Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1795bad4-1696-423a-a7cd-1c56076897d9.roa
File: 1795bad4-1696-423a-a7cd-1c56076897d9.roa (raw, json)
Hash identifier: uUhvUCWjpP1XP5gHcXCC4uE8TIyNMTmrQUV0p/7VsOQ=
Subject key identifier: 8A:48:CB:DA:89:3B:D9:84:17:B4:96:DE:E0:D9:EA:96:20:2F:EC:09
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 10E7E0B3D15A67962153D10223C8B6AA07F44BDC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1795bad4-1696-423a-a7cd-1c56076897d9.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:4000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e7:e0:b3:d1:5a:67:96:21:53:d1:02:23:c8:b6:aa:07:f4:4b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=c76dbe0009db7df21288e81260ff254be700ef36ff432df3d1514959bfa6981d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:a2:ca:f5:58:2e:55:de:23:b4:a7:68:73:
f7:cc:2e:24:c6:50:17:a1:e5:07:56:7d:31:41:46:
28:96:9b:83:6e:6c:0c:11:be:e4:55:87:1b:72:ee:
03:77:b2:71:a5:17:d2:fd:98:31:83:93:c7:61:fe:
ac:22:e4:37:0e:e2:43:b5:ce:a3:71:4f:51:60:bc:
bf:44:dc:28:0f:08:82:25:45:18:8e:da:d6:9a:64:
13:ec:cb:ea:75:2a:21:60:2f:cd:89:6a:d9:27:f9:
0f:73:c1:86:88:80:8a:ea:95:e0:23:ef:7c:ad:00:
16:74:0b:6b:2a:a5:93:a1:ee:88:c3:3d:64:44:9a:
cb:c6:c2:a2:46:3d:22:fb:b6:41:6e:94:93:c9:75:
b8:61:7e:84:d5:4a:d8:17:88:ef:e5:75:ce:6e:8c:
e5:21:8e:dd:22:75:68:a2:06:45:5e:57:33:51:7c:
80:b5:77:ba:02:2c:13:32:d5:50:ad:b0:0e:62:9f:
d0:38:a1:19:29:5b:b2:ec:58:c1:e6:40:86:64:9b:
75:82:ff:6e:f9:4c:db:24:05:4a:1e:5d:47:22:c9:
32:64:4e:df:8d:a0:2c:13:08:f4:b2:4b:83:a0:40:
0b:b4:f1:e2:bb:12:8f:86:28:4c:9c:e3:f7:1b:9d:
f0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:48:CB:DA:89:3B:D9:84:17:B4:96:DE:E0:D9:EA:96:20:2F:EC:09
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1795bad4-1696-423a-a7cd-1c56076897d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:4000::/40
Signature Algorithm: sha256WithRSAEncryption
5e:6e:47:98:55:5f:95:2b:5a:73:6b:c4:a9:75:0c:4d:31:cc:
7e:a0:0b:a6:a0:5c:44:e6:7c:a3:a8:b0:9b:1e:46:68:9b:f3:
dc:c2:04:7f:c4:e7:a7:a9:3b:7c:11:a6:1a:b0:11:f2:69:ec:
93:6f:b9:c8:9f:91:ab:7a:fc:e5:e6:b9:62:0b:da:bc:3e:f7:
15:c4:e0:c5:e7:fb:22:87:1a:ff:3a:8f:94:b4:71:6d:d7:7c:
7e:ad:62:67:d3:dc:d7:62:08:61:a8:85:40:6a:21:0e:98:1b:
30:8c:1d:3a:b9:6c:81:cc:e0:c6:43:77:96:d6:80:74:e2:6a:
44:41:65:6a:b5:e5:19:88:dc:28:9f:8c:a5:e2:63:a1:2f:fa:
6c:ad:73:a0:6a:07:da:ff:a1:55:7b:5b:46:c6:69:46:09:42:
25:e2:66:f2:1d:24:55:50:4b:9c:67:fb:73:33:3e:66:b9:49:
9f:af:72:90:e8:a5:b5:0b:c0:15:89:b3:65:38:2f:b3:36:c2:
c7:f8:b3:1f:2d:bd:25:9d:e1:84:54:80:aa:57:c6:1e:6d:4d:
a7:e5:d4:fe:d5:d6:50:5a:f5:36:ac:55:0f:d9:15:eb:b4:2b:
e8:d7:b9:3e:78:b8:17:45:9f:e3:4b:56:d8:85:ab:8a:d2:9a:
a2:24:7e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:10:55 2025 by rpki-client