Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fa2f00a1-5565-44e6-8f22-91f65926beed.roa
File: fa2f00a1-5565-44e6-8f22-91f65926beed.roa (raw, json)
Hash identifier: b+mFiT8ibYovQKA+8UY3yXR4YJcObs0g7XJ58FKy+JA=
Subject key identifier: C2:BE:00:90:21:1E:7C:C6:53:3C:60:6A:6C:86:76:CB:8B:07:E0:EB
Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
Certificate serial: 0796E1939BB23A23A3E713D8EB029DF8D2F11B75
Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fa2f00a1-5565-44e6-8f22-91f65926beed.roa
Signing time: Wed 18 Dec 2024 00:00:00 +0000
ROA not before: Wed 18 Dec 2024 00:00:00 +0000
ROA not after: Wed 22 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 159.248.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:96:e1:93:9b:b2:3a:23:a3:e7:13:d8:eb:02:9d:f8:d2:f1:1b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
Validity
Not Before: Dec 18 00:00:00 2024 GMT
Not After : Jan 22 23:59:59 2025 GMT
Subject: serialNumber=bb268b88ba1377303c5086dbf261b3a9725ee6f87d2d4d0793f6f1b211661de5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0b:9e:0b:26:7f:db:6e:01:88:1f:fd:2d:d1:
05:5f:89:98:f5:47:b2:13:17:54:61:b9:0f:ea:f7:
1a:61:21:f1:b8:df:80:6d:c2:ec:4c:03:6e:2f:be:
f2:65:14:29:f7:df:96:94:79:4b:2f:b2:20:24:a7:
20:26:bc:05:e5:a7:92:2e:6a:34:c8:56:aa:86:33:
12:b5:73:06:89:ea:93:5e:3a:83:bc:30:1a:fe:85:
ff:bb:3a:f9:69:28:f8:34:cd:72:88:42:d1:28:3f:
22:b6:1b:90:4f:cf:b6:cb:73:54:fe:3e:c2:d3:b8:
60:55:08:d7:f0:1f:a6:8f:3c:2a:e9:e5:44:97:81:
e8:47:3d:5a:67:1d:05:0e:33:b8:86:46:b6:0d:38:
6f:06:a3:0b:70:28:60:11:21:a1:94:26:0d:9d:92:
b4:19:70:03:b2:cc:64:d8:4b:26:a8:a3:7f:9b:41:
f4:86:1d:3b:f3:50:5d:e0:3c:9e:65:4a:f0:30:39:
8b:ca:de:34:07:12:1f:c8:e9:82:bf:2d:8b:bd:f3:
4d:30:6b:e4:87:29:06:a9:d0:11:b1:b0:4a:bf:f6:
86:fd:ac:30:6a:70:05:5c:ed:93:56:57:f1:d5:ec:
6c:16:d3:86:a2:0d:36:8b:e9:92:f5:78:88:49:dc:
96:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BE:00:90:21:1E:7C:C6:53:3C:60:6A:6C:86:76:CB:8B:07:E0:EB
X509v3 Authority Key Identifier:
keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fa2f00a1-5565-44e6-8f22-91f65926beed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.248.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:b1:eb:88:ec:84:89:e0:78:23:39:b4:ed:9b:29:26:8b:61:
92:bc:ea:ec:59:5c:80:db:95:e1:8b:f8:a0:dd:0f:46:e7:cf:
38:7a:e5:29:fe:87:80:3e:37:85:31:1b:78:c4:07:f8:b8:76:
91:d5:b2:3f:9c:83:f6:14:43:df:6d:2a:66:bf:77:21:14:cd:
18:82:9d:c3:28:30:72:be:32:dd:4a:ea:58:2d:ba:71:ac:a7:
93:fa:3a:a5:5e:53:03:c3:7b:47:c0:18:61:1b:23:3a:53:c2:
c1:7a:1a:ff:b6:06:f4:61:52:22:d8:03:d5:a1:61:2c:b8:17:
e7:ba:36:df:84:86:d9:39:de:0e:6f:af:34:e7:de:f9:4d:bc:
d1:71:d7:39:f4:96:17:cf:a0:99:f7:f8:08:b9:b8:e3:f3:d1:
ed:0c:ba:d0:b1:6e:58:c8:3c:d6:4f:b2:d0:59:36:6b:a4:fb:
c8:ec:ce:27:32:a0:fa:79:6c:44:74:46:42:ef:e1:4d:9d:fd:
ab:a9:0e:3b:57:0c:dc:e5:2e:29:66:cd:ac:e1:a9:89:c8:4c:
82:45:49:b6:d6:cc:b8:90:c0:05:d6:07:cb:15:02:72:2b:3e:
d2:85:31:10:15:2d:6a:02:5c:f2:99:06:9a:f2:41:41:8f:95:
ec:bd:f2:de
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:35:11 2025 by rpki-client