Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/821ae9ba-4a52-4ed5-baaa-7ee5c4e9d012.roa
File: 821ae9ba-4a52-4ed5-baaa-7ee5c4e9d012.roa (raw, json)
Hash identifier: 5rTv7ZtMOkiRZrg2qBS8ZvjKQKOCQruO5va5k3CLWt0=
Subject key identifier: E8:DA:1F:E1:7B:B7:46:6C:0A:CA:3F:A5:CA:29:20:E0:92:FF:94:91
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5F6C07DF3BB478F8A833D5F11EBCE3B0CB84A940
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/821ae9ba-4a52-4ed5-baaa-7ee5c4e9d012.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:c000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:6c:07:df:3b:b4:78:f8:a8:33:d5:f1:1e:bc:e3:b0:cb:84:a9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=5c0971aede76cfa0d65ad18115cc6983973eea574d59b5b9edaba61ec06b6909, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:06:c5:35:b6:54:32:82:3f:14:45:01:23:15:
c6:ee:07:07:46:53:3b:56:23:60:53:6c:86:69:83:
5c:9d:7c:af:22:5c:e1:08:e4:95:14:c2:b8:64:9c:
48:e6:ae:80:35:d8:7a:80:9c:4c:54:84:83:3c:31:
3d:e8:7b:e8:6c:9c:cc:b7:21:f7:8e:30:b6:ff:10:
77:a4:82:82:f0:ff:17:95:b1:52:74:1e:79:ff:ad:
2a:b4:ce:9c:63:10:25:1b:60:90:65:8d:2e:4a:82:
6e:ac:a7:61:74:72:02:3d:d2:cc:6d:13:95:5d:b5:
88:42:f1:e1:58:cd:f1:78:31:d1:c2:16:d2:20:ab:
4c:40:cf:e9:c8:4c:f9:a3:40:2a:a3:73:72:4c:5b:
c4:3b:dc:39:59:80:f3:9a:c8:db:55:01:5b:8a:95:
25:cc:9b:ce:89:a8:b9:17:e2:42:a2:ec:04:85:a7:
f2:24:01:da:6f:0c:48:ae:86:a2:93:04:63:4b:94:
0d:d6:e9:14:41:7f:0c:c6:a9:15:4c:e1:3b:83:b1:
2a:33:9c:bf:4e:dd:ec:36:35:99:4b:4a:35:c5:16:
e6:3e:73:fe:c4:d2:7e:fd:6d:b0:49:ac:db:52:46:
d3:d3:55:5d:c9:da:97:8d:ed:6b:fe:3a:d7:45:18:
50:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DA:1F:E1:7B:B7:46:6C:0A:CA:3F:A5:CA:29:20:E0:92:FF:94:91
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/821ae9ba-4a52-4ed5-baaa-7ee5c4e9d012.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:c000::/40
Signature Algorithm: sha256WithRSAEncryption
22:5c:9f:d6:1a:de:07:51:f7:91:74:59:e9:b4:78:1f:e0:81:
08:cc:f8:43:e7:c3:24:09:b8:e7:f1:1f:ef:4f:83:58:39:ba:
da:94:e4:10:5c:db:87:51:a1:06:6a:29:6e:e8:71:b7:b0:80:
d0:24:0b:87:2c:d8:78:46:ea:a1:2e:63:26:ec:50:45:d1:6c:
96:46:3b:c7:14:a5:6e:e3:23:27:36:17:f6:5d:c9:f2:be:84:
47:41:09:1f:8e:a3:91:ac:ad:d6:57:d0:cd:e4:03:c0:42:64:
b2:40:08:be:d9:d9:d9:bc:bb:3d:43:e5:88:a0:7d:55:ed:53:
42:62:f1:1c:41:c7:a3:c4:87:57:52:d4:43:5b:4d:83:e6:5f:
18:52:e1:17:1e:83:fd:f0:f3:03:24:d2:1b:42:18:ac:c4:6f:
e1:f7:94:4e:7e:8b:65:98:30:4f:4c:0e:12:23:df:71:61:17:
8b:06:fb:c9:5e:ad:a1:b9:1f:ce:7c:dc:3d:ce:8e:ac:33:c5:
7f:31:3d:c5:91:23:b0:2a:57:c4:90:25:05:97:31:7d:22:c1:
f6:d8:76:f5:7d:c5:3e:ed:50:98:6b:af:bb:81:8f:d0:4c:0e:
06:3a:34:ec:3e:ec:9f:d2:54:2c:66:cc:05:d9:61:d1:67:e1:
08:eb:66:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:10:54 2025 by rpki-client