Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/01e2e62d-dd46-430d-8776-8cdab8363487.roa
File: 01e2e62d-dd46-430d-8776-8cdab8363487.roa (raw, json)
Hash identifier: sSDeXNRX3JZ5OQmiD5P4kRttOB524lhLCsvgqbIDFCY=
Subject key identifier: 39:24:5A:C6:42:9A:32:40:0B:CB:A9:51:B8:2B:F9:B5:A3:38:2D:D5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 423DBED384EC02BB606126C29DF9DA23404A44FB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/01e2e62d-dd46-430d-8776-8cdab8363487.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:5080::/46 maxlen: 46
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:3d:be:d3:84:ec:02:bb:60:61:26:c2:9d:f9:da:23:40:4a:44:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=4c78785dc7f5714af6e7baf764d2461f21d08e96a5e4d9a324095c083d2ed520, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7e:eb:45:46:93:b5:1c:aa:6e:17:3e:c5:b5:
09:a9:c3:8e:c9:ef:9b:e8:d5:2d:4b:e9:e1:8f:7e:
36:f9:14:21:88:cf:c4:30:f2:ae:26:d6:da:a7:b1:
bb:f3:2f:b4:dd:73:de:44:a4:a8:57:2a:e9:a7:d2:
0b:17:29:fc:09:4e:aa:8d:3c:dc:b4:d9:a4:17:09:
0a:eb:a1:ac:cf:12:79:2a:f7:26:ec:2e:44:ce:0a:
db:77:77:4d:ce:1b:c9:2e:64:29:b1:a2:6a:a9:fa:
9c:9a:a5:c6:36:c9:c2:91:f5:10:bd:49:1b:3d:15:
83:88:5a:51:16:c4:6d:fd:9d:46:5c:84:5b:82:56:
26:68:fd:6a:d0:b2:72:1c:e4:a7:bc:dc:31:77:7f:
31:d6:ec:ca:d6:4a:b4:60:c9:c8:aa:38:5b:2e:21:
f2:72:ea:a5:b8:e1:c3:2c:c3:6a:53:07:0d:7b:a5:
67:a6:66:fa:f9:a5:cf:94:4c:15:d9:75:af:fc:5a:
24:79:ff:d7:92:69:92:32:8b:e2:a6:d6:8f:14:7c:
7b:71:81:99:1e:0d:ae:99:d5:6c:43:7f:6c:7c:33:
e5:a0:64:e8:72:ca:c3:4a:37:97:80:53:50:96:25:
7a:2e:9b:31:a7:0d:4f:86:a2:d4:f5:79:44:c9:25:
bf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:24:5A:C6:42:9A:32:40:0B:CB:A9:51:B8:2B:F9:B5:A3:38:2D:D5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/01e2e62d-dd46-430d-8776-8cdab8363487.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:5080::/46
Signature Algorithm: sha256WithRSAEncryption
24:98:c8:35:63:ec:9f:c0:5d:1e:56:50:cb:48:6d:87:a7:9b:
99:fb:68:fd:0a:6a:2a:0e:f6:56:08:71:0e:01:53:ae:77:98:
7b:7d:98:90:e8:75:9f:57:e8:94:2c:9c:a4:a5:42:1b:d0:76:
05:48:2c:bb:12:d1:6b:7e:58:60:79:a8:c4:41:57:95:ae:b6:
06:cd:71:07:17:1f:ae:62:ae:99:33:1a:8c:60:d5:12:b4:32:
6b:0e:36:b7:a8:dd:53:4e:32:d0:43:7b:96:90:86:d4:9a:41:
8f:5c:23:fa:7f:4c:b8:05:84:db:80:3c:f8:27:07:83:54:03:
4b:8e:fb:af:a1:12:33:0a:92:a0:04:bf:d9:5e:3e:72:9d:6d:
fc:1a:59:70:b8:67:e6:3a:30:5c:60:fd:61:cb:07:95:b2:95:
b7:d3:b6:ae:02:14:9d:44:68:aa:e4:d9:ed:07:88:85:e2:09:
2b:f7:43:19:30:43:17:6f:99:5b:a5:bf:7c:2e:16:10:ce:5f:
57:00:39:18:0f:ae:6a:be:5d:e3:c4:14:c2:cb:be:0d:ef:a8:
c6:22:96:40:f1:50:6f:ec:c0:d0:04:1c:b0:57:9d:65:3f:d2:
65:7f:79:a9:71:37:f9:f8:35:e6:b4:04:8d:ac:ca:c2:9b:4b:
0f:0b:4c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:08:19 2025 by rpki-client