Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/06c271dc-5e79-4265-bb06-1d06647fd302.roa
File: 06c271dc-5e79-4265-bb06-1d06647fd302.roa (raw, json)
Hash identifier: YvMZ8tOCJHSrKnrKHpjSgE9bZgJYeluUAmzWXGD707w=
Subject key identifier: 72:E7:BA:36:DE:97:27:F2:AA:2E:3D:A4:D2:14:07:2D:B2:4A:61:AE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7EE48CA663EFAB2411DE00F4FC5A4142066AEE7E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/06c271dc-5e79-4265-bb06-1d06647fd302.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d023::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:e4:8c:a6:63:ef:ab:24:11:de:00:f4:fc:5a:41:42:06:6a:ee:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: serialNumber=cd8445d5813bda25b2081d15421873db221c3eaa5234cdfecd1eec2dfa00e5a4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:dc:7c:3c:bd:cf:6d:fa:ac:1e:25:03:78:af:
19:ac:08:49:5f:c4:d7:fa:e1:ed:88:63:11:ba:e5:
06:06:be:97:b4:12:7c:77:fb:e3:ac:ed:63:57:bf:
96:04:ad:c1:b1:2c:2f:0b:ce:0a:14:4c:34:b1:99:
7c:3f:ac:03:84:73:b6:79:f0:03:18:d9:3d:b7:0f:
33:45:28:1f:5f:be:6f:01:62:cf:e0:4d:b8:41:d6:
48:c7:a3:e1:14:87:79:55:34:ef:d0:55:ea:1b:a3:
c3:f6:30:70:cc:5c:9a:58:05:43:b3:0c:22:7f:0a:
b9:f0:2d:1a:c9:1b:ca:14:31:6e:22:a7:9c:f4:93:
09:d7:56:b6:3c:70:3b:72:bb:bf:65:b8:1f:68:89:
9d:ca:a4:06:31:39:4a:e1:7f:e6:5e:42:c8:2e:ee:
9c:98:37:fb:b7:aa:d6:5e:64:38:84:bd:7a:79:9e:
f6:46:56:59:bb:df:83:fd:d6:7f:23:8c:ce:2a:2d:
33:78:90:f3:4f:3e:ec:89:53:d7:43:ad:26:87:91:
9c:28:4c:1a:bc:7b:96:5a:63:99:9b:8b:0d:0e:45:
05:0f:65:13:89:91:77:40:23:4e:a4:bd:74:92:2a:
f4:65:72:3f:74:84:0e:72:93:9b:16:c6:8d:ba:37:
78:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E7:BA:36:DE:97:27:F2:AA:2E:3D:A4:D2:14:07:2D:B2:4A:61:AE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/06c271dc-5e79-4265-bb06-1d06647fd302.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d023::/36
Signature Algorithm: sha256WithRSAEncryption
77:47:55:a1:83:77:35:1e:7d:9c:12:20:57:fd:96:45:db:bb:
27:36:e5:e6:d5:79:54:86:b4:ed:6d:c1:2d:69:ee:64:36:46:
bf:96:40:d6:62:5d:a0:66:0a:9c:12:ab:b1:32:d5:24:b7:87:
03:e7:e9:9e:96:20:aa:df:1b:59:20:fc:76:05:51:6f:44:33:
c9:f1:27:f7:64:37:97:8b:56:72:3f:fc:e4:a1:5b:f8:9d:95:
29:f7:00:0c:a4:ea:83:d3:4b:72:0f:c3:aa:7e:e6:b9:c2:23:
28:84:6d:40:c2:35:26:4d:64:82:2c:93:f4:32:df:cd:44:4a:
38:20:66:8e:cb:ba:fa:74:73:5a:1c:cf:ea:0c:70:12:fc:89:
d8:7a:aa:a8:b7:22:42:b2:8d:4f:20:82:c3:b6:a4:80:0a:3a:
8c:14:98:dc:f5:20:b3:fc:db:91:48:a8:7b:34:14:dc:7b:99:
83:26:3a:c9:51:49:ca:59:f0:0b:46:ee:5d:67:7f:93:a1:94:
65:68:19:c8:51:c7:62:92:8e:45:55:5b:16:b3:a4:32:6f:fc:
fa:aa:e4:6e:d0:53:c1:16:ea:60:f6:9b:71:ce:68:db:c0:3e:
15:b7:dc:72:e2:05:f7:1c:05:b2:97:0d:a8:9e:cb:f7:0b:d8:
95:68:dc:e2
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUfuSMpmPvqyQR3gD0/FpBQgZq7n4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDEyMzAwMDAwMDBaFw0yNTAyMDMyMzU5NTlaMHoxSTBHBgNV
BAUTQGNkODQ0NWQ1ODEzYmRhMjViMjA4MWQxNTQyMTg3M2RiMjIxYzNlYWE1MjM0
Y2RmZWNkMWVlYzJkZmEwMGU1YTQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOfcfDy9z236rB4lA3ivGawISV/E1/rh7YhjEbrlBga+l7QSfHf746ztY1e/
lgStwbEsLwvOChRMNLGZfD+sA4RztnnwAxjZPbcPM0UoH1++bwFiz+BNuEHWSMej
4RSHeVU079BV6hujw/YwcMxcmlgFQ7MMIn8KufAtGskbyhQxbiKnnPSTCddWtjxw
O3K7v2W4H2iJncqkBjE5SuF/5l5CyC7unJg3+7eq1l5kOIS9enme9kZWWbvfg/3W
fyOMziotM3iQ808+7IlT10OtJoeRnChMGrx7llpjmZuLDQ5FBQ9lE4mRd0AjTqS9
dJIq9GVyP3SEDnKTmxbGjbo3eF8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRy57o2
3pcn8qouPaTSFActskphrjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDZjMjcxZGMtNWU3OS00MjY1LWJiMDYtMWQwNjY0N2ZkMzAyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0CMA
MA0GCSqGSIb3DQEBCwUAA4IBAQB3R1Whg3c1Hn2cEiBX/ZZF27snNuXm1XlUhrTt
bcEtae5kNka/lkDWYl2gZgqcEquxMtUkt4cD5+meliCq3xtZIPx2BVFvRDPJ8Sf3
ZDeXi1ZyP/zkoVv4nZUp9wAMpOqD00tyD8Oqfua5wiMohG1AwjUmTWSCLJP0Mt/N
REo4IGaOy7r6dHNaHM/qDHAS/InYeqqotyJCso1PIILDtqSACjqMFJjc9SCz/NuR
SKh7NBTce5mDJjrJUUnKWfALRu5dZ3+ToZRlaBnIUcdiko5FVVsWs6Qyb/z6quRu
0FPBFupg9ptxzmjbwD4Vt9xy4gX3HAWylw2onsv3C9iVaNzi
-----END CERTIFICATE-----
Generated at Thu Apr 17 05:07:18 2025 by rpki-client