Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/305a28e2-5105-4222-8a2a-f3c7201b482a.roa
File: 305a28e2-5105-4222-8a2a-f3c7201b482a.roa (raw, json)
Hash identifier: egtCmR5lGt3eaAm4ww6jw8eHWG6vy65SAMhBNcHcVRQ=
Subject key identifier: 72:A2:97:B1:46:63:33:4F:B4:C8:AB:12:CE:E1:69:90:2E:F0:DC:19
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 11DF96EFFB1256863AE0074DB319A29C9BB01FF3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/305a28e2-5105-4222-8a2a-f3c7201b482a.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d079:8000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:df:96:ef:fb:12:56:86:3a:e0:07:4d:b3:19:a2:9c:9b:b0:1f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: serialNumber=acfdb98ebece2632d511aa7cedc10142cb1ea0ea14c846cea015bef7fc65b069, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:aa:10:2f:cc:01:d4:1b:82:83:3b:58:dd:
aa:a6:c2:a7:1b:01:ce:e7:e0:30:17:ba:77:8e:fd:
e3:fa:89:df:5f:72:57:ba:a3:f7:60:07:b1:ca:a6:
ca:af:25:a3:9f:67:15:e7:29:58:69:6b:c7:52:27:
a9:ad:f4:c6:c9:a0:6f:f8:13:84:d5:3e:fe:2d:03:
ba:4f:be:92:6a:9f:dd:b2:53:21:e3:12:eb:7c:91:
f5:26:33:2d:df:14:fd:03:66:ee:15:98:b6:ef:b7:
ed:aa:28:2f:53:ae:a2:d1:d1:c5:39:fe:58:af:44:
55:26:a6:a2:6c:f1:13:28:08:66:3d:e2:05:45:a0:
2a:be:83:93:72:00:e0:13:24:04:d8:5e:11:8d:8e:
1c:15:db:b4:f8:5f:4f:75:4b:1a:36:6a:93:cc:0a:
93:fe:74:7a:b0:23:ef:61:3b:80:85:be:df:da:df:
97:f1:e4:51:4d:0f:94:86:22:93:c7:d8:7f:96:17:
e3:72:ad:f5:a2:00:10:34:03:95:ad:d9:3e:cd:aa:
da:29:fa:ab:8c:4f:e4:65:34:60:20:ab:bc:3e:c8:
1c:b6:2c:a6:e1:c5:f6:a8:72:d3:a2:74:2c:5b:63:
3c:b7:aa:56:8d:a4:dd:65:72:a3:14:97:86:e9:89:
05:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A2:97:B1:46:63:33:4F:B4:C8:AB:12:CE:E1:69:90:2E:F0:DC:19
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/305a28e2-5105-4222-8a2a-f3c7201b482a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d079:8000::/40
Signature Algorithm: sha256WithRSAEncryption
81:b7:b2:11:94:07:da:f2:4a:42:67:02:a0:ab:f6:23:66:72:
99:e8:10:f6:56:69:be:d8:0f:03:72:cf:94:7b:59:df:f1:2f:
61:2c:5c:26:b2:1e:eb:db:e5:f5:7b:7f:91:c6:1c:b6:de:b7:
28:b3:e3:3f:5b:35:0d:e2:0c:8d:d0:d0:d2:c8:c6:96:3d:2f:
ef:9e:f5:4b:ac:f5:32:75:50:e9:f3:07:52:bf:bc:c9:03:cf:
84:85:1d:16:37:ba:50:78:f3:bc:89:d6:dc:dc:75:6d:8a:74:
2d:6a:b8:eb:90:04:c8:d2:b1:56:92:53:46:54:97:0c:82:eb:
4d:dd:89:e9:01:68:8f:3c:ca:17:39:73:b0:6f:ff:1d:2d:26:
84:0f:d8:62:0b:92:48:cc:5f:43:4f:f4:32:e1:eb:79:7e:04:
2a:9f:52:23:03:c1:1e:e8:7e:19:75:c6:06:5c:90:18:d5:1b:
83:b7:a3:bc:86:f9:36:b1:74:d1:f2:f6:f8:c6:45:8e:50:9f:
84:0d:a5:0e:97:ad:71:9a:d1:4e:2c:60:87:3a:4f:8b:0f:0c:
e6:92:d1:77:81:80:ed:44:1a:93:a4:f3:37:a7:fa:a4:c8:16:
5c:9f:8b:a0:9e:0d:ba:7d:fa:9c:0b:49:d3:d5:b9:2d:a4:dc:
0b:f6:47:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:10:54 2025 by rpki-client