Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3cf988cf-8d6d-464f-9722-31872a6594e0.roa
File: 3cf988cf-8d6d-464f-9722-31872a6594e0.roa (raw, json)
Hash identifier: YtvlGHwJKd7GMmMjDxVARoTYuUC57/3xCClolHZt4LE=
Subject key identifier: A4:80:28:5A:18:46:AD:08:68:FA:0E:FB:81:94:6A:7B:BF:FD:50:B5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 39FF101A9AC136F30C7D41D4D68D4EEC7E50FCCB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3cf988cf-8d6d-464f-9722-31872a6594e0.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:a040::/46 maxlen: 46
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:ff:10:1a:9a:c1:36:f3:0c:7d:41:d4:d6:8d:4e:ec:7e:50:fc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=498dbe781017e9771f07cb35dc220202f59371ee063a7e32560fb7b9113e1f22, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8b:50:64:66:8b:5b:18:f0:73:af:20:f6:2a:
1b:96:10:cd:ea:cd:4d:26:c2:68:59:1f:2b:20:55:
22:a2:a4:90:02:80:41:49:47:8e:b9:af:b4:5c:ba:
0c:8b:0d:cd:22:cb:1e:fa:40:08:8e:19:da:63:0f:
30:ff:20:47:bb:4a:4a:b1:c9:50:5e:8d:8e:28:cb:
00:0c:6b:08:18:14:32:70:e3:e8:f0:e3:8b:5a:71:
a5:f2:4d:60:8b:ad:59:7d:da:df:0f:b3:e2:ca:b0:
30:22:1c:b2:cb:ec:64:ad:09:22:56:e4:43:99:54:
e4:ee:f4:c4:26:dc:a3:06:fb:82:43:f1:16:ff:08:
3a:9d:97:10:7e:38:a2:99:ef:3d:f5:85:2e:68:ed:
ed:2f:40:4c:4e:84:78:da:be:aa:3e:f6:9e:56:e5:
15:08:58:48:3a:b3:64:37:c7:a9:de:6b:ea:e0:0e:
99:b3:de:c9:5c:53:cb:01:b8:db:c1:49:42:5e:5a:
91:06:0a:53:c9:bf:da:73:b9:85:fd:61:3d:27:f9:
a6:75:86:07:5e:05:50:29:0b:ee:41:e1:db:20:84:
75:c6:50:12:f1:6b:fc:0d:11:72:f2:35:83:a7:e7:
3d:d9:ff:78:85:02:f4:09:93:23:0f:39:3b:15:43:
97:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:80:28:5A:18:46:AD:08:68:FA:0E:FB:81:94:6A:7B:BF:FD:50:B5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3cf988cf-8d6d-464f-9722-31872a6594e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:a040::/46
Signature Algorithm: sha256WithRSAEncryption
73:18:21:95:73:30:6b:03:45:fe:4f:dd:63:d4:d9:6c:4c:a7:
59:bf:96:00:3b:59:a4:9a:e6:60:92:f6:ae:4c:d0:50:0f:4e:
59:64:70:b9:ad:15:27:3e:fe:52:47:9c:e2:db:21:de:37:0d:
ee:fc:bf:25:e5:7f:c3:75:75:22:e8:b1:f3:50:8a:0e:7d:41:
5b:80:e1:9f:ad:df:de:93:ec:b8:af:91:76:a5:15:2a:d1:2b:
e7:81:24:6b:27:32:da:8c:61:82:61:dd:47:c7:dc:57:69:b6:
79:b5:e8:ba:1f:5b:57:9c:d1:27:e6:88:31:b0:63:27:2b:89:
c5:18:56:17:53:33:ca:9c:d0:22:3b:01:f1:8c:3b:8f:d3:78:
a4:52:87:a8:70:6b:7f:bd:38:d9:48:2f:f9:ff:2b:96:a5:74:
de:97:f5:87:cf:0a:a6:11:ef:d1:7d:68:1c:08:21:56:e1:61:
0c:bc:cd:17:34:6b:f0:a1:e3:f3:de:f1:d4:6b:f0:94:7a:a1:
19:55:6f:83:0e:20:5e:69:3b:17:ae:ea:1c:de:9a:ce:00:fa:
79:1c:48:3f:b0:f3:4c:b4:d0:94:fe:3b:88:3b:82:29:6c:16:
15:0a:74:cd:c3:c1:81:89:86:eb:af:57:4c:dc:de:71:b1:f5:
a7:01:f4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:08:18 2025 by rpki-client