAnOOpGK6cvOnYMheHo5iBn+6frg2TUcvn/
UBXzCvUXW//5NXdSw1XWhLlMQUvKjuz7dEgFQVEQBrYC8RoT/Qq40i9xDQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFBntihnfMwgbd2Ws5aT48LxuqLe4MB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzAyZDE0MDUwLWIyNGUtNGMwNS05NGE4LWM3ZWI0NzIzOTBkMy5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAbaMuAwDQYJKoZIhvcNAQELBQADggEBALNB6bwP5boDJxZbkj5d
dbdhvgQZViago6Wxf+82nKiTcVoU27IjrgqBioNp5krn3i7Ao8EodhRrf4AQW7p9
sRtHd+vmWSRckbj7bigurAi0EF1eqQErrR2ng3ZpzjHPj/EA1q3PEaJrkVxiXNga
/3H1zccqPbJSDKfy6JAXwx6YM5DEsVoDAiUEjFkGSQz2VOva9OrfLuqm9QWvV8AB
QYMCGQYO1DRTSMYnCpWjQERofDIjsLWlyTvWDFmit7wC2y+Nl4eRigcGQ25A0tV4
lo+bvBJeU7Wn7CMO8rnfyrhWwMoXbJ+1Ni+usHWFBXeu+H18q2mrci7vZTdjOhQY
FUM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:30:13 2025 by rpki-client