Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0600bba7-d2f0-4a18-978c-f1ea268d6157.roa
File: 0600bba7-d2f0-4a18-978c-f1ea268d6157.roa (raw, json)
Hash identifier: XhLit48ZFvyUxVw6vYPbDA6MwlvFsgOIu+74MtvlfKc=
Subject key identifier: 1A:B1:ED:8D:F3:14:A0:DD:4E:AE:6A:64:F4:91:4B:BF:5A:1F:09:EB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 63B77A1AB41BBCE5D64AB7048E71D07148CF82B6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0600bba7-d2f0-4a18-978c-f1ea268d6157.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:9000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:b7:7a:1a:b4:1b:bc:e5:d6:4a:b7:04:8e:71:d0:71:48:cf:82:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: serialNumber=dc95abda137913b575f298161dad5a95e64fd7c49bfa09a933d5f5d68661c3f2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:08:7a:cc:49:5e:8c:7a:6e:b1:17:1a:9b:
b1:d4:94:3f:a3:eb:2b:22:5e:3e:f3:25:0f:88:82:
73:37:c8:5c:16:68:0f:39:7e:63:e3:da:b4:00:b1:
28:12:81:51:9c:80:b0:6f:7f:fb:dc:ca:2a:d6:8b:
de:53:eb:ae:ed:c0:3c:eb:02:d7:c1:89:ab:a6:a3:
4e:3e:c8:9d:40:79:a1:c6:21:b4:c4:0e:3f:d8:f9:
8c:ca:81:9a:97:74:77:a3:f6:35:95:5b:66:fe:83:
6e:96:90:80:bb:f3:9a:1a:76:af:c3:41:90:a1:a4:
84:43:ae:7f:e5:c3:8e:66:3f:73:54:29:b1:20:9b:
8b:92:b4:fa:eb:2e:3e:c6:30:61:4f:b3:a3:56:4d:
c0:11:b7:37:88:1f:bb:79:a5:03:aa:21:6c:cd:02:
ab:8b:0a:13:6e:4b:61:1b:ce:18:25:6a:da:b6:a2:
9d:ac:ab:07:c2:80:8f:44:47:d3:41:5a:29:69:9e:
e8:7f:9e:48:66:67:b5:59:42:3a:bb:dd:52:f3:63:
c9:59:c0:60:71:25:08:82:65:c5:4f:12:0c:11:1d:
96:32:7d:64:58:db:06:d2:98:a4:bc:35:d7:9b:95:
b7:b1:4b:89:1c:e8:14:90:7a:e3:02:f8:bd:9b:7a:
c8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B1:ED:8D:F3:14:A0:DD:4E:AE:6A:64:F4:91:4B:BF:5A:1F:09:EB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0600bba7-d2f0-4a18-978c-f1ea268d6157.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:9000::/40
Signature Algorithm: sha256WithRSAEncryption
ca:44:7c:5f:4c:04:56:3a:9c:fe:f8:02:6a:7a:ab:7a:7c:bb:
b6:13:66:c4:3e:c5:ac:f5:1c:a3:78:d6:a5:59:ae:64:3a:42:
a5:9b:ad:64:09:91:08:4a:e7:13:07:8a:62:ca:7d:27:bd:33:
63:fc:13:a6:20:c3:4c:1e:5a:44:f1:a3:4f:81:ba:78:96:f7:
dd:44:63:d7:c6:43:60:75:5b:dd:2e:00:e1:d7:5e:c6:24:ff:
94:1e:2c:9e:f8:95:0a:a4:e4:5d:00:bc:e9:08:6d:f5:31:39:
00:3b:ee:6e:0f:a7:54:2b:76:be:7a:6f:9f:79:94:e9:43:15:
4a:51:4a:e3:ae:7f:9c:39:c6:b6:d7:3e:b4:ae:99:54:20:d0:
32:57:e2:ca:82:d9:5b:6c:15:c3:9d:91:93:95:a5:12:a2:b5:
d2:50:c2:60:a0:24:81:38:8f:d6:b8:2e:e0:3b:44:30:e1:19:
75:b7:e7:b8:78:1d:6e:ba:5e:2b:8b:9d:a7:f0:64:ea:f4:96:
a2:6d:9f:1a:0f:30:95:67:e9:f7:17:7f:a9:93:d4:a7:8c:d7:
b7:2b:23:8a:18:a7:3a:5b:9c:cd:aa:41:3f:ff:7e:84:db:f7:
72:0c:10:40:60:09:23:5b:71:be:ad:db:61:3e:10:ed:a3:ed:
f7:ef:9d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:07:25 2025 by rpki-client