Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bad26580-4404-437c-a347-5bcc76cfedaf.roa
File: bad26580-4404-437c-a347-5bcc76cfedaf.roa (raw, json)
Hash identifier: tgm1ImoEEXbzXRuT6iuUVd4MTtCeka6UFdpbZ3ugyAE=
Subject key identifier: FF:3A:BF:E0:EB:36:1F:E3:D5:F7:46:43:2C:88:7C:B8:AD:45:C7:FC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 134BF41E9AA8DE17637F50801FD9E92320EB36D6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bad26580-4404-437c-a347-5bcc76cfedaf.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:9000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:4b:f4:1e:9a:a8:de:17:63:7f:50:80:1f:d9:e9:23:20:eb:36:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: serialNumber=deffd37cecf476c21ac787931cb5c95fa0abbdba38b8a94401f683a319618b4f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:4c:d9:ca:de:ca:5a:5b:c3:ed:5b:e7:cd:
0d:59:8e:70:fc:71:a5:e4:2a:99:ae:31:be:bd:06:
b3:10:52:ad:90:9d:0a:51:60:48:2d:cc:d0:c8:1c:
28:19:d5:38:45:85:2f:17:30:b8:7c:15:54:3f:3d:
9e:32:9f:e0:47:f0:29:4f:e1:47:cb:3e:cd:0c:93:
61:e8:75:ea:8b:46:3a:7e:27:af:92:d1:25:81:03:
f9:7b:3d:3d:bf:d1:db:96:2d:6f:06:e2:40:2d:22:
15:4f:ff:81:71:0b:ec:5d:5d:fc:7d:69:e4:f0:bc:
20:99:56:f4:23:09:0a:54:d8:d0:45:30:dc:84:c8:
55:ce:97:e8:95:6c:33:5d:6d:7e:a9:58:40:db:01:
c8:da:3a:e5:3d:b3:22:c8:7d:58:93:fe:9f:0d:0f:
ef:f4:30:d8:c7:aa:ec:07:ba:3b:b8:9f:b7:08:14:
0f:e4:97:84:11:46:80:75:28:04:5a:81:07:1c:01:
c9:45:15:c7:2d:32:7e:2b:d7:ac:c4:82:40:3d:6b:
00:bf:ef:d4:d4:d6:27:5d:b8:41:f6:48:37:bb:0f:
04:90:92:0b:10:30:14:8a:3a:d4:4b:21:9e:53:e6:
6f:49:0b:6d:b7:08:da:29:fb:d1:b3:4f:6f:98:8b:
e8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3A:BF:E0:EB:36:1F:E3:D5:F7:46:43:2C:88:7C:B8:AD:45:C7:FC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bad26580-4404-437c-a347-5bcc76cfedaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:9000::/40
Signature Algorithm: sha256WithRSAEncryption
54:1c:43:ae:33:b8:bf:ba:1d:0d:f6:57:b2:11:a5:7e:88:9e:
fb:73:10:fc:1d:eb:8c:c1:fa:a9:2e:2b:11:67:51:74:5f:a7:
69:25:ba:d7:9c:16:33:63:63:bb:35:4c:fb:5a:83:3b:f6:c9:
fa:69:98:50:b9:4b:34:29:5d:94:b3:49:a9:1f:f1:3e:24:ba:
4c:74:06:d5:35:f2:8d:f6:42:5c:54:00:1a:a4:0e:2f:b1:a9:
30:7e:5e:e2:11:b9:16:75:df:cd:e8:74:6d:cb:2c:ae:fc:21:
90:84:6b:c3:92:04:5f:10:8c:cd:1f:f4:e1:4b:de:16:24:48:
ef:02:07:be:80:7b:52:51:49:83:0a:8f:9d:a9:cc:c7:9a:52:
36:62:57:aa:d6:96:97:db:e1:3f:a6:39:f8:69:d6:88:1c:b4:
10:ea:74:a1:ab:70:6b:fd:18:cc:1a:98:e9:3a:86:7b:da:1c:
7f:eb:ae:65:e5:a8:bf:28:8c:9e:ae:58:9b:f8:62:22:28:fe:
0e:ce:64:c6:0b:c6:ca:da:7f:8c:58:9b:c6:65:df:b8:d1:84:
49:bd:07:31:49:61:b4:7d:03:8c:5c:92:61:d7:ef:12:95:7f:
f8:1f:f6:36:a8:af:41:b9:31:4e:25:3c:d8:52:8f:31:1b:f3:
f3:7d:84:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:07:18 2025 by rpki-client