Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c05baebe-3bc3-44cb-9e88-6680d538cfee.roa
File: c05baebe-3bc3-44cb-9e88-6680d538cfee.roa (raw, json)
Hash identifier: VDGUBn0hxPVMxQ6zNyQzDNyrEMBcVJELaE30KH8/cv0=
Subject key identifier: 01:C2:DB:F5:C0:6F:52:74:79:82:64:9F:D0:B8:7B:65:71:AC:9A:6B
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 30A1F125C4F709AA50C4AEF7345F025C7595F410
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c05baebe-3bc3-44cb-9e88-6680d538cfee.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 43.220.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:a1:f1:25:c4:f7:09:aa:50:c4:ae:f7:34:5f:02:5c:75:95:f4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=b3e743f66680337339e1224cf9d5069c84147fe2045a1ce59b648502d9879401, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9f:07:32:c8:79:dc:f1:a0:ba:3b:3b:76:97:
79:9c:3e:b8:11:61:c5:bb:c3:68:a6:8f:34:64:26:
5c:ff:9d:ba:50:0a:56:ac:c6:a8:ef:25:6b:d7:59:
f5:58:59:f2:16:aa:8e:7a:45:1f:07:cb:54:dc:fe:
92:d3:44:0a:ff:d4:74:51:d1:fe:23:4d:7a:2c:2e:
c8:64:c1:da:e3:39:bb:db:08:f8:c0:7a:d4:f4:63:
89:2e:62:89:be:b3:7a:1c:02:88:2d:dc:cc:01:da:
ce:73:f2:7d:8a:64:6a:8c:5c:8b:2e:78:fb:10:5f:
b8:28:7c:5d:8c:8a:de:fc:08:d0:f2:f9:8e:92:7f:
e6:6d:9e:6e:08:3f:bc:0c:c4:9c:1f:77:df:a3:79:
12:be:9c:3b:b2:2e:fa:92:b4:bc:43:5c:3c:07:85:
ed:a6:25:e5:ec:4d:60:1f:3e:ea:07:7f:f0:6a:5d:
20:7c:0e:16:8a:e1:5d:5b:9c:06:89:d9:14:a0:97:
05:51:3e:da:d8:96:77:77:03:f1:16:4b:fb:07:90:
75:f0:39:ec:ee:89:df:f2:8c:eb:4c:f7:c9:bb:6c:
5b:7d:28:24:7e:d3:6a:0d:1a:72:87:4a:58:ee:80:
c8:d4:99:37:a8:4a:81:0e:4d:f3:f8:e1:85:17:3a:
b5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C2:DB:F5:C0:6F:52:74:79:82:64:9F:D0:B8:7B:65:71:AC:9A:6B
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c05baebe-3bc3-44cb-9e88-6680d538cfee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.220.0.0/16
Signature Algorithm: sha256WithRSAEncryption
16:b6:fe:44:54:88:a1:e7:66:b3:9a:5c:c3:21:80:ed:e6:80:
e3:a8:1f:5e:16:b9:70:3f:e1:69:5d:24:6b:71:ef:ff:21:27:
7b:a6:ee:06:e6:6f:07:97:d5:72:63:d1:9a:81:13:db:69:5f:
1c:2d:02:53:55:31:51:b1:dd:92:2f:aa:3c:1a:68:7e:19:2f:
32:e8:4b:8b:80:0e:66:58:e9:4d:6f:f4:90:2c:98:00:39:19:
1f:ed:5b:c8:39:3f:68:80:df:f0:b0:6b:12:02:01:e1:f9:33:
63:78:82:c2:c1:1c:46:78:14:38:85:f4:a4:38:6c:ad:d3:36:
bd:44:a4:db:0e:f3:88:02:f3:43:2c:b3:2c:d7:5f:17:5a:76:
3a:a7:3a:3b:4a:ed:05:d2:12:aa:85:4b:13:cc:00:d4:67:d8:
73:7e:fe:73:ea:5b:1d:02:f8:0a:c9:cf:4c:60:b9:fc:61:47:
bf:6e:57:18:76:49:d6:60:41:71:51:a4:fa:96:1f:27:82:70:
a6:59:4f:ef:49:c3:5a:2e:61:b2:45:c1:82:ac:8c:27:f6:01:
23:5c:ef:69:b1:b0:fe:c5:96:d8:0c:5b:20:93:4e:01:e1:1b:
e7:65:46:ec:1e:a7:c1:a2:13:af:9f:6d:53:a6:2e:c3:6e:fe:
71:04:7d:43
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:33:49 2025 by rpki-client