Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6240b164-fb74-40e7-b2c0-dc41d727815d.roa
File: 6240b164-fb74-40e7-b2c0-dc41d727815d.roa (raw, json)
Hash identifier: qXcuoKuXqiFxYbF61UF7ljZYPAUOHmHyf0CWZDNJXn8=
Subject key identifier: 85:93:2D:1E:32:B9:92:96:73:61:83:A9:CB:61:4C:2A:47:9D:83:46
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5DDD8B42E33969D4A61324465864C7BBBABAC209
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6240b164-fb74-40e7-b2c0-dc41d727815d.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:5040::/46 maxlen: 46
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:dd:8b:42:e3:39:69:d4:a6:13:24:46:58:64:c7:bb:ba:ba:c2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=0dadaf49ceae7764c3fa73a74ea533355ae98890d7dfb78066bd90cea437b3b2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:35:e5:bc:84:dc:2c:0c:77:4b:a2:95:54:5c:
bb:b7:cb:d2:cf:1c:02:a5:e2:52:af:21:4c:d7:69:
28:61:af:3d:12:dd:50:20:ca:60:c3:43:18:48:7f:
20:83:e5:ed:a8:41:23:6d:22:f2:67:8b:8d:f4:1d:
6c:bb:1a:90:4c:63:51:20:e8:32:19:2d:a1:33:8d:
3f:2d:87:41:da:4e:01:73:96:a5:de:29:ab:83:b5:
ea:52:3f:47:de:88:f3:c3:85:0a:6d:1c:14:9a:58:
b9:a8:4f:7b:e2:06:f3:2a:75:87:5b:93:69:6e:28:
cd:2e:b7:fc:e4:a2:1a:76:d4:5d:45:52:63:1d:df:
81:f0:56:49:5e:ca:ca:8b:ff:39:83:f9:19:29:8c:
1f:ec:84:46:1a:8d:1b:8f:fa:4d:8d:81:d1:84:3a:
c1:93:a7:94:c8:71:1d:db:63:b4:5a:75:20:c9:f7:
42:f1:78:18:96:69:8c:aa:5a:30:7f:06:aa:91:19:
29:2d:bc:cd:a3:33:b5:e3:03:c0:ee:4e:77:6a:69:
08:7b:fc:29:72:fa:9b:1c:3c:b0:ec:a1:2c:d6:fd:
65:30:45:7f:77:67:3a:97:a7:eb:df:6e:e0:51:93:
ea:70:95:db:26:38:c6:42:a1:da:9e:b7:61:dd:ae:
ea:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:93:2D:1E:32:B9:92:96:73:61:83:A9:CB:61:4C:2A:47:9D:83:46
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6240b164-fb74-40e7-b2c0-dc41d727815d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:5040::/46
Signature Algorithm: sha256WithRSAEncryption
99:ee:6e:df:a9:d8:80:f4:c1:ed:8c:a5:a0:7f:9a:85:0b:a6:
e5:d1:04:c0:a7:fb:86:82:cf:87:32:62:b0:2f:15:44:f7:4e:
8c:5d:6d:f2:17:99:16:52:e5:e8:a5:3e:24:b2:35:c3:d0:2f:
26:25:5f:86:7d:a9:98:7b:ad:f0:19:b0:c5:82:17:66:8b:2e:
99:4b:a8:ac:19:2a:2a:49:34:56:0b:84:8e:66:d3:3c:e8:af:
4d:58:f2:72:08:7a:4f:83:c7:b4:c1:64:eb:07:62:82:63:ff:
a7:94:71:fa:2d:20:2e:29:76:7e:d0:5f:68:9e:52:7f:dd:86:
73:0e:af:88:e1:d4:97:4a:41:e7:80:f0:4d:f7:9f:cf:25:04:
e7:75:20:49:31:eb:22:aa:0d:ea:93:9e:47:f9:32:dd:bd:16:
c8:96:fe:70:7d:bc:09:75:03:1e:0f:78:ef:1f:b8:39:7e:11:
e4:3d:a0:8c:53:0a:7d:8b:fc:57:15:4c:de:8d:cd:b0:8c:b2:
f4:e3:d0:2c:5c:07:fb:74:c6:77:ad:11:ee:3f:25:9c:75:cf:
dc:81:1a:1f:70:5f:8b:e1:e2:cb:7b:28:26:fb:9f:c4:4f:df:
7b:70:2d:f0:35:d0:95:c8:d0:f3:1e:f5:25:94:be:d0:78:40:
04:22:2d:c1
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUXd2LQuM5adSmEyRGWGTHu7q6wgkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDBkYWRhZjQ5Y2VhZTc3NjRjM2ZhNzNhNzRlYTUzMzM1NWFlOTg4OTBkN2Rm
Yjc4MDY2YmQ5MGNlYTQzN2IzYjIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMs15byE3CwMd0uilVRcu7fL0s8cAqXiUq8hTNdpKGGvPRLdUCDKYMNDGEh/
IIPl7ahBI20i8meLjfQdbLsakExjUSDoMhktoTONPy2HQdpOAXOWpd4pq4O16lI/
R96I88OFCm0cFJpYuahPe+IG8yp1h1uTaW4ozS63/OSiGnbUXUVSYx3fgfBWSV7K
yov/OYP5GSmMH+yERhqNG4/6TY2B0YQ6wZOnlMhxHdtjtFp1IMn3QvF4GJZpjKpa
MH8GqpEZKS28zaMzteMDwO5Od2ppCHv8KXL6mxw8sOyhLNb9ZTBFf3dnOpen699u
4FGT6nCV2yY4xkKh2p63Yd2u6psCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSFky0e
MrmSlnNhg6nLYUwqR52DRjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NjI0MGIxNjQtZmI3NC00MGU3LWIyYzAtZGM0MWQ3Mjc4MTVkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0DBQ
QDANBgkqhkiG9w0BAQsFAAOCAQEAme5u36nYgPTB7YyloH+ahQum5dEEwKf7hoLP
hzJisC8VRPdOjF1t8heZFlLl6KU+JLI1w9AvJiVfhn2pmHut8BmwxYIXZosumUuo
rBkqKkk0VguEjmbTPOivTVjycgh6T4PHtMFk6wdigmP/p5Rx+i0gLil2ftBfaJ5S
f92Gcw6viOHUl0pB54DwTfefzyUE53UgSTHrIqoN6pOeR/ky3b0WyJb+cH28CXUD
Hg947x+4OX4R5D2gjFMKfYv8VxVM3o3NsIyy9OPQLFwH+3TGd60R7j8lnHXP3IEa
H3Bfi+Hiy3soJvufxE/fe3At8DXQlcjQ8x71JZS+0HhABCItwQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 05:10:55 2025 by rpki-client