Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/645cd21e-8605-428c-a809-be8a73eccafb.roa
File: 645cd21e-8605-428c-a809-be8a73eccafb.roa (raw, json)
Hash identifier: gf7Ow2n2Aw14Om9Q7jUI0op4XIwTfnjmPoXONW8ZR1g=
Subject key identifier: 5C:F0:98:94:CD:C7:0F:BE:6F:F9:B6:3C:63:B3:96:08:2F:98:85:40
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5D18978B9B8329465050EDD2C0C6C42F53D7DD20
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/645cd21e-8605-428c-a809-be8a73eccafb.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:5000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:18:97:8b:9b:83:29:46:50:50:ed:d2:c0:c6:c4:2f:53:d7:dd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=85815191aa6e0e106666576293b87553428d950086f5a6a9319ec8a9cddf74f1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0b:db:9d:5f:9a:c3:2e:d3:45:25:f0:c5:e5:
67:69:c2:93:1a:61:fb:29:49:a7:19:9a:6e:62:f3:
b8:36:5b:d2:be:1a:10:9f:7b:8d:eb:e7:da:db:96:
0b:6c:09:70:07:e8:98:44:d8:78:05:6a:e6:2a:8b:
cf:cb:00:45:19:ca:ca:8e:a5:82:78:fd:8b:e6:74:
1d:ea:df:b9:36:01:6e:dc:fe:2f:34:27:09:2c:6f:
37:ae:5f:68:64:20:56:6d:6c:ef:98:44:93:6a:93:
fd:a3:0e:70:dd:8f:f4:3e:ce:6c:b4:9a:f3:1c:90:
05:23:06:0b:c3:5c:35:3d:09:2c:16:69:03:3f:7c:
07:bd:73:6a:ad:b8:38:dc:85:ac:37:92:5a:69:45:
74:21:52:56:f3:6c:03:d1:7f:89:2d:96:d7:f3:f9:
49:3c:e0:57:e6:6c:dc:72:b1:dc:69:ef:8f:e8:dc:
bc:68:d5:67:06:60:9a:c8:a2:e1:b5:25:d9:1b:cf:
70:80:5f:9a:66:92:24:39:cb:0d:e0:12:26:37:1c:
39:8a:aa:f1:98:db:d0:a2:55:0b:56:cb:53:a2:5a:
b2:45:34:7c:86:4e:e8:d2:a5:f9:c9:3b:b0:5c:0c:
50:2f:83:c5:1a:65:ad:b9:67:5c:be:94:b2:82:b0:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F0:98:94:CD:C7:0F:BE:6F:F9:B6:3C:63:B3:96:08:2F:98:85:40
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/645cd21e-8605-428c-a809-be8a73eccafb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:5000::/40
Signature Algorithm: sha256WithRSAEncryption
bc:88:38:42:b2:f0:db:61:1d:e7:a4:3f:ed:88:e4:7c:56:60:
0c:d7:6a:59:db:d9:e9:93:d1:a6:68:c1:44:32:3f:cb:cd:26:
e8:d0:d4:1a:e8:cf:55:44:e9:06:01:2d:80:d1:3f:ec:01:e7:
60:a4:f3:f5:a0:a1:e8:a5:35:77:fc:f3:5c:3a:7e:4e:df:4c:
16:91:75:d4:e0:a6:16:8e:32:9a:f2:d3:47:db:86:10:ad:74:
88:0f:8d:a7:ed:6e:41:96:21:bd:25:85:55:c6:d4:06:2b:84:
7b:95:1e:45:9d:d8:98:25:06:1b:d4:4c:08:a9:5f:4a:88:5d:
1a:36:a1:68:a9:31:1a:08:bf:41:ff:2f:e6:e3:e3:44:2f:f5:
99:83:bb:a4:6e:31:29:be:e0:a6:a7:d9:65:8a:ea:13:f7:96:
eb:89:8c:b2:ac:29:48:c6:1b:48:53:97:99:20:d5:3b:f2:41:
c2:ae:6d:c4:1e:64:22:ce:43:19:7e:e7:81:b9:a7:65:84:2a:
ce:b2:ee:c6:9c:67:20:16:64:b0:b3:bf:01:14:32:ce:49:f3:
42:09:6e:97:e5:89:35:85:7a:56:ec:03:fc:a8:63:d8:23:69:
b1:11:6f:f2:9c:f3:5a:4e:c6:b9:3e:a8:23:c1:b4:10:29:21:
f8:4f:3a:06
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUXRiXi5uDKUZQUO3SwMbEL1PX3SAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDcwMDAwMDBaFw0yNTAyMTEyMzU5NTlaMHoxSTBHBgNV
BAUTQDg1ODE1MTkxYWE2ZTBlMTA2NjY2NTc2MjkzYjg3NTUzNDI4ZDk1MDA4NmY1
YTZhOTMxOWVjOGE5Y2RkZjc0ZjExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANkL251fmsMu00Ul8MXlZ2nCkxph+ylJpxmabmLzuDZb0r4aEJ97jevn2tuW
C2wJcAfomETYeAVq5iqLz8sARRnKyo6lgnj9i+Z0HerfuTYBbtz+LzQnCSxvN65f
aGQgVm1s75hEk2qT/aMOcN2P9D7ObLSa8xyQBSMGC8NcNT0JLBZpAz98B71zaq24
ONyFrDeSWmlFdCFSVvNsA9F/iS2W1/P5STzgV+Zs3HKx3Gnvj+jcvGjVZwZgmsii
4bUl2RvPcIBfmmaSJDnLDeASJjccOYqq8Zjb0KJVC1bLU6JaskU0fIZO6NKl+ck7
sFwMUC+DxRplrblnXL6UsoKw2HsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRc8JiU
zccPvm/5tjxjs5YIL5iFQDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NjQ1Y2QyMWUtODYwNS00MjhjLWE4MDktYmU4YTczZWNjYWZiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DVQ
MA0GCSqGSIb3DQEBCwUAA4IBAQC8iDhCsvDbYR3npD/tiOR8VmAM12pZ29npk9Gm
aMFEMj/LzSbo0NQa6M9VROkGAS2A0T/sAedgpPP1oKHopTV3/PNcOn5O30wWkXXU
4KYWjjKa8tNH24YQrXSID42n7W5BliG9JYVVxtQGK4R7lR5FndiYJQYb1EwIqV9K
iF0aNqFoqTEaCL9B/y/m4+NEL/WZg7ukbjEpvuCmp9lliuoT95briYyyrClIxhtI
U5eZINU78kHCrm3EHmQizkMZfueBuadlhCrOsu7GnGcgFmSws78BFDLOSfNCCW6X
5Yk1hXpW7AP8qGPYI2mxEW/ynPNaTsa5PqgjwbQQKSH4TzoG
-----END CERTIFICATE-----
Generated at Thu Apr 17 05:07:18 2025 by rpki-client