Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a0c17c0d-1276-4be4-a55d-8ba2d3d9065f.roa
File: a0c17c0d-1276-4be4-a55d-8ba2d3d9065f.roa (raw, json)
Hash identifier: hrpG2JZSNAXRJnxTPN5RLQ4f/5LZNnpzv3tJ3tl/gS8=
Subject key identifier: 73:68:EE:78:EB:EB:D9:C3:E7:26:C1:B2:C7:64:DA:4B:EA:66:E9:64
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0EFCE0DB9497995F05923CD0B2C606F7DBAAEE41
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a0c17c0d-1276-4be4-a55d-8ba2d3d9065f.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d013::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:fc:e0:db:94:97:99:5f:05:92:3c:d0:b2:c6:06:f7:db:aa:ee:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=507b835fed215dc82e76b264897c8e8663d8aaf9af14d5755178df8b1092f8b4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ef:a4:b1:ba:e9:c8:d6:10:20:c6:93:55:a8:
66:7e:3c:16:76:46:de:51:51:29:a8:f7:ee:ce:6a:
b4:a4:a0:ba:af:fa:5d:1f:12:c9:45:5c:43:49:e2:
7c:e9:4b:6e:b6:29:fd:e7:87:d9:78:ae:ae:7e:77:
6c:15:9b:23:c1:75:f0:3b:58:82:b8:0d:6c:d8:c3:
eb:87:ec:ba:e3:17:db:2a:6e:16:5a:3e:1d:4a:e2:
79:be:08:d4:f6:97:fc:30:ab:0c:13:41:d2:21:33:
cc:46:23:a5:3c:94:e0:26:97:d1:39:e6:87:68:af:
87:e2:68:5b:a4:f2:a0:97:c4:82:73:e3:b7:cd:e2:
33:e9:fa:bf:d0:63:0e:cb:fd:17:de:4e:37:9f:39:
06:9f:e0:77:7d:25:5c:b1:61:d3:25:09:b1:3b:1f:
43:bd:ae:37:21:ce:e3:fe:94:c2:80:0a:cc:89:e2:
03:c2:92:4e:71:07:07:8f:81:7e:23:23:e5:6c:6b:
d5:b3:bc:a8:b4:2f:ef:d2:cb:94:28:d5:d9:ef:77:
ac:81:b1:7d:ea:87:be:e9:68:f1:50:e0:c2:41:bf:
87:b2:9d:7b:f0:17:e5:18:83:2a:d5:5c:d3:38:7e:
4f:07:98:bc:b0:8f:ed:2b:eb:ae:43:e6:a4:64:65:
e5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:68:EE:78:EB:EB:D9:C3:E7:26:C1:B2:C7:64:DA:4B:EA:66:E9:64
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a0c17c0d-1276-4be4-a55d-8ba2d3d9065f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d013::/36
Signature Algorithm: sha256WithRSAEncryption
41:2a:3b:de:f3:93:e6:a7:86:4b:22:d2:69:71:03:ba:6f:7e:
b0:66:d3:3b:12:41:c9:fa:af:52:e2:60:c5:96:73:73:d1:1f:
b5:1d:10:15:67:f1:9d:5e:99:a3:3c:d7:26:ea:e2:be:43:7a:
02:6a:62:f5:a6:c7:69:3b:55:16:b6:ad:42:46:a9:8f:a3:29:
db:60:45:c3:42:7d:6f:24:a0:b1:be:f6:94:24:eb:e6:8e:01:
6e:44:ba:e3:c3:b8:80:74:0d:0b:a2:9c:3e:71:69:19:79:6c:
ae:b4:cd:6d:db:71:be:1f:94:e0:31:68:b5:b0:4d:a0:87:97:
69:6f:23:e1:2b:20:b6:d9:c2:48:29:dc:c9:1b:ec:0b:5b:9c:
3d:c8:ec:01:5f:71:ea:bf:0f:23:2b:d3:d4:e3:16:99:16:ed:
b4:b0:30:a4:f7:60:3f:bc:93:76:55:cb:83:63:68:46:36:39:
51:73:ff:99:71:57:9a:1b:e8:af:9e:b3:c5:22:17:93:11:c2:
67:26:88:81:36:a8:b5:5d:12:1c:77:7c:18:ff:ed:51:27:64:
e8:12:42:48:24:b8:62:53:9e:6e:8b:7c:54:c5:88:6e:6b:a7:
42:92:8a:93:66:6a:14:2a:cc:ee:7c:b7:02:28:79:3f:c8:22:
5c:0f:7d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:06:20 2025 by rpki-client