Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1a32ab7c-eb9c-4257-9f15-2007fb60be67.roa
File: 1a32ab7c-eb9c-4257-9f15-2007fb60be67.roa (raw, json)
Hash identifier: XR0fQbOuJB0xK4QldEVV9QmdiNq5WnPVE2UwW9Ih4j8=
Subject key identifier: 8F:DE:36:B9:8F:B3:AF:BA:CA:B8:2A:2C:C6:DF:78:05:89:E3:7A:CD
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 4454F605CB7E89DC09B44DB2684940DDAECCE8E4
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1a32ab7c-eb9c-4257-9f15-2007fb60be67.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da60:9000::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:54:f6:05:cb:7e:89:dc:09:b4:4d:b2:68:49:40:dd:ae:cc:e8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=99e9e4873c8273774326f3c6196f5729de4c1e1aad143c086447cfef9a641408, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a7:7c:d7:5d:fd:b7:b5:a0:c5:7c:17:39:a0:
9c:d4:fc:8f:1f:66:f8:90:fb:8f:8a:e5:e6:c0:e8:
5e:e3:5c:fe:20:85:1a:3a:c3:a9:5d:b5:2d:25:95:
bc:88:b9:9b:a8:d2:6e:e1:09:ff:25:68:e6:25:1b:
96:92:47:c3:2c:b9:01:3b:c4:33:35:fb:62:d6:46:
68:c0:76:49:57:16:77:c7:de:cc:bc:6f:a7:8b:83:
1d:e2:2e:dd:f5:f2:f2:d9:3a:12:d4:d5:bc:13:a4:
d1:31:78:34:eb:5c:b1:2f:0a:e2:93:c7:42:70:bb:
9a:70:8d:67:3d:86:00:1c:6a:80:8f:e6:69:42:5e:
20:8b:43:ca:b7:6b:be:00:89:11:ec:8b:e6:6a:77:
be:0c:fc:40:af:71:e7:b9:06:c0:92:c3:f9:42:fb:
92:e8:84:28:19:86:4c:00:3b:e1:9c:3d:93:e4:07:
cf:bc:cf:13:df:c5:72:fc:2f:10:85:71:0f:1c:52:
77:0b:f9:c2:15:72:86:4d:fc:31:64:55:58:f0:7e:
14:00:7e:14:28:c2:87:6d:90:94:a5:1e:86:e3:2b:
c7:3f:a3:87:8d:91:69:40:dd:90:1e:f5:41:4a:41:
5d:32:87:18:65:6a:1f:83:39:f1:ae:1d:34:76:d4:
b6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DE:36:B9:8F:B3:AF:BA:CA:B8:2A:2C:C6:DF:78:05:89:E3:7A:CD
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1a32ab7c-eb9c-4257-9f15-2007fb60be67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da60:9000::/40
Signature Algorithm: sha256WithRSAEncryption
26:63:6f:bc:e1:c6:fc:24:64:04:a6:2b:78:55:14:a4:b4:b6:
3a:8f:b3:45:64:9f:5c:37:f4:f7:20:38:97:eb:35:11:98:0e:
78:48:8c:d2:f1:3b:cb:26:9a:6e:c0:a8:0d:54:81:93:fe:35:
6c:f7:88:d9:50:e4:d7:ae:a7:05:c2:3f:72:13:92:8f:d3:6e:
fc:1f:73:db:7d:2f:b8:70:9b:b6:f1:3c:6f:2f:fb:da:2f:ea:
96:c2:a4:6b:c0:2e:d6:38:ed:22:06:c6:3a:b6:29:70:9b:eb:
2c:06:7b:ed:fa:08:42:10:b8:3e:c4:31:4f:24:89:33:c7:8c:
0d:3f:e9:1c:9a:f8:cb:31:dd:63:6f:26:08:4d:62:62:8a:29:
48:4c:6d:07:31:41:b3:56:64:52:a4:b6:0f:eb:02:3b:c2:42:
d4:c7:f8:7b:91:32:09:f6:53:2d:f3:43:8f:e0:c6:ff:97:85:
90:6e:cf:9f:cc:69:0d:52:c0:20:98:2c:81:30:78:fe:0e:f9:
18:e2:60:94:28:89:9d:c4:c1:df:cb:39:d3:e4:ad:21:05:c3:
3f:84:66:ab:70:56:2e:2b:bd:08:18:84:37:d6:46:3a:6a:76:
3f:de:23:d1:dc:8c:e7:89:88:a0:80:e2:5a:85:03:57:c1:eb:
0a:30:75:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:29:19 2025 by rpki-client