Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a1ec6222-d57b-4ea3-9619-daea87d99ee3.roa
File: a1ec6222-d57b-4ea3-9619-daea87d99ee3.roa (raw, json)
Hash identifier: SzkdunvDS4vyEejCAEVfi250tB/jodyNHFhLHr7jTSo=
Subject key identifier: 43:F8:36:25:0A:7C:CB:2B:AF:F8:B7:F5:47:F9:98:F2:CD:A8:50:2C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 59BB12119381445A873C8FFB79A9601419F0546B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a1ec6222-d57b-4ea3-9619-daea87d99ee3.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d040:9000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:bb:12:11:93:81:44:5a:87:3c:8f:fb:79:a9:60:14:19:f0:54:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=1dd91a0f1294734eb0159c5e14ebb3123d088b04a594e65f70030a830e867e78, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:52:5a:b0:dd:5e:8b:01:b0:fe:df:8d:55:15:
33:72:4e:d6:be:ab:fd:0b:c7:ef:d5:13:06:56:da:
07:da:f5:92:67:49:9e:00:82:f0:17:e8:bc:36:cb:
fd:38:70:b4:35:2c:44:49:e6:17:a7:5c:13:01:eb:
01:1f:fd:95:2e:e4:85:a5:9f:e9:b6:16:68:82:dd:
19:2c:fd:28:f5:8b:d4:b9:62:7a:58:6f:d6:42:16:
21:88:20:63:9e:b6:34:b7:55:5c:29:e1:53:bc:fd:
16:f5:ec:76:2d:dd:79:9a:99:e6:c9:55:05:32:38:
08:74:a5:fd:e3:6f:5a:9f:f5:68:bf:c6:d6:64:37:
87:fc:cc:30:ca:4f:e8:9f:89:8a:23:08:f4:b5:27:
af:50:36:18:e3:aa:ce:39:fe:19:51:be:75:4e:ca:
c6:34:e6:88:26:6c:c0:68:75:fc:45:4c:66:21:d3:
70:f5:8f:1a:81:a7:c7:01:28:7c:f3:b6:c4:bb:a6:
8a:35:de:b3:47:d3:03:86:3e:98:4e:cc:b3:90:8c:
44:a5:46:d8:f4:2b:cb:85:01:f2:9e:bd:cc:52:5d:
57:05:b5:06:45:b3:6f:13:9b:5e:e3:17:fa:3a:f2:
0f:66:c5:5a:57:a1:78:a1:d4:d3:47:75:d5:37:a5:
c6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F8:36:25:0A:7C:CB:2B:AF:F8:B7:F5:47:F9:98:F2:CD:A8:50:2C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a1ec6222-d57b-4ea3-9619-daea87d99ee3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d040:9000::/40
Signature Algorithm: sha256WithRSAEncryption
46:68:cc:ce:53:f8:bf:71:87:fd:a2:9d:79:36:70:11:37:e9:
6a:ae:13:1d:70:b3:6a:e0:bf:c3:60:24:9d:0c:01:1d:60:38:
1f:1a:08:93:93:14:44:51:9d:97:46:16:80:61:db:49:d5:93:
eb:f8:0c:09:8a:62:eb:63:2e:96:02:01:1c:ac:71:f7:3f:4c:
bc:0d:f3:6e:a3:de:1a:55:d9:0d:c6:b3:55:42:87:9d:37:1f:
9a:d1:22:10:0c:a5:aa:67:fc:56:62:c9:b7:4e:c0:cb:31:85:
3b:36:ba:2f:75:45:82:f3:4a:47:9d:d3:f5:a6:ea:11:72:ba:
a1:a3:d8:08:36:e7:03:af:81:97:30:90:60:86:94:57:f2:6f:
b4:73:27:7c:b1:e3:03:17:12:24:d7:b5:d2:36:3a:53:c1:cb:
2c:2a:58:8c:ba:f9:2d:50:43:b7:87:7b:99:92:34:cc:df:65:
48:69:cc:29:d3:c2:eb:37:40:fe:04:d7:d3:d0:17:08:3f:86:
c0:f1:7e:d9:57:f1:26:02:a2:d5:f9:e8:22:9c:a7:d6:2e:7f:
0c:29:c5:72:7b:bd:ae:31:71:d7:55:d3:a5:6f:58:d8:12:58:
d6:99:23:4e:d6:98:fb:ff:c7:35:11:30:47:cf:7e:2a:a0:d2:
3b:62:d2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:07:21 2025 by rpki-client