Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/91f8dc78-cb46-41e0-aedf-7aa50976b2cc.roa
File: 91f8dc78-cb46-41e0-aedf-7aa50976b2cc.roa (raw, json)
Hash identifier: zm6P4Dc3pvGe1QLPDzF+6TeCw5Mji8n42R3my4FRpbM=
Subject key identifier: 00:37:88:66:D0:9A:F1:DE:6B:54:06:B7:64:CB:A4:07:3A:E1:1B:F2
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 59625BCBAD95646B199F59A7FD29D802480827F4
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/91f8dc78-cb46-41e0-aedf-7aa50976b2cc.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf1:c000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:62:5b:cb:ad:95:64:6b:19:9f:59:a7:fd:29:d8:02:48:08:27:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: serialNumber=1908ba99d558f0e6ee0310c5d97bb16548de59b3f98d4cd64942a1f31eb761ee, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fc:9b:46:05:cb:cd:7a:0d:66:e4:d8:e5:4d:
32:a0:1b:b6:42:55:b6:25:5a:1f:52:53:2f:c6:20:
72:b5:fb:e1:2e:8c:82:dc:c8:ab:13:03:a1:97:36:
18:e5:f2:aa:b4:b4:49:bd:29:c1:e9:1d:72:d9:29:
de:96:27:f2:e8:58:aa:26:5d:16:9c:87:af:c8:49:
d1:5d:21:ce:60:09:9f:a6:7f:97:fd:66:b3:2b:e8:
49:3f:de:9a:ec:31:94:3b:c2:73:94:0e:14:ce:56:
e5:94:bd:59:b6:84:ba:5b:05:6a:80:f5:e5:8c:c8:
45:65:b9:f2:fd:4c:96:39:2f:fa:c5:53:13:13:80:
92:3e:2e:d2:37:62:64:f1:d4:b7:bc:8b:b2:e4:4d:
93:5a:2f:3e:4e:fc:e1:91:6a:56:84:cb:c0:80:1a:
2e:23:2b:93:a9:2d:e1:06:f8:eb:4e:f9:ba:a4:79:
38:46:86:88:99:68:59:55:99:fa:c9:e2:41:5e:3c:
b7:cd:8d:8d:2d:33:ba:12:82:f1:52:3c:7b:fc:14:
94:49:60:a4:1a:ce:e9:f9:03:b1:01:7f:ca:7f:fe:
99:06:c4:db:77:9c:ad:2b:71:df:e2:05:e4:e6:95:
6b:e6:d4:1c:03:80:e4:5d:2e:a0:18:9f:1c:7c:45:
55:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:37:88:66:D0:9A:F1:DE:6B:54:06:B7:64:CB:A4:07:3A:E1:1B:F2
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/91f8dc78-cb46-41e0-aedf-7aa50976b2cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf1:c000::/40
Signature Algorithm: sha256WithRSAEncryption
9d:42:8f:3e:25:1a:3e:6e:51:b0:73:6e:51:28:74:ff:73:5a:
19:14:82:7e:5b:d4:ae:c4:e6:fd:e9:f3:96:2f:7d:ff:bc:6c:
38:00:45:43:9c:00:6e:95:46:2b:87:79:7f:46:8e:db:7b:5e:
e3:51:67:04:2c:e9:75:2b:35:a7:21:82:44:4c:bf:ff:c1:e0:
71:d1:25:dc:55:96:9a:f5:9b:a0:6c:6f:95:c8:ec:ae:c2:f6:
e7:33:0e:4f:73:ea:66:03:db:c4:2f:42:dc:8b:4f:9c:86:6b:
cf:4a:50:de:db:89:96:7c:a1:45:7c:cd:5e:39:17:a8:be:64:
21:e8:68:cb:19:17:9f:d7:26:40:fa:d3:3a:40:52:79:6d:27:
5d:17:b4:d8:2e:8e:f9:9e:01:7f:83:17:1e:f8:48:7c:bf:57:
3a:c0:64:00:94:df:5d:03:92:22:75:8d:ce:a3:bd:ef:a4:2f:
8e:a1:34:19:e8:4e:62:79:70:9f:83:05:ec:07:a4:63:0b:2c:
f4:50:be:c8:31:ba:5e:2e:6e:bb:50:68:de:3e:da:14:c9:ee:
2a:9f:fe:fa:f9:f8:92:2d:bc:3e:89:d7:5e:45:64:4e:48:1b:
c5:a3:17:81:d6:8a:78:3d:35:16:61:cb:d2:62:03:3b:af:20:
5f:8b:6b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:33:40 2025 by rpki-client