Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/215f2d45-f22e-464c-b4f1-f2e4aa2ef44f.roa
File: 215f2d45-f22e-464c-b4f1-f2e4aa2ef44f.roa (raw, json)
Hash identifier: BsxLCLWAR5uIixUHdsQMdCPRt0im9EB30ArVOSQhhc8=
Subject key identifier: DE:AD:CA:48:E3:5C:A6:48:29:DB:6F:81:06:1C:98:B1:60:D8:67:F0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 04D17C4D752485FFE0FC1D98D32485C74B7DEB49
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/215f2d45-f22e-464c-b4f1-f2e4aa2ef44f.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2a05:d000::/25 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:d1:7c:4d:75:24:85:ff:e0:fc:1d:98:d3:24:85:c7:4b:7d:eb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=3488b1d328cb9d0abad957c5218a9814b854b45bed3d67e4d3316e56ed806b24, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:09:90:b9:44:b2:25:a1:b9:35:f8:98:e6:7c:
ed:83:24:a7:bf:1c:62:34:74:03:15:9e:c7:f5:fc:
74:6f:50:a4:84:95:44:7d:96:1c:d9:4d:b2:c1:4c:
02:4c:49:f1:19:9c:88:f2:00:63:03:5e:26:2b:f0:
e0:7d:31:36:51:72:1b:c2:37:17:db:e6:0a:4a:5d:
b9:41:00:46:f5:66:c9:88:0b:b9:ae:02:1a:73:59:
6c:ae:8b:2c:81:14:2c:15:dd:47:33:a1:92:3f:4e:
46:fe:60:7d:13:8f:26:29:8c:71:26:30:29:47:35:
c7:62:50:5a:59:ec:0b:ef:6f:40:09:81:66:f3:8c:
64:b5:d8:45:be:2b:70:dc:46:8e:a5:18:db:41:5b:
fb:24:dd:c4:61:b7:06:ec:b5:26:56:fa:25:cf:42:
62:c0:0e:a5:cd:8b:36:98:ba:63:e4:3a:b8:85:50:
42:26:f2:4c:25:03:eb:5f:79:ff:ac:d9:25:a0:e6:
f3:d8:0c:29:9f:f9:19:03:90:56:19:76:19:f3:3b:
ea:b4:ed:f6:50:35:7f:1c:fc:f3:1c:26:00:f2:2b:
44:2f:61:5a:23:38:a7:81:ed:6b:96:c0:f4:57:d2:
dc:4b:a8:a9:fe:06:90:ab:57:bb:f1:d8:f5:ec:87:
85:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AD:CA:48:E3:5C:A6:48:29:DB:6F:81:06:1C:98:B1:60:D8:67:F0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/215f2d45-f22e-464c-b4f1-f2e4aa2ef44f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000::/25
Signature Algorithm: sha256WithRSAEncryption
4f:52:d6:0d:0e:55:30:f0:ab:cc:f7:f0:7f:c1:93:40:1b:36:
18:26:10:0d:6f:f1:09:6f:6d:fc:f9:e1:6f:83:70:a8:c1:36:
2c:b4:f8:9c:ca:fa:ac:45:f6:72:62:16:a6:69:f8:d4:82:a6:
41:23:01:04:69:1f:6b:48:18:d8:1f:64:85:19:da:83:80:09:
49:0a:8c:e6:87:58:41:bc:91:88:84:15:a8:73:1e:57:56:2a:
10:ac:b6:5b:23:f3:1c:40:88:df:7c:3f:fb:d2:c5:cf:c8:ed:
24:b4:31:8e:5c:79:68:4a:9d:97:40:50:e8:50:da:9c:63:05:
5f:90:2f:fe:45:cd:61:cc:73:b0:be:99:cf:83:27:93:8c:c8:
f6:ee:38:01:cf:c9:28:e6:84:ee:c3:d9:b9:86:ae:c8:e2:3e:
49:0d:00:2d:bd:4b:0b:6f:df:a6:2f:e7:3f:a6:0f:7c:b6:9e:
43:fa:ba:4f:00:06:63:aa:41:e3:14:9e:af:c7:52:e5:8d:37:
57:15:18:1e:e0:6f:84:f4:0a:8c:bc:4d:b5:ea:4f:78:7a:32:
4b:35:86:cf:91:5c:5d:8d:78:c3:7f:20:d0:22:2f:85:d6:6d:
5e:f9:5c:91:aa:05:d3:65:92:00:7f:57:9a:3a:f0:c8:1e:47:
66:06:ab:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:06:18 2025 by rpki-client