Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/08dafdb4-3aaf-4945-8d1d-3f6eddac7fd3.roa
File: 08dafdb4-3aaf-4945-8d1d-3f6eddac7fd3.roa (raw, json)
Hash identifier: BFsCB2x8xkDAFnGMuyYAOpb1ChgpEUCIIJ8K9S4acjo=
Subject key identifier: 95:95:23:5D:56:F4:86:79:45:A8:AF:A8:35:C9:93:82:DC:20:DF:68
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5536BDBC6DC556AA2C82C82151166BA47114668B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/08dafdb4-3aaf-4945-8d1d-3f6eddac7fd3.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:6040::/46 maxlen: 46
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:36:bd:bc:6d:c5:56:aa:2c:82:c8:21:51:16:6b:a4:71:14:66:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=b9859ade46428d2b07280b52f7b87b0cf81b2691a4ac770446659a82030c2e28, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e0:de:c2:56:a6:cc:5e:74:4a:dd:24:d4:4b:
8a:7e:04:61:8e:ee:39:f4:5d:7c:83:12:3c:af:32:
a9:34:62:fe:3b:ce:bb:ca:ee:05:02:73:4a:b8:62:
5c:81:d4:60:d2:51:0f:97:ed:f8:68:6a:26:65:94:
c4:86:8c:cc:76:14:8f:6d:bf:a8:90:9a:06:fd:86:
2d:54:68:5d:5b:d0:d3:63:4d:6c:2a:f0:13:c6:95:
88:4f:41:44:c4:6d:67:91:87:a3:b5:4c:fe:34:81:
7b:9f:a3:96:ce:86:d7:30:cb:14:66:16:64:90:7f:
e2:79:59:cc:83:43:68:50:71:10:f4:52:02:02:52:
06:97:4f:2a:36:65:c3:22:d0:d2:b2:5e:e7:30:85:
ed:cf:37:c2:cc:c0:98:7c:36:7f:23:77:88:58:f9:
81:6a:1d:3c:f2:34:37:95:be:1e:14:c0:cd:86:51:
2e:ec:99:59:40:7e:72:26:ed:ac:7a:4a:9f:8b:6a:
b7:1e:16:3a:3d:68:82:e8:49:fa:cd:61:ee:08:38:
35:dc:f7:96:58:10:12:ac:2e:08:2b:c3:ce:73:f5:
0c:80:ef:20:ee:c4:ab:bd:63:8d:c1:ff:39:19:7d:
5d:5e:1d:c1:52:8d:69:25:40:22:a8:60:8a:99:ce:
29:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:95:23:5D:56:F4:86:79:45:A8:AF:A8:35:C9:93:82:DC:20:DF:68
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/08dafdb4-3aaf-4945-8d1d-3f6eddac7fd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:6040::/46
Signature Algorithm: sha256WithRSAEncryption
a6:b2:c1:5e:de:0f:ea:22:1d:4e:98:75:ff:b7:0a:01:d3:c9:
ce:52:b7:ca:1a:cb:fc:a7:6d:67:e3:00:bc:99:15:d2:88:06:
4d:34:20:ca:39:96:de:a3:f0:39:c2:64:f9:b0:0a:ca:bd:97:
d6:df:a8:c7:4f:03:7a:ef:a7:00:77:86:53:cc:cc:20:c1:d3:
ab:f0:34:5d:3f:de:0f:14:6e:55:d1:a6:26:49:5b:2d:90:8b:
b0:67:ff:38:86:aa:94:5e:cb:dd:27:19:40:83:54:51:6e:0c:
f7:9e:34:cc:6e:82:df:18:2e:90:e1:e0:e4:70:ae:54:e5:16:
61:23:e6:ef:06:bb:af:0a:0e:c4:f5:f2:a7:7e:1e:78:4d:71:
b5:b7:d8:ec:e6:6e:b0:70:36:51:c9:34:b2:6f:49:d6:4e:2c:
cf:05:05:cb:03:42:f2:43:92:59:75:8d:e2:f3:5b:9d:86:7d:
cd:27:0a:93:36:18:33:71:bb:ec:1c:37:1d:b3:ad:a5:28:34:
dc:5e:6a:04:77:45:9d:5b:66:98:2d:d6:35:87:b4:17:04:70:
18:44:09:5d:10:a8:6f:2b:52:fa:03:7c:f2:4e:77:78:ed:02:
63:fe:b8:e8:f9:74:a2:fc:0a:12:e0:7a:62:2b:0b:2f:16:1d:
50:80:50:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:09:06 2025 by rpki-client