Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8efa1c97-6e5e-49c1-9dac-f350e3f73658.roa
File: 8efa1c97-6e5e-49c1-9dac-f350e3f73658.roa (raw, json)
Hash identifier: YMY/52paA5G2PmN4Eub7QUuo5qHf/AyDW45FGGd6LZM=
Subject key identifier: 6E:2E:97:5B:87:91:E4:82:50:AF:E4:F5:F4:70:81:C2:1A:C0:04:E3
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 2E52E6A1D355336690547523B1A203AD35AB0B05
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8efa1c97-6e5e-49c1-9dac-f350e3f73658.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 43.249.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:52:e6:a1:d3:55:33:66:90:54:75:23:b1:a2:03:ad:35:ab:0b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: serialNumber=f44289ef50d0df1bccb5a3d0d223497014338ec26fd942cf33c4d324093507b0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a1:dc:a7:0a:00:7a:a5:a1:4e:b8:01:95:f5:
cf:05:79:cd:51:fd:6b:fd:3e:48:df:cc:e2:9d:1c:
9c:9c:41:e9:84:84:5e:5c:75:3e:40:61:09:21:51:
f2:4b:fa:ab:75:36:90:6b:85:03:80:35:fb:33:e7:
fa:2a:75:b3:99:04:a5:0c:bb:fa:ee:2f:ee:f1:29:
02:c6:a9:47:3d:24:3f:8c:d0:00:19:78:4e:38:c7:
4e:81:95:ab:f1:80:62:ba:19:d6:21:58:58:9b:c7:
63:b1:a6:59:33:d7:34:e3:34:bb:60:cf:94:d0:20:
3e:2c:a4:c5:85:7c:cd:f0:70:b7:99:e1:4b:d5:95:
04:2c:a6:18:c2:cf:d7:de:9a:6c:09:34:9b:16:2c:
e1:1d:91:a6:de:2d:3b:b6:ca:b9:47:cc:8b:40:76:
ae:24:74:14:d3:69:81:ac:a9:53:27:06:e1:1d:6d:
56:84:bb:92:b3:1e:9f:65:de:4c:09:ce:89:94:5d:
75:b6:88:51:a2:05:86:46:d0:3e:38:67:96:71:01:
f9:a1:6a:85:d4:48:50:b6:8e:80:53:c7:d4:48:5d:
4d:66:df:fc:bb:31:af:46:92:40:2b:04:93:79:12:
69:a5:ca:f1:d4:0c:91:3f:90:3a:2e:5b:14:1e:4b:
93:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2E:97:5B:87:91:E4:82:50:AF:E4:F5:F4:70:81:C2:1A:C0:04:E3
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8efa1c97-6e5e-49c1-9dac-f350e3f73658.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.249.44.0/24
Signature Algorithm: sha256WithRSAEncryption
70:d9:33:39:8d:8a:04:30:bf:87:28:e6:a6:f3:68:0e:3d:70:
0f:b5:98:4c:e9:eb:c3:b9:94:aa:d1:76:8d:74:54:f8:ee:c8:
34:50:f5:7f:7b:fe:ee:5b:bd:57:9c:ac:f6:e4:28:10:ca:1f:
e2:b2:fe:e0:55:31:81:37:78:02:86:03:de:52:28:ae:82:d2:
95:27:ae:33:d1:38:b7:7a:5a:fa:55:a6:4b:bc:e4:0a:4b:98:
fa:b9:f9:9e:63:16:e4:c2:05:29:0f:59:99:dd:1d:27:c6:47:
6c:35:2e:c8:3c:61:d2:70:6f:bb:a2:d3:74:af:16:b7:49:72:
03:2f:ac:fa:d0:37:76:f4:39:1a:d2:2f:35:dd:7f:b6:b8:6e:
43:67:98:95:78:12:04:80:a1:a1:92:26:91:bc:bb:1f:1b:ac:
bb:84:c0:ab:0d:e2:32:55:a8:6a:aa:94:c2:9b:c7:8d:4f:f5:
13:de:75:df:4b:82:60:00:da:8d:1f:96:3a:5d:30:0b:7f:b1:
29:d8:62:df:e8:e5:fa:ca:07:b2:80:de:cf:c3:4d:c6:df:9e:
c0:1c:cf:10:8e:00:c8:e5:49:1e:5e:c3:5b:09:d7:c7:b0:ce:
58:49:84:79:12:07:21:cc:37:c7:a9:0a:6e:bf:1a:57:40:dc:
12:13:17:c0
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIULlLmodNVM2aQVHUjsaIDrTWrCwUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTIxNjAwMDAwMFoX
DTI1MDEyMDIzNTk1OVowejFJMEcGA1UEBRNAZjQ0Mjg5ZWY1MGQwZGYxYmNjYjVh
M2QwZDIyMzQ5NzAxNDMzOGVjMjZmZDk0MmNmMzNjNGQzMjQwOTM1MDdiMDEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqHcpwoAeqWhTrgBlfXPBXnNUf1r
/T5I38zinRycnEHphIReXHU+QGEJIVHyS/qrdTaQa4UDgDX7M+f6KnWzmQSlDLv6
7i/u8SkCxqlHPSQ/jNAAGXhOOMdOgZWr8YBiuhnWIVhYm8djsaZZM9c04zS7YM+U
0CA+LKTFhXzN8HC3meFL1ZUELKYYws/X3ppsCTSbFizhHZGm3i07tsq5R8yLQHau
JHQU02mBrKlTJwbhHW1WhLuSsx6fZd5MCc6JlF11tohRogWGRtA+OGeWcQH5oWqF
1EhQto6AU8fUSF1NZt/8uzGvRpJAKwSTeRJppcrx1AyRP5A6LlsUHkuTvQIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFG4ul1uHkeSCUK/k9fRwgcIawATjMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzhlZmExYzk3LTZlNWUtNDljMS05ZGFjLWYzNTBlM2Y3MzY1OC5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAK/ksMA0GCSqGSIb3DQEBCwUAA4IBAQBw2TM5jYoEML+HKOam82gO
PXAPtZhM6evDuZSq0XaNdFT47sg0UPV/e/7uW71XnKz25CgQyh/isv7gVTGBN3gC
hgPeUiiugtKVJ64z0Ti3elr6VaZLvOQKS5j6ufmeYxbkwgUpD1mZ3R0nxkdsNS7I
PGHScG+7otN0rxa3SXIDL6z60Dd29Dka0i813X+2uG5DZ5iVeBIEgKGhkiaRvLsf
G6y7hMCrDeIyVahqqpTCm8eNT/UT3nXfS4JgANqNH5Y6XTALf7Ep2GLf6OX6ygey
gN7Pw03G357AHM8QjgDI5UkeXsNbCdfHsM5YSYR5EgchzDfHqQpuvxpXQNwSExfA
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:34:36 2025 by rpki-client