Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26a1a6c0-7c51-4f60-8d66-83d553ad2844.roa
File: 26a1a6c0-7c51-4f60-8d66-83d553ad2844.roa (raw, json)
Hash identifier: rmI1kZSRtfYlHDO10jznfRUda3JY+AyQ+9n86JKt7/U=
Subject key identifier: E1:EC:71:E9:2E:2B:5F:09:E4:72:21:EE:F2:46:71:D0:BB:F5:29:A5
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 0380C85E49833CF0E2472A1834DBEEB748A174E2
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26a1a6c0-7c51-4f60-8d66-83d553ad2844.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da69:800::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:80:c8:5e:49:83:3c:f0:e2:47:2a:18:34:db:ee:b7:48:a1:74:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: serialNumber=b70a07b0503419ddf698d9d9bf7e35e6db5097ed0ccbb88a7f24baf069f0457e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8e:8c:30:b8:fd:d4:ea:cf:f8:05:81:69:d7:
d9:ee:eb:3d:9f:5c:49:d9:21:5a:61:ca:97:76:65:
fd:a2:ee:33:12:43:5f:b5:30:17:7d:0b:4b:b2:5a:
57:9f:6b:2e:0a:80:bb:fd:cb:97:e3:d6:c3:4c:94:
81:b1:83:75:9f:3f:65:00:df:7f:50:6d:43:71:f2:
9f:f7:1f:33:43:9c:e4:0c:5a:85:45:d3:1d:d2:8d:
ea:03:5a:b7:e5:d6:ab:74:22:dc:8a:05:ca:c4:c9:
48:81:21:13:59:73:01:d8:27:15:39:8a:19:da:f0:
2e:23:8e:d6:5e:b4:13:e4:13:80:0a:c6:a8:de:0e:
2d:cf:98:5a:13:0a:34:a5:f7:37:db:a9:d5:90:d8:
2a:56:6a:50:82:db:17:52:54:fa:f8:c3:be:0b:68:
b0:69:ae:d5:be:65:12:a1:af:9b:98:9a:06:ac:a7:
7b:53:0a:f8:ff:b8:a1:43:a8:0e:9d:e5:f1:7d:41:
fc:35:0a:6a:e8:03:bf:c9:89:9e:11:d4:7a:96:a1:
2f:b5:0a:05:ab:5c:f8:f5:e6:a3:2e:91:e8:2b:32:
66:25:50:8e:ac:48:68:f5:37:bc:bd:4f:d5:a2:7d:
59:45:73:f0:82:b6:c3:b5:b5:e9:cd:50:87:9f:74:
6a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EC:71:E9:2E:2B:5F:09:E4:72:21:EE:F2:46:71:D0:BB:F5:29:A5
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26a1a6c0-7c51-4f60-8d66-83d553ad2844.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da69:800::/40
Signature Algorithm: sha256WithRSAEncryption
34:5b:c6:a0:80:3c:f3:d8:34:f4:e2:eb:49:10:db:6d:f8:74:
1f:54:05:d6:2a:12:4a:b2:4a:eb:32:5c:26:d9:52:9f:1f:ee:
6e:bf:97:e9:d9:dd:2c:05:d2:e8:59:fb:3b:56:af:2e:7a:9f:
20:05:88:58:09:ec:f8:91:78:8b:02:ba:d4:6b:dd:c6:cc:c4:
3b:85:60:99:2e:ac:8a:4b:1f:ea:75:f9:45:0b:8c:77:b0:cf:
4d:27:1d:29:b5:ae:76:04:40:0e:a0:25:73:17:ab:2c:bc:8a:
d5:ae:3e:b7:33:f2:a1:c6:11:7b:db:e2:72:0f:1d:6c:02:fc:
45:3d:44:33:90:24:2b:8f:52:3d:16:a7:eb:98:a3:a7:c2:c3:
ee:a0:d4:58:aa:8d:13:a8:26:25:2d:ac:61:f7:1e:15:0f:cd:
19:a1:00:01:85:fd:68:30:6b:a0:da:fa:5a:13:2f:9e:9a:cd:
ed:a3:d1:8f:64:10:8f:37:54:d6:95:31:09:5b:01:00:b6:7b:
d1:3d:45:07:62:b5:97:30:82:0a:be:7d:06:23:b2:64:76:a0:
21:b4:9a:77:db:a1:25:76:41:f1:de:15:b5:48:cd:4b:95:66:
9d:0e:79:59:78:5e:bf:02:28:3f:cb:bc:d0:05:00:ab:ca:5d:
e6:2c:28:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:35:54 2025 by rpki-client