Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7b31e7ff-1cd4-4896-8dc1-a9a2302fb576.roa
File: 7b31e7ff-1cd4-4896-8dc1-a9a2302fb576.roa (raw, json)
Hash identifier: FBjdLih9p527GSgSv3agpnur8nexcZpwL8oE7m4nmhU=
Subject key identifier: 5B:F6:D2:A6:34:10:9D:86:FC:4B:42:7D:83:10:A4:04:5F:47:11:46
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 39795EEB3BE5BA536BCE60990535ABDAC8167523
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7b31e7ff-1cd4-4896-8dc1-a9a2302fb576.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da60:e000::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:79:5e:eb:3b:e5:ba:53:6b:ce:60:99:05:35:ab:da:c8:16:75:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=7e0edc03b9c9ca87606a0f3038e246c63c9923f061b597c0b8aeb42f3f6ff329, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:8f:f9:ae:65:0a:7e:2c:5a:4e:c1:df:b4:
ed:9a:73:23:b8:6b:6b:ec:f3:08:55:af:5f:35:97:
b5:ab:bb:e6:e7:3e:6e:79:42:a1:2d:be:3c:a3:32:
f1:06:82:db:71:d5:77:53:30:b8:d5:4d:d9:88:77:
4c:da:73:32:8f:0b:69:38:83:a8:f1:ae:24:37:9e:
5d:97:0d:00:f6:51:81:12:1f:e1:a8:27:ae:1f:41:
9a:e7:fa:de:26:66:f2:49:24:38:f1:ad:04:94:1b:
0d:55:41:bb:90:50:f1:7e:4d:4c:b5:92:c0:66:cd:
50:36:a0:ee:b4:47:fc:7c:56:f5:26:ba:cf:17:0f:
a4:62:2e:c9:a8:c6:f7:55:83:73:1f:58:a4:26:f9:
28:fa:0f:65:de:ce:d0:e6:d2:c5:37:90:55:bf:68:
31:0c:e3:e6:fe:b2:39:0a:ce:69:ac:80:7b:75:d9:
ca:25:d3:36:8d:4c:72:a5:fb:bc:cf:31:14:2a:76:
4a:41:36:ab:20:8e:c3:a8:d3:df:f2:35:7e:42:36:
ce:27:db:f2:55:83:da:02:25:62:e8:dd:1c:a9:2b:
db:46:d2:37:1d:8f:1d:38:8d:13:d7:37:a2:9f:29:
f0:8e:c2:22:e3:12:1f:3d:a4:6c:2d:ca:bd:64:4b:
ac:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F6:D2:A6:34:10:9D:86:FC:4B:42:7D:83:10:A4:04:5F:47:11:46
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7b31e7ff-1cd4-4896-8dc1-a9a2302fb576.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da60:e000::/40
Signature Algorithm: sha256WithRSAEncryption
3e:8b:b5:ed:0b:57:20:56:1c:09:8c:a2:07:49:21:1f:23:59:
b8:c6:5e:ed:db:bf:7e:7a:3b:6c:b1:9b:d0:97:6e:ec:c4:3b:
80:41:6c:54:6e:6a:4b:70:e3:72:14:d1:90:4e:19:06:de:f0:
8f:de:13:5c:f7:c2:50:76:63:31:f4:8d:46:9f:47:9d:10:f7:
ca:f3:e4:15:9d:e1:80:e8:d7:88:55:2f:4b:08:52:1d:b6:7a:
08:1b:cb:cf:b4:3d:92:8b:27:49:8b:0c:51:ef:81:57:6e:4b:
71:27:e9:de:dd:d9:56:d4:d2:47:2c:c4:c2:85:32:11:80:fc:
e1:42:15:b5:48:3c:aa:75:d7:ce:d2:06:92:e3:e0:d6:13:6a:
0a:fe:c2:17:8d:20:4b:37:a6:b7:d4:81:21:9c:c0:c4:f1:5b:
9d:51:cc:ac:a7:e6:05:ec:df:fb:5f:fd:a4:73:67:48:b2:4b:
c8:d2:ba:06:34:dd:ef:b9:75:f6:b7:18:20:35:af:f6:ac:77:
bf:7f:d1:20:ac:b4:31:8f:f7:95:3a:f9:fc:a6:ca:49:a0:11:
c8:d2:98:94:7e:d3:49:2f:b1:0e:1c:3c:8e:1e:41:81:d6:d6:
38:6e:78:03:d7:ba:19:1c:ef:e2:ad:1e:53:0a:eb:43:31:45:
6a:47:e9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:34:36 2025 by rpki-client