Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e2f1462-567a-429e-af20-4c8510347ac3.roa
File: 0e2f1462-567a-429e-af20-4c8510347ac3.roa (raw, json)
Hash identifier: S3lC9Cg33+p1VjyOdYjMdxBulV0pxPId9pQ0j4IWqqQ=
Subject key identifier: DF:F3:F9:AF:B2:72:19:5E:90:D0:EE:ED:30:FD:03:26:5B:51:F4:51
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 1B9CB9164718CA711EC207A415A8B840B9676E8B
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e2f1462-567a-429e-af20-4c8510347ac3.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da14:8000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:9c:b9:16:47:18:ca:71:1e:c2:07:a4:15:a8:b8:40:b9:67:6e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=ca679b1ac1f78a7a0082a2fcc2db4f5f28b0ba3b1a7aa6c90dc23d40066d7104, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:63:30:ed:44:69:90:ab:c7:eb:52:6a:28:e4:
30:c2:c8:6a:43:eb:2d:e0:7d:7d:11:7d:c0:a9:b4:
41:89:7e:a2:db:f7:33:65:18:2a:4d:d9:17:2d:fc:
db:33:5c:6a:9d:ea:a6:92:fc:a2:6d:ac:8a:2d:d2:
8d:3f:5a:97:be:bd:32:c8:f9:60:ce:e7:86:f8:a9:
b1:0f:68:5e:e6:ca:32:a9:f3:11:e4:c6:ba:31:b8:
94:2e:da:be:20:04:7c:c2:23:1b:16:18:89:2f:e4:
a8:0e:78:3e:66:9b:4a:3e:cc:7a:10:aa:cd:af:41:
51:a5:82:27:f3:6b:91:d2:b2:6f:91:a0:41:87:39:
38:6f:bf:19:64:c7:c0:93:bf:92:78:5f:82:cc:8c:
3a:fd:3f:13:01:a2:ac:58:e4:dd:f9:1e:3b:a6:ea:
3e:f8:2c:01:cb:70:59:a2:e5:b8:9b:55:27:7c:99:
d4:e6:b0:cf:61:0b:6d:83:fa:31:1a:4e:b6:75:a0:
09:88:79:44:51:88:0e:4b:f9:34:98:75:14:35:7d:
ea:e3:6f:6a:ac:7e:37:fa:b8:77:7f:09:18:d4:8c:
91:08:da:14:80:2d:b0:00:a0:60:24:36:a5:02:92:
1c:ac:00:d4:79:0b:4c:2b:0b:ec:84:34:b5:94:53:
66:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F3:F9:AF:B2:72:19:5E:90:D0:EE:ED:30:FD:03:26:5B:51:F4:51
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e2f1462-567a-429e-af20-4c8510347ac3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da14:8000::/36
Signature Algorithm: sha256WithRSAEncryption
96:6b:16:0f:be:be:06:c3:5c:b9:5d:47:97:67:17:20:39:ed:
58:43:6e:94:70:98:c8:10:6c:8b:25:38:e5:a2:ee:80:cc:ef:
88:f2:09:8e:27:29:72:18:c6:f5:8c:dd:ea:17:8a:ae:b9:5e:
67:8b:97:e7:c7:4f:03:fd:ea:54:8a:89:f8:a9:69:36:29:41:
e3:45:86:8e:c6:a1:c3:6f:e1:ab:cf:e7:55:1c:1e:d2:5a:8c:
97:07:04:5f:30:d9:c7:1d:e7:d6:b6:a5:a7:3b:97:a8:89:a1:
c2:ce:b2:03:95:75:a8:4a:45:3a:10:48:7a:95:84:36:4f:b3:
b9:37:5e:4e:a0:42:27:26:f9:57:8a:05:fe:1b:7e:8e:be:c0:
d1:24:99:20:a8:f8:aa:c1:96:fe:14:bf:b0:d9:4c:ab:5e:10:
54:fc:26:84:08:d1:48:10:1a:e8:58:40:1b:d8:60:73:89:0b:
62:35:9c:30:73:3b:6e:a4:9c:77:d4:9c:ba:e8:f8:50:34:f2:
e1:71:60:40:a9:cb:23:32:cb:da:4b:c7:40:63:82:fb:50:82:
a7:ff:83:df:62:f3:d6:e6:36:86:48:a5:30:88:37:12:f2:bc:
f5:04:7c:4f:c0:22:79:3e:30:02:f5:86:a1:f3:d6:29:e2:93:
65:a1:52:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:31:52 2025 by rpki-client