Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b7dff2f0-9a3a-4d71-b407-1a4e8f48c38f.roa
File: b7dff2f0-9a3a-4d71-b407-1a4e8f48c38f.roa (raw, json)
Hash identifier: GmbspD6t4liam9obBNC7jqWEaRjG3Be/ACOrtOsM0xQ=
Subject key identifier: 07:27:33:AD:62:C0:74:13:82:AF:76:92:30:32:94:C1:37:73:A2:C6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5BAD556A95B1EFBF0567DB31F8C0C60186DEC9A6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b7dff2f0-9a3a-4d71-b407-1a4e8f48c38f.roa
Signing time: Wed 05 Feb 2025 00:00:00 +0000
ROA not before: Wed 05 Feb 2025 00:00:00 +0000
ROA not after: Wed 12 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:2000::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ad:55:6a:95:b1:ef:bf:05:67:db:31:f8:c0:c6:01:86:de:c9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 5 00:00:00 2025 GMT
Not After : Mar 12 23:59:59 2025 GMT
Subject: serialNumber=c909e1fe1417ec3df2bc51c094ff81ce75a400cfe0ccf33dfb4df5e93228294a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:23:c6:e8:0c:9d:ac:4b:56:15:8c:5d:8b:08:
45:bf:e6:74:70:a8:af:9f:4c:16:45:05:01:6e:ab:
3c:13:eb:32:89:9a:07:f3:d6:c0:3f:c1:4b:2c:cc:
a5:d9:89:3f:ac:7e:ad:9f:82:ec:85:a3:20:cf:da:
b5:10:d8:70:ad:aa:7e:9e:6a:38:bc:55:b6:a1:71:
a6:86:27:04:68:28:bd:50:f8:66:8e:1b:37:38:17:
99:a9:fd:b2:c0:62:bf:97:05:2e:6a:ae:7c:47:91:
4e:c7:61:9b:69:5e:a4:d6:97:cb:df:a1:f3:10:9d:
22:ec:1e:ba:5f:67:7f:20:81:d2:a8:d4:ef:2e:4c:
26:49:40:45:4f:f1:d1:71:88:cc:55:a5:16:d7:4d:
8b:99:0f:ad:25:b6:07:0a:ad:b2:9a:cd:83:79:ed:
6a:74:32:6d:74:50:68:6b:7c:69:58:f8:c1:de:e3:
3f:de:36:15:b3:e7:c9:fc:2a:b6:cb:fa:5c:08:df:
f1:a9:59:c1:e3:72:c1:09:8e:1c:e3:b5:6d:5f:a0:
7f:04:27:12:e8:82:e2:d2:25:46:73:33:22:d4:6a:
0d:d2:9f:58:4d:32:ea:c8:a4:ce:60:2f:ce:0d:64:
22:ca:ec:e6:68:f1:4f:ef:90:17:ed:35:1d:5a:2e:
d8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:27:33:AD:62:C0:74:13:82:AF:76:92:30:32:94:C1:37:73:A2:C6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b7dff2f0-9a3a-4d71-b407-1a4e8f48c38f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:2000::/40
Signature Algorithm: sha256WithRSAEncryption
9c:f3:6f:56:01:71:36:f4:15:f1:b0:ed:1f:c1:15:74:49:cd:
e0:2e:53:53:de:f8:81:0d:e5:3c:54:66:72:cd:dd:b9:58:4b:
2f:e5:22:a5:46:46:e8:67:eb:ba:29:58:87:45:7f:27:86:32:
0a:fa:8f:3b:07:b8:92:dd:21:6b:6f:be:05:78:41:5a:13:b7:
31:09:d5:c0:a5:06:b2:27:8a:5a:1f:15:be:6b:01:19:e6:ec:
fc:c8:42:de:13:e3:c6:fa:df:cf:be:33:c4:70:0c:7d:83:02:
18:ec:52:68:67:d4:54:60:f6:30:7b:53:12:45:18:c2:e2:aa:
a8:bf:a0:c8:88:02:f8:a8:d7:ae:d6:35:2c:0c:24:71:24:4f:
1f:71:64:9b:0f:2e:b4:83:c4:cb:95:e0:59:da:17:11:94:0e:
2b:9d:52:c5:f5:ff:6d:dc:cd:c4:17:82:25:0b:4c:ad:00:db:
37:e4:e1:8f:e5:b7:57:7c:62:99:fd:97:c4:b4:52:aa:e0:8b:
10:14:b5:b8:9c:4e:f1:e0:cb:8e:c1:b3:13:0f:28:f0:f8:67:
c7:a1:b5:4e:7c:ec:e6:1b:20:d8:b7:67:c2:a0:f3:7b:74:92:
4b:67:de:a9:df:2c:7a:95:43:0d:7b:1b:c8:06:06:5e:ba:7b:
55:10:ed:9a
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUW61VapWx778FZ9sx+MDGAYbeyaYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAyMDUwMDAwMDBaFw0yNTAzMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQGM5MDllMWZlMTQxN2VjM2RmMmJjNTFjMDk0ZmY4MWNlNzVhNDAwY2ZlMGNj
ZjMzZGZiNGRmNWU5MzIyODI5NGExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAI8jxugMnaxLVhWMXYsIRb/mdHCor59MFkUFAW6rPBPrMomaB/PWwD/BSyzM
pdmJP6x+rZ+C7IWjIM/atRDYcK2qfp5qOLxVtqFxpoYnBGgovVD4Zo4bNzgXman9
ssBiv5cFLmqufEeRTsdhm2lepNaXy9+h8xCdIuweul9nfyCB0qjU7y5MJklARU/x
0XGIzFWlFtdNi5kPrSW2BwqtsprNg3ntanQybXRQaGt8aVj4wd7jP942FbPnyfwq
tsv6XAjf8alZweNywQmOHOO1bV+gfwQnEuiC4tIlRnMzItRqDdKfWE0y6sikzmAv
zg1kIsrs5mjxT++QF+01HVou2MECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQHJzOt
YsB0E4KvdpIwMpTBN3OixjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjdkZmYyZjAtOWEzYS00ZDcxLWI0MDctMWE0ZThmNDhjMzhmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DIg
MA0GCSqGSIb3DQEBCwUAA4IBAQCc829WAXE29BXxsO0fwRV0Sc3gLlNT3viBDeU8
VGZyzd25WEsv5SKlRkboZ+u6KViHRX8nhjIK+o87B7iS3SFrb74FeEFaE7cxCdXA
pQayJ4paHxW+awEZ5uz8yELeE+PG+t/PvjPEcAx9gwIY7FJoZ9RUYPYwe1MSRRjC
4qqov6DIiAL4qNeu1jUsDCRxJE8fcWSbDy60g8TLleBZ2hcRlA4rnVLF9f9t3M3E
F4IlC0ytANs35OGP5bdXfGKZ/ZfEtFKq4IsQFLW4nE7x4MuOwbMTDyjw+GfHobVO
fOzmGyDYt2fCoPN7dJJLZ96p3yx6lUMNexvIBgZeuntVEO2a
-----END CERTIFICATE-----
Generated at Thu Apr 17 05:06:17 2025 by rpki-client