Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/35f9b6b1-3c83-495e-bd0e-ced8a240be71.roa
File: 35f9b6b1-3c83-495e-bd0e-ced8a240be71.roa (raw, json)
Hash identifier: 8Hc2gql/XkqqmhkyAO3EDsfkrjx1mlD/d3y/uzzYAuA=
Subject key identifier: 70:6C:ED:9E:5D:75:1A:7E:E9:F4:3F:ED:F5:20:06:BA:42:F2:77:D7
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 0ACA3CA98A12200260AE78B9FB030A3F0DE7A824
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/35f9b6b1-3c83-495e-bd0e-ced8a240be71.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da70:800::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ca:3c:a9:8a:12:20:02:60:ae:78:b9:fb:03:0a:3f:0d:e7:a8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: serialNumber=e6392feff2cafddb09a63b55a70f6c96b0107cb4dd5a5d04123b3f03ef4a86a9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:02:c8:74:8d:2c:da:e7:c2:73:2f:47:e6:b4:
a1:71:86:d7:1a:bb:38:45:14:43:54:08:af:14:c6:
4d:6b:bf:c7:9c:72:5b:e9:41:84:49:e5:d2:5c:56:
eb:1a:2a:b1:4b:eb:7e:86:01:e8:f8:8d:8e:d2:0d:
23:81:eb:be:f6:c7:25:fb:91:85:7f:67:f0:3e:08:
89:9c:50:bf:44:d1:dd:82:59:41:e6:76:6d:49:b7:
a3:c6:96:1f:2e:2a:9c:67:d3:bd:b0:be:dd:94:1e:
9a:e2:03:2a:b0:91:7d:6c:c7:1c:71:be:2d:7f:33:
b7:3d:a5:15:17:8c:48:ea:52:9c:df:a2:28:3c:38:
54:65:7c:b1:96:dd:18:0b:45:c8:4a:7c:02:8b:9b:
60:e2:39:a0:29:d3:4f:7e:f4:fe:e6:5b:8e:52:42:
f1:17:68:19:1b:fa:f2:2a:9d:5c:ea:a6:41:23:3b:
e0:12:1d:4d:ba:1a:e9:1b:14:8e:79:b1:00:a8:7f:
83:3d:bf:0e:8b:1e:fb:13:cb:f4:e0:cc:50:a3:ed:
ac:18:1a:cb:ed:d7:1f:38:80:66:12:c5:27:86:a1:
11:1f:da:3b:4d:8c:31:51:30:f7:ce:74:0e:bc:c5:
a6:87:1e:c4:a7:e9:36:04:04:6f:4c:12:44:be:5e:
8f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6C:ED:9E:5D:75:1A:7E:E9:F4:3F:ED:F5:20:06:BA:42:F2:77:D7
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/35f9b6b1-3c83-495e-bd0e-ced8a240be71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da70:800::/40
Signature Algorithm: sha256WithRSAEncryption
33:b1:4d:2d:47:f8:0a:c9:81:8a:6b:a6:d4:71:8a:e4:de:be:
52:c2:f8:41:14:e0:97:99:58:da:93:9c:ea:c2:bd:66:e5:73:
d3:9c:75:a9:f8:4d:05:56:16:9e:d5:45:e7:af:74:f7:98:c5:
9e:4c:65:96:72:6c:a6:70:b1:5b:ee:6e:be:0d:2c:58:97:c6:
b2:a7:d0:d9:fd:38:a9:8e:0b:c5:6e:32:06:7b:00:30:1a:85:
10:74:63:0e:c6:1f:df:69:16:00:e0:1e:ab:03:d4:af:92:3a:
df:c5:22:c1:2e:7c:56:82:7f:e3:87:ed:b0:6c:58:43:a9:7f:
50:a5:5d:a6:ce:a5:08:05:4e:5c:2c:fc:df:b7:28:05:7c:ae:
ed:69:21:51:6e:12:19:e5:4d:ef:40:e6:3c:4f:b0:62:7c:02:
8d:aa:6b:d9:bd:ef:9d:1f:11:fb:1b:da:a0:6e:02:9a:59:cd:
a6:5a:11:d6:12:54:59:65:61:1a:cc:f6:e9:83:cd:6c:ab:49:
5a:5b:08:8d:ea:6f:b9:38:35:4c:56:71:d8:77:d5:e2:7f:ce:
d5:6a:e1:c6:e1:34:4c:ad:3f:dd:88:75:80:08:b7:f2:ea:88:
44:8c:87:88:03:70:60:f4:79:f9:3e:42:ab:90:5a:38:9e:97:
dd:8e:6b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:33:48 2025 by rpki-client