Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/29da5eb1-a285-413c-a29c-911e1f05356b.roa
File: 29da5eb1-a285-413c-a29c-911e1f05356b.roa (raw, json)
Hash identifier: lkBGP12fiigU4Snhs9dPzMWHalblqQaUQednFyZvzzE=
Subject key identifier: BA:C1:AE:DC:4A:05:95:A7:7B:63:18:8D:75:8D:9F:07:49:E9:ED:91
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 688A153E5734389C680045789C71FDEF42E843B1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/29da5eb1-a285-413c-a29c-911e1f05356b.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07c:e000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:8a:15:3e:57:34:38:9c:68:00:45:78:9c:71:fd:ef:42:e8:43:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=ff2e5fc5dc4a7aae78d4d6b3ad36602424af402418356cbc0302cba03fd26f09, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fc:9b:14:1b:dd:95:f7:a3:b0:bb:e4:4f:23:
9d:f4:16:fa:0d:6f:8e:ca:52:c5:6a:1f:f2:46:1b:
e8:e2:8e:cf:5e:b4:85:b2:75:90:46:4b:8e:53:8e:
8b:14:c4:8b:b6:39:aa:0a:ee:f4:36:6c:75:e0:ff:
b3:b0:c2:c8:e1:52:df:e0:64:c8:f9:66:a2:cd:17:
d4:f9:84:39:af:c1:a3:a6:71:c6:a2:bb:6f:00:b9:
ef:63:29:8d:63:af:81:98:29:ff:38:15:9b:71:42:
bc:63:39:e8:19:fe:cb:82:87:e3:9c:ba:ce:38:d7:
88:cf:43:c0:b0:e6:f6:92:5d:b6:75:2a:90:f3:96:
4c:f4:48:17:83:ce:02:b3:ac:f6:f3:a9:ef:08:13:
d6:d1:32:46:bf:b9:d2:b8:e2:45:f4:5a:9c:c0:39:
8b:d0:7d:ad:9b:27:0c:38:39:77:7a:9c:a0:c0:54:
20:1d:03:8e:b0:f8:02:8c:a6:9b:0c:92:64:90:45:
3b:5c:57:f5:4d:6c:9a:b4:a1:99:9a:f9:ca:8d:78:
f1:98:f1:f1:73:89:1b:c3:ae:4e:ff:6c:28:db:a9:
bb:db:9b:d2:55:22:ce:6a:b8:35:52:7a:91:6f:5a:
92:4b:e7:b5:83:ea:88:6a:b0:81:c6:ae:92:a0:75:
e6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C1:AE:DC:4A:05:95:A7:7B:63:18:8D:75:8D:9F:07:49:E9:ED:91
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/29da5eb1-a285-413c-a29c-911e1f05356b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07c:e000::/40
Signature Algorithm: sha256WithRSAEncryption
63:6e:a2:d6:9d:99:ce:b6:98:63:da:7a:c6:dd:99:ea:4e:b1:
af:d2:f4:36:33:45:1b:ef:d3:0d:78:8d:cb:43:50:cd:18:56:
da:7f:5f:3f:4f:72:53:74:eb:b7:41:78:39:2f:0c:23:56:92:
dc:ce:23:f5:ca:36:0b:55:02:ad:45:76:4f:86:97:ca:b8:45:
7a:2c:00:f5:a1:fb:2c:c7:9b:11:6f:89:60:19:8e:95:f3:d3:
66:63:3b:e3:d8:d1:fc:ac:5b:23:3a:f3:40:ad:8a:fd:b8:8b:
fc:16:9a:b0:a4:7c:69:c0:66:f0:56:f9:f8:70:d8:93:30:eb:
bc:a6:bd:bc:52:9b:38:bc:67:98:9a:33:e7:44:44:4c:d5:8a:
71:fc:ff:35:fb:dd:2b:9f:2e:7b:5b:da:a7:49:f0:78:de:13:
9c:cc:11:61:d8:a4:ba:21:60:8f:3e:ef:3a:da:31:fa:8e:76:
c4:3f:77:d8:7b:f5:d5:fb:9b:59:63:ee:66:27:dd:49:8d:26:
c9:0b:07:a8:2a:1d:f8:13:06:3f:09:ab:4c:a9:ce:c2:76:e3:
39:93:a6:16:83:30:97:a3:b9:84:f4:ea:a6:8b:20:00:f6:29:
77:ac:a2:f6:97:4a:45:96:18:10:2e:33:12:f0:8f:c3:58:52:
63:59:20:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:06:18 2025 by rpki-client