Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1e5855b1-e929-48d1-bcc3-3fe10693334a.roa
File: 1e5855b1-e929-48d1-bcc3-3fe10693334a.roa (raw, json)
Hash identifier: wQuZ7+gkNGiGHz6r3rpDZMA/hfwcEqHNWG9RAERbf6E=
Subject key identifier: D1:41:89:B9:E2:19:25:F8:A9:BC:78:86:8A:D8:CD:F0:1F:AF:CF:51
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 23CE16FA11CC6CE4592FE02F9BCEFC5E9D50184D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1e5855b1-e929-48d1-bcc3-3fe10693334a.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:e040::/46 maxlen: 46
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ce:16:fa:11:cc:6c:e4:59:2f:e0:2f:9b:ce:fc:5e:9d:50:18:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=ba1fb065d0f065296a9b7fde451a7e5cc960f556bb02ea1feeb6f32e5b4dd358, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:14:b6:38:72:3f:3e:a7:11:14:6b:88:76:87:
e4:04:0b:94:e2:9c:ee:97:91:4e:4d:23:9d:c2:3f:
17:8f:4a:15:9a:6c:b4:40:e1:d8:ec:07:ec:d5:75:
3f:ef:55:d2:10:80:e9:a1:8c:d9:fe:bd:59:f5:5d:
b5:d0:b0:91:df:a2:7f:fb:ef:d2:00:86:4d:79:be:
43:a5:5a:f5:3a:c7:6e:2d:33:f2:fb:74:fc:99:2c:
e6:1c:16:d1:ee:6e:45:12:49:e4:bb:35:74:a3:c9:
b4:12:2d:c5:b3:69:48:8b:17:86:5d:01:bc:2c:00:
2b:8d:88:92:9c:98:fe:f6:7f:9b:1b:35:b1:ac:f4:
89:ff:bd:f6:38:ed:e5:5c:d4:ae:70:35:00:15:53:
1d:1b:78:27:c9:d8:67:e8:e3:85:7e:59:79:cc:6d:
a4:a2:17:87:95:a4:9f:4c:f0:85:33:62:9e:0c:2b:
8b:43:34:71:67:5d:93:31:a9:8f:c1:f2:32:83:d3:
43:9c:3f:a9:06:1d:74:cb:a3:f7:40:d1:24:e2:a4:
0c:d2:63:cb:60:cd:25:19:b0:58:1e:b0:8f:e0:16:
ad:a2:45:03:a1:48:62:8b:67:56:f1:d4:85:ea:cf:
2d:67:28:f3:90:01:e9:b6:e2:4a:af:25:35:42:ef:
23:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:41:89:B9:E2:19:25:F8:A9:BC:78:86:8A:D8:CD:F0:1F:AF:CF:51
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1e5855b1-e929-48d1-bcc3-3fe10693334a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:e040::/46
Signature Algorithm: sha256WithRSAEncryption
09:28:86:6c:29:2b:be:47:54:4a:e8:35:97:74:0b:32:59:b5:
0b:f5:ce:ce:91:df:4d:56:fc:cc:b4:06:fe:0a:10:c5:e7:94:
9a:a2:b5:f9:43:6d:9f:26:5a:de:0e:ac:d8:40:87:82:88:2e:
6d:32:0e:a5:9d:4c:b3:e5:9f:63:cf:55:63:e1:8a:24:e9:08:
4c:f1:5a:97:64:13:ff:d1:9e:d1:d5:36:eb:0c:ae:07:96:e1:
cf:e1:e0:ac:ce:4d:97:0e:a1:a4:12:55:e1:84:a2:6c:a6:0e:
89:f5:e2:d2:2b:8f:9e:e4:ba:be:b3:48:d6:9a:65:3f:f8:f5:
73:2c:b2:64:e2:c5:12:30:98:75:da:a2:64:1c:62:ca:97:ab:
56:3e:40:48:18:2b:ce:04:87:b5:ef:0d:1a:93:35:23:30:0f:
3e:dc:7f:2a:bb:1d:b4:29:c5:48:76:76:d3:cd:45:55:3c:ed:
ac:a5:93:cf:34:8a:a4:aa:69:50:0b:7c:db:2f:ad:19:5f:9f:
42:62:ae:55:00:f1:3a:97:98:30:f0:83:4a:2a:26:b1:4e:1e:
5e:99:9e:61:2f:82:bc:b9:c1:92:05:5f:29:0d:f2:53:f9:38:
83:ec:b0:77:5b:56:4c:eb:81:b2:5a:fc:42:5b:f9:b0:61:05:
b1:d2:62:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:07:19 2025 by rpki-client