Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70cd2bba-880a-4bc9-8654-d2b564e3cb3b.roa
File: 70cd2bba-880a-4bc9-8654-d2b564e3cb3b.roa (raw, json)
Hash identifier: 7Acb+5351rpVSP78SDHKWxNDh15yb6UZ6ilXAAEGSLw=
Subject key identifier: 04:FD:0D:F5:1D:FD:2E:4D:28:8B:F0:A3:33:76:47:0F:C2:B1:02:AF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 25A99042E809FB0E3EDEF11D49F11E7348391DBC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70cd2bba-880a-4bc9-8654-d2b564e3cb3b.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:a9:90:42:e8:09:fb:0e:3e:de:f1:1d:49:f1:1e:73:48:39:1d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=972dfae6f4da5d186e41682ae5a0aaa6dd85793aa8f6311e3a029ce8680b5dcf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:3d:c6:6d:cd:22:16:47:0e:9a:6f:54:74:
94:bf:d1:aa:6d:a5:a2:30:f7:64:0c:6f:b2:d5:88:
7f:66:b3:e0:22:f0:f0:90:3c:10:1c:c7:e0:cd:71:
d2:be:25:fe:df:35:cc:46:cd:bb:c1:50:c2:c3:35:
d8:7a:29:92:4f:c2:fb:35:95:bf:ef:cd:67:32:14:
30:d5:e8:cd:8d:4c:db:4a:40:d7:4c:9b:72:2f:a1:
30:2a:a9:e0:fa:86:bc:03:24:91:87:62:d0:aa:45:
a7:9d:dd:fd:ef:4d:f6:08:87:12:82:dc:85:3e:ae:
c4:7d:8e:99:19:e6:eb:fa:eb:3a:0c:1e:73:c3:aa:
da:8d:af:0a:87:1b:57:43:29:cd:e3:cf:da:9a:4d:
a7:00:d1:b3:10:bd:fd:f4:2b:d7:de:f1:a1:60:b3:
e4:a4:6a:08:fd:90:8e:8b:b1:da:a0:3b:60:5f:0f:
b6:02:f6:87:ee:5a:48:e4:7e:08:52:8c:28:28:f5:
47:9f:50:06:b5:06:eb:d6:09:3c:cf:62:cd:02:f8:
7d:da:79:c8:d1:4f:40:96:99:e6:ab:6f:c1:02:8e:
4f:1d:56:0e:95:5f:4e:2a:2f:24:b4:c9:13:20:f6:
2d:bd:9a:03:2b:73:28:74:b7:25:0c:a2:af:e1:4a:
2d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FD:0D:F5:1D:FD:2E:4D:28:8B:F0:A3:33:76:47:0F:C2:B1:02:AF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70cd2bba-880a-4bc9-8654-d2b564e3cb3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8000::/40
Signature Algorithm: sha256WithRSAEncryption
04:81:fc:a7:5a:02:74:3c:23:8a:fe:95:20:7c:18:4e:84:cd:
39:bb:e2:56:56:f0:a2:63:4f:2d:dc:61:db:4f:65:fa:85:64:
ac:e4:49:d4:2b:dd:6b:01:92:c7:52:c9:c6:e7:d5:2d:06:82:
b3:a0:bd:d6:d4:db:29:d4:20:2e:cc:98:6a:51:e1:3d:06:72:
d7:3b:e4:62:eb:f3:06:df:52:e3:fa:d9:58:7d:b7:52:10:f4:
8f:29:f7:51:f8:95:ea:65:7a:08:02:bc:39:7f:b6:a9:af:81:
10:79:e9:d7:a2:77:c1:e5:c0:f3:91:c5:2f:73:29:b0:50:61:
c5:ea:8a:a0:f3:0e:da:ad:85:e0:39:19:f2:20:d1:6c:2e:c5:
bc:c4:21:cd:8d:77:6f:ef:72:36:24:a6:17:f3:d6:30:9c:3b:
9c:9f:c0:95:1e:54:11:7d:7f:2f:87:fb:f3:c5:5c:b4:2a:5c:
3d:5f:7f:a1:76:16:10:18:46:bd:01:04:c9:bf:62:bf:45:af:
83:5f:0c:fe:35:07:96:fc:22:9a:19:7a:ac:57:aa:0c:14:c9:
e9:ab:40:f6:77:c2:aa:3b:5a:7b:91:6f:d0:7a:8d:e8:1d:d9:
fa:5b:d6:e0:fa:58:d1:2d:b5:2b:7f:00:fb:8d:7a:be:0f:79:
42:a9:00:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:10:54 2025 by rpki-client