Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/24cb2bd5-37da-4fe1-b8de-cc59bc9d5511.roa
File: 24cb2bd5-37da-4fe1-b8de-cc59bc9d5511.roa (raw, json)
Hash identifier: mDbCLPBUqskpCg3zf0coBPde7Trg2hAv18yZhOymPCU=
Subject key identifier: 25:18:CC:BF:14:A0:8C:0D:7E:C6:80:6A:6A:A6:8D:8A:A9:86:14:48
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 79ED70ADA4D8A11AF4595D392D6FF54A183C3FCE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/24cb2bd5-37da-4fe1-b8de-cc59bc9d5511.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:8000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ed:70:ad:a4:d8:a1:1a:f4:59:5d:39:2d:6f:f5:4a:18:3c:3f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=0e808c8716b86c7dbd4a8c838bb6ebfa8f7357b17804521d5934d168e9b6431f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:b5:8c:94:e0:d2:dd:2f:b7:c8:11:b3:57:
eb:f3:4d:5c:0b:db:ab:b3:03:69:5e:9f:42:9c:ac:
9b:17:91:ed:2e:2c:a9:f6:26:a3:0f:be:2d:59:3f:
84:88:b0:b9:f7:be:66:56:04:5e:76:fc:12:30:fb:
9c:c6:c6:46:a5:1f:d7:f3:26:b2:4a:e9:02:45:19:
82:28:fd:79:35:69:f4:2b:73:41:75:15:df:c3:c3:
65:c4:04:99:5e:4c:5e:c8:17:2e:2c:75:c6:67:7a:
32:48:bb:9f:83:82:f8:e1:d9:44:6a:b0:02:4d:ab:
9f:1e:1f:93:f7:0a:a3:08:e2:a6:c0:5d:f7:b4:f8:
64:86:e4:27:04:1b:55:1c:42:b0:39:cb:1a:9b:30:
f6:5c:ed:c6:d1:7f:50:c1:cd:9d:ce:41:5f:bf:7a:
30:d7:65:39:27:ef:f2:c1:e8:a9:5b:15:70:d1:a4:
3c:74:1b:a7:b5:b6:31:00:18:c5:32:0f:92:1c:e9:
39:6d:90:e0:9c:c4:bf:49:fb:cf:88:b8:c5:6b:e1:
e1:08:61:12:e6:d7:dd:50:ec:9b:56:fa:e9:95:c2:
61:3d:8d:12:1b:54:83:01:e3:51:51:e5:bf:20:f9:
90:55:68:24:31:d1:5d:b3:f8:62:d5:36:01:da:82:
1f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:18:CC:BF:14:A0:8C:0D:7E:C6:80:6A:6A:A6:8D:8A:A9:86:14:48
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/24cb2bd5-37da-4fe1-b8de-cc59bc9d5511.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:8000::/40
Signature Algorithm: sha256WithRSAEncryption
5f:f1:53:d9:a9:f0:18:66:3e:42:dc:80:13:62:9e:89:2b:43:
da:ed:99:ee:d3:0a:40:1f:f3:c6:f2:54:cc:a6:19:8f:2e:2e:
36:f8:cc:2b:7b:bc:32:1b:33:29:f3:73:80:74:e4:b5:d4:68:
a7:3d:1c:0e:1c:e6:cf:61:5c:7f:7c:99:4a:1f:8d:cf:de:c1:
6b:7c:a8:31:58:4e:73:55:a0:05:9a:02:07:87:2d:ac:1b:1c:
42:df:2f:bb:9c:8e:f4:a4:01:01:98:1a:a8:95:4f:5e:92:89:
28:94:af:41:7a:28:ad:69:b5:65:0a:6f:05:24:cf:a0:9c:8d:
19:f5:2c:54:02:35:7d:a7:3a:52:59:fd:91:0d:b7:c2:85:5b:
f6:fe:53:30:79:59:67:28:aa:b7:a2:ef:2d:e6:8e:4c:c1:56:
aa:d0:c5:bb:71:13:5a:76:fa:64:a0:dc:5c:8c:0b:40:d1:2c:
54:f8:2a:ad:ba:09:ad:60:37:c4:4d:eb:14:20:a4:7d:18:51:
89:00:ad:80:d6:bf:86:b7:cb:e8:29:ad:bb:24:bc:52:ad:88:
a2:ab:4f:95:cd:dc:83:16:f3:7d:b2:72:1e:a4:5c:47:1f:39:
9d:0b:4f:2e:a5:0b:e6:f3:ae:71:ac:72:92:f6:32:bd:1a:cf:
d6:ae:cc:ad
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUee1wraTYoRr0WV05LW/1Shg8P84wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDYwMDAwMDBaFw0yNTAyMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQDBlODA4Yzg3MTZiODZjN2RiZDRhOGM4MzhiYjZlYmZhOGY3MzU3YjE3ODA0
NTIxZDU5MzRkMTY4ZTliNjQzMWYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALFwtYyU4NLdL7fIEbNX6/NNXAvbq7MDaV6fQpysmxeR7S4sqfYmow++LVk/
hIiwufe+ZlYEXnb8EjD7nMbGRqUf1/MmskrpAkUZgij9eTVp9CtzQXUV38PDZcQE
mV5MXsgXLix1xmd6Mki7n4OC+OHZRGqwAk2rnx4fk/cKowjipsBd97T4ZIbkJwQb
VRxCsDnLGpsw9lztxtF/UMHNnc5BX796MNdlOSfv8sHoqVsVcNGkPHQbp7W2MQAY
xTIPkhzpOW2Q4JzEv0n7z4i4xWvh4QhhEubX3VDsm1b66ZXCYT2NEhtUgwHjUVHl
vyD5kFVoJDHRXbP4YtU2AdqCHyUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQlGMy/
FKCMDX7GgGpqpo2KqYYUSDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MjRjYjJiZDUtMzdkYS00ZmUxLWI4ZGUtY2M1OWJjOWQ1NTExLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HeA
MA0GCSqGSIb3DQEBCwUAA4IBAQBf8VPZqfAYZj5C3IATYp6JK0Pa7Znu0wpAH/PG
8lTMphmPLi42+Mwre7wyGzMp83OAdOS11GinPRwOHObPYVx/fJlKH43P3sFrfKgx
WE5zVaAFmgIHhy2sGxxC3y+7nI70pAEBmBqolU9ekokolK9BeiitabVlCm8FJM+g
nI0Z9SxUAjV9pzpSWf2RDbfChVv2/lMweVlnKKq3ou8t5o5MwVaq0MW7cRNadvpk
oNxcjAtA0SxU+CqtugmtYDfETesUIKR9GFGJAK2A1r+Gt8voKa27JLxSrYiiq0+V
zdyDFvN9snIepFxHHzmdC08upQvm865xrHKS9jK9Gs/Wrsyt
-----END CERTIFICATE-----
Generated at Thu Apr 17 05:08:10 2025 by rpki-client