Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c151347d-237c-4232-87c7-90f5875ef702.roa
File: c151347d-237c-4232-87c7-90f5875ef702.roa (raw, json)
Hash identifier: 1njaxWhRti7Fcbm+NRyI5k9h7vJbZPCB1ndHKBFCYJ0=
Subject key identifier: 0A:A6:79:60:1B:A8:95:C1:18:61:79:D2:09:D6:5B:2F:4B:84:BB:E9
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 2551FFA1F87C6D2AE47F9DDC2E26F9CF07DB9A04
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c151347d-237c-4232-87c7-90f5875ef702.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf4:9000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:51:ff:a1:f8:7c:6d:2a:e4:7f:9d:dc:2e:26:f9:cf:07:db:9a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: serialNumber=584be87eb0b2850b42b5648fe6b378c197df54f631911a15bbd3c87522bdc9f6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:e9:75:82:ba:95:9b:48:77:5e:9c:70:f9:
3d:7b:03:3b:55:0e:87:78:ca:0a:d5:93:88:8f:ac:
a1:4a:1b:4f:cf:54:b5:3e:11:15:8e:05:92:3c:3e:
db:20:a6:c8:21:43:d2:19:ee:36:b4:27:a0:c7:50:
9c:6d:7c:8d:bc:34:f9:42:2f:cf:a8:6a:dc:43:2e:
22:f1:f3:90:e6:30:0e:f5:e5:d3:63:05:5f:18:e0:
57:68:b9:4c:99:7d:38:7a:b0:c1:07:24:2f:a0:b4:
76:06:21:0a:11:bb:69:f8:15:59:f6:1d:b7:2e:4c:
e7:7a:44:20:f4:db:ec:6f:87:14:c0:95:1c:de:f1:
a8:78:66:05:2b:42:33:c5:b8:ba:b8:d3:7a:b2:50:
6b:d2:07:39:a5:31:ee:dd:06:26:f4:e7:18:aa:14:
5a:2c:46:70:a5:71:95:2c:f4:83:6c:46:80:97:6e:
38:c9:b5:60:fe:9d:65:60:f7:6f:27:0a:8e:e9:af:
8b:95:91:4a:a6:5b:7e:6a:ab:de:7c:1a:42:f7:af:
24:e3:67:c6:63:51:1b:4e:2b:10:05:8d:27:f4:09:
5e:57:06:ae:06:26:9d:a9:b8:cb:c6:5c:0b:fb:d6:
af:45:90:10:38:e6:98:6c:fc:cc:84:24:95:50:00:
77:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A6:79:60:1B:A8:95:C1:18:61:79:D2:09:D6:5B:2F:4B:84:BB:E9
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c151347d-237c-4232-87c7-90f5875ef702.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf4:9000::/40
Signature Algorithm: sha256WithRSAEncryption
46:8c:38:04:78:dd:0b:05:e3:87:a5:90:0d:32:d7:e3:c4:26:
13:1c:f8:f8:5d:83:c0:37:3f:98:58:4a:b9:28:91:8b:38:f8:
a5:a2:7f:42:2d:da:25:ad:9e:c9:5c:90:6b:d2:38:60:5e:4f:
a3:19:e0:e6:b9:90:f1:71:2c:b6:b4:93:4d:82:34:3e:e0:a7:
c3:cf:3c:3e:38:06:22:5a:f0:64:e8:6d:71:3b:20:d0:6e:27:
c0:9b:ac:01:2c:d4:3b:3c:77:e4:86:ab:8a:a0:b5:cd:6e:03:
70:26:94:32:c2:03:b4:2a:c6:25:2c:f8:c1:df:25:10:bc:af:
ab:9b:35:e7:77:25:b1:f5:be:98:7d:d4:be:57:96:c7:94:61:
ec:5d:7a:1a:38:f9:58:db:46:97:b9:6a:d2:d6:ed:74:f1:03:
ba:d1:08:e3:d6:57:1d:d5:a9:d4:3e:19:7a:0b:25:09:85:36:
58:04:ec:2a:89:b8:a8:2b:fe:ec:31:9a:b0:db:96:81:e9:4e:
af:b3:c9:4f:ee:e8:8c:a3:7c:77:5d:5c:49:7d:75:e7:8e:65:
82:ab:91:e7:e4:7c:70:61:76:02:ad:d3:15:bf:4d:e8:6c:6d:
99:83:d7:de:55:c0:1a:8e:85:a0:b6:4e:c1:22:44:5d:b4:08:
bb:e4:94:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:31:49 2025 by rpki-client