Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3d6a5d45-8732-44fe-b28d-ce90b2edd317.roa
File: 3d6a5d45-8732-44fe-b28d-ce90b2edd317.roa (raw, json)
Hash identifier: XIJh+RhGDW12JJ5AjmGfNxLdbEyBBwhMqUZKA/dERmg=
Subject key identifier: 5C:59:EB:81:D1:EF:D6:BE:18:41:34:4A:D8:3B:BD:C5:29:D3:15:5C
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 22B5BED28E8DEAF8E52BAC300844613C8C32B588
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3d6a5d45-8732-44fe-b28d-ce90b2edd317.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da60:7000::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b5:be:d2:8e:8d:ea:f8:e5:2b:ac:30:08:44:61:3c:8c:32:b5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=54d532c29188cdcedd115f6f964c4766e1f88194eb83b1973ee62650ee29e9a0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d9:d4:b2:1d:4e:97:f9:ac:af:1b:30:29:a0:
09:8b:71:af:14:61:2d:38:47:63:13:ce:b2:6f:bd:
50:d5:eb:4a:d5:ff:ba:25:fe:d4:85:2d:dc:9c:a6:
5d:5e:5d:4c:41:22:d6:69:02:f7:c5:3d:47:b5:df:
a8:e0:ed:1e:f6:e6:e0:0a:51:61:02:1e:e9:51:d7:
76:f2:94:31:ca:36:20:8d:d2:8a:a9:f1:a3:58:b2:
46:e3:c6:57:cf:b0:cb:04:40:42:2e:2d:53:e3:66:
df:10:86:f9:fe:18:83:ed:6a:8d:15:0e:35:13:de:
bc:09:58:3b:8a:84:2a:51:4e:a7:c1:c2:e4:8a:49:
24:a2:46:84:1d:c0:b0:7e:ab:15:56:88:5b:0e:5d:
c1:9b:cc:0d:86:c1:eb:b1:1c:d4:ab:9e:f4:47:35:
7d:f7:85:8c:e8:4f:f9:c7:d6:9f:94:57:15:79:7d:
07:7e:2d:3c:be:ef:fc:62:94:c7:2d:64:8f:2a:13:
4d:ad:72:09:55:d8:9b:88:72:84:04:77:a7:a4:fa:
55:07:1c:9b:0c:06:c1:e2:9d:fc:0f:f5:8a:86:07:
c6:6f:9d:3c:8d:30:96:c2:72:73:22:1d:e0:49:2e:
0a:15:f7:be:55:31:4d:29:7d:fe:f3:39:43:bc:de:
a7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:59:EB:81:D1:EF:D6:BE:18:41:34:4A:D8:3B:BD:C5:29:D3:15:5C
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3d6a5d45-8732-44fe-b28d-ce90b2edd317.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da60:7000::/40
Signature Algorithm: sha256WithRSAEncryption
35:05:bd:f8:9c:37:9d:6b:48:0e:cf:61:06:81:38:94:3f:de:
36:33:95:ba:4a:47:41:e2:eb:be:35:44:eb:bb:f4:7b:64:ac:
0c:96:34:79:c7:cb:58:fb:ff:3e:e3:eb:29:c4:a4:8c:31:0e:
39:f8:cc:e1:be:9f:84:57:6b:32:4a:29:76:6f:a8:65:b1:74:
17:4f:b6:b1:af:fb:ee:21:45:c3:6c:4c:ff:1d:ef:58:49:15:
a8:8c:6f:f5:ec:d5:94:90:10:c8:95:ab:cb:9c:ea:8d:95:7d:
57:2e:42:fe:44:62:04:7e:6a:d6:e0:7d:4d:48:79:0d:47:9a:
12:8c:85:be:b0:4f:42:e8:fe:14:d5:7a:50:84:63:d3:c6:64:
4b:e5:0c:d5:88:cd:54:0e:d6:7c:f3:b6:e8:81:59:91:85:f9:
0f:ee:70:94:19:54:60:55:ad:83:fc:41:60:63:80:d9:fe:64:
ba:d2:96:09:96:e7:66:f9:c1:eb:18:85:48:0d:f5:02:df:b0:
a6:75:28:50:38:11:7f:e3:b6:e4:1e:09:36:0c:b9:b6:1d:7f:
8c:db:33:b8:ac:26:79:c4:cd:b5:b2:bf:0f:99:e6:54:c6:86:
4b:06:61:93:f1:37:c2:8a:83:4e:0d:61:74:27:54:f6:2f:1e:
56:30:fe:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:34:30 2025 by rpki-client