Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d2cb3d7-ba4b-4b69-8603-f7aa5683c7ba.roa
File: 9d2cb3d7-ba4b-4b69-8603-f7aa5683c7ba.roa (raw, json)
Hash identifier: af0f0HbmRU50lU+OfATjrX8x1sprEn0xgXKKXzk2sSQ=
Subject key identifier: 60:EF:49:D9:F9:34:56:AD:D0:7A:C2:6A:F9:40:34:B5:81:8D:6A:6D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0CB852BA486D295F7DFC7A3336153044CC4C0510
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d2cb3d7-ba4b-4b69-8603-f7aa5683c7ba.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:b8:52:ba:48:6d:29:5f:7d:fc:7a:33:36:15:30:44:cc:4c:05:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: serialNumber=fff3313e53df425a3c0a5bdc31f70361483b77e5bce98f10da6da19a04d6ad87, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:81:35:1f:bc:d6:86:fc:ac:c7:8d:ad:a4:71:
f2:02:e6:14:26:1d:6d:ec:07:3d:9e:a9:cc:37:0c:
d5:3c:c8:3e:80:91:99:7d:48:ab:8d:cd:ed:a7:8e:
58:e5:74:bb:e9:3a:3c:92:ad:5a:91:61:77:c5:df:
a3:d0:36:05:24:4c:cb:a6:c1:3f:f3:35:60:67:c2:
f0:93:46:02:6e:4a:21:92:e3:22:1d:53:6c:d7:e6:
2f:91:f1:26:dc:9b:56:6c:a3:75:3a:9a:39:61:6f:
1a:12:46:a3:e4:09:c5:68:5f:74:aa:1f:8b:df:ef:
3d:a8:39:82:2d:8c:8d:01:d2:f6:68:cf:f2:4f:98:
20:55:80:22:c8:77:ec:b4:47:4b:61:45:b3:fd:13:
92:a9:38:cc:9e:39:d5:f3:1c:7d:2e:2b:81:7d:b9:
0b:0f:21:01:1f:e2:58:58:1c:41:23:0a:18:c7:15:
e8:13:f9:8e:ad:dc:78:d7:df:d2:f8:5d:ca:0c:fb:
75:a1:9f:10:bb:d8:03:19:07:66:d4:a8:96:88:8d:
3a:d0:c3:71:3a:64:ec:e9:99:7a:ef:72:45:dd:bd:
0b:e0:aa:c4:c5:15:ef:73:05:f6:97:ac:93:c4:bc:
cb:28:e5:1f:9e:4a:0b:99:44:c3:21:70:d7:2c:10:
96:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EF:49:D9:F9:34:56:AD:D0:7A:C2:6A:F9:40:34:B5:81:8D:6A:6D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d2cb3d7-ba4b-4b69-8603-f7aa5683c7ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.64.0/18
Signature Algorithm: sha256WithRSAEncryption
89:29:02:c9:c5:61:a2:af:27:59:85:2f:ef:2e:4d:a7:32:94:
23:36:1c:11:4d:75:0a:bd:ad:a5:f3:e1:be:1a:71:3f:22:fa:
4e:16:e2:59:95:23:24:88:7c:ee:2f:3e:31:b9:13:c2:f5:00:
65:98:9e:61:37:79:da:fb:02:69:01:02:45:56:2c:ba:fe:4d:
0d:25:95:bb:c5:21:6d:fd:11:43:ab:8b:41:2a:fb:a2:24:9b:
ae:c8:f3:1e:d2:8c:99:23:18:c4:55:bc:95:e7:f6:75:a9:2a:
9f:bb:a8:92:fc:c0:52:f9:c6:45:69:33:1b:5b:62:4c:56:68:
50:02:af:b8:34:84:bf:05:ce:34:e7:d5:42:9d:0c:01:3d:0a:
de:7b:c7:cc:e0:ea:82:ab:d0:ff:7f:f4:c2:2f:64:31:bc:7a:
93:02:2b:f0:06:2d:68:5d:05:24:f3:33:0f:e7:94:49:b4:c3:
2e:8c:3e:c3:1c:42:99:a0:a9:23:c9:d8:ab:18:56:c1:03:22:
3a:05:55:53:40:02:97:a2:71:f5:74:2e:b4:d6:ea:f7:b8:f0:
00:16:0e:1a:29:c0:9f:8f:b6:28:bc:b0:2e:27:06:47:2d:6a:
7d:ba:a7:3e:d6:55:f5:f8:95:6d:bd:26:df:e0:3a:30:1b:44:
f2:63:e2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:06:20 2025 by rpki-client