Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/66f84698-c5e4-4bb2-a80c-590b33c0f745.roa
File: 66f84698-c5e4-4bb2-a80c-590b33c0f745.roa (raw, json)
Hash identifier: T0H1M6JzHzKxaua3UvaNp05B6UJqiee1CRZx+lP0reo=
Subject key identifier: 85:8D:E7:40:47:DB:A2:FC:5D:4F:1F:FC:C4:71:FC:23:FA:45:52:FF
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 5CCF9BFF4939B34DC6D6919A537C2BFB259DDC82
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/66f84698-c5e4-4bb2-a80c-590b33c0f745.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2406:da00::/24 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:cf:9b:ff:49:39:b3:4d:c6:d6:91:9a:53:7c:2b:fb:25:9d:dc:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=be12e89a6a5870aa7cca5d858ad12601c389d070e96accf3208c3c5faa415682, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:da:fe:46:0c:b7:eb:02:53:8d:c7:13:e2:cd:
86:22:83:1a:25:71:87:e3:fe:c5:6a:53:13:b2:98:
2d:3a:dc:4e:44:d4:ca:ff:0c:47:47:0e:cb:e6:6a:
36:f0:d6:03:2c:4c:45:8e:65:68:14:57:45:dc:d4:
4a:4c:f5:25:15:a3:98:b3:53:e5:3a:59:3e:e0:68:
68:51:0c:f3:68:c1:41:d3:b8:30:7c:7f:74:52:80:
06:c2:61:f0:0d:17:02:1b:60:97:e5:f0:44:2e:fc:
47:8c:1a:b6:c2:e2:96:89:7a:24:b6:74:b9:dd:5a:
44:f3:8f:a0:1e:e5:c3:9c:85:e2:83:29:4b:7f:66:
13:63:3e:3e:40:e7:3d:82:98:b0:98:98:ca:c7:0a:
6c:09:19:1e:e0:b7:ef:e0:98:d1:72:66:e6:3f:5e:
be:3d:0e:4c:dd:50:40:03:66:3c:0f:01:7e:7c:92:
61:e0:55:90:23:93:3f:ad:a0:10:d1:99:61:4f:59:
0c:0c:52:d9:37:aa:2f:3d:11:a1:56:7c:6f:18:bf:
b0:e6:73:74:d3:00:7c:d3:87:ca:27:1a:87:bf:92:
36:e7:f2:c7:9f:d2:37:2c:a6:45:15:f5:a4:1e:ee:
15:e6:0b:03:3e:12:60:4a:47:00:9a:35:18:1b:0a:
2b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8D:E7:40:47:DB:A2:FC:5D:4F:1F:FC:C4:71:FC:23:FA:45:52:FF
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/66f84698-c5e4-4bb2-a80c-590b33c0f745.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da00::/24
Signature Algorithm: sha256WithRSAEncryption
88:67:82:40:e8:ad:bc:7d:fa:37:af:d2:87:d8:05:80:8c:6c:
dd:6c:1f:6f:01:a4:59:20:bf:b1:4b:70:d3:01:f0:ba:89:0b:
88:57:d7:2e:b8:45:d7:74:37:53:98:ba:5c:2d:c8:5e:52:88:
7c:16:04:69:3d:c3:aa:d5:eb:c9:33:cf:aa:56:30:09:11:8c:
44:e6:da:0a:1e:bf:02:96:3c:fc:97:d8:dc:37:35:ca:92:bc:
f0:1e:93:16:d3:b5:3c:0f:85:51:f0:d5:ff:25:18:54:e7:49:
f6:02:3d:58:f4:43:69:20:95:48:01:83:1e:6c:56:db:1e:94:
e6:09:83:63:2a:bd:2a:b5:62:f6:f9:68:9f:6c:23:e1:ab:f9:
41:ef:9e:53:33:61:83:d3:68:4c:c4:cf:fc:cb:4b:92:17:c1:
69:3d:3f:bc:41:0a:3f:55:fd:b9:39:7a:38:82:1d:42:70:d6:
24:16:e9:c1:2c:46:1f:21:d2:57:34:2f:4c:be:c5:0c:56:1d:
69:48:7b:c6:a4:5f:64:c6:38:93:4e:b9:4f:84:fb:16:d0:58:
df:32:4f:5b:b6:25:be:0b:1b:b6:c9:40:d0:6d:0f:45:4b:73:
4f:32:e0:3e:60:c6:85:39:e7:8b:fb:bb:39:8d:8b:67:0b:f6:
bd:1f:b2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:29:21 2025 by rpki-client