Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c1f2ad15-7280-4c7b-b51c-7254401510d5.roa
File: c1f2ad15-7280-4c7b-b51c-7254401510d5.roa (raw, json)
Hash identifier: /XaVU9IJowPHIE8EaJgt6G0YpjMOxN5giePsjtESej8=
Subject key identifier: FA:99:63:7F:C4:A9:C4:51:41:2E:69:5A:EA:EA:7B:00:C7:5F:83:92
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5AF48A2AFBD1600F0690F0E313F7182801DAE20A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c1f2ad15-7280-4c7b-b51c-7254401510d5.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:c0c0::/46 maxlen: 46
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:f4:8a:2a:fb:d1:60:0f:06:90:f0:e3:13:f7:18:28:01:da:e2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=4ae5bf671cdfe002f0272cb245ee960f36ad485e38fe3ed58a7888f8de3992d8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:32:01:d2:3a:88:16:cd:43:3a:f9:ec:4f:4d:
f8:86:32:ab:86:37:b1:ae:54:2f:ac:e3:42:f4:ea:
aa:c9:5f:0e:b5:e7:e8:d4:c7:95:03:ad:d9:3a:c4:
dc:75:4d:04:a6:37:8b:f5:66:c0:de:2c:f6:8f:20:
06:b7:93:2a:a3:20:0b:2f:3a:ac:9a:b7:d8:09:6d:
d0:10:0d:16:f6:8e:d9:51:9a:d6:74:b7:f7:0e:6b:
fd:95:09:47:db:08:61:11:10:12:9b:33:f7:ef:8f:
9d:7b:7d:f9:b7:ae:74:cd:fd:ed:71:c8:88:5e:a4:
13:0c:71:36:99:2d:48:41:a8:9e:c1:cd:14:6e:21:
c9:6b:d1:5f:e7:e5:43:7d:52:b7:f8:56:4d:80:21:
0c:ab:da:2e:04:e7:21:8c:fb:7b:46:91:6e:99:7b:
a4:9d:cc:c9:a0:65:01:51:e8:7e:cd:18:79:13:65:
42:a0:13:e8:97:7e:5e:b8:b5:8f:54:0a:3c:0a:d9:
b4:f3:a9:89:96:8a:d6:8d:5d:41:68:7d:85:39:6f:
43:21:ab:9d:99:63:53:f8:42:b6:f0:42:0c:e8:f0:
14:b2:af:6b:61:88:fa:13:b5:43:51:6c:1c:87:f9:
07:a2:00:1f:c6:02:a1:17:67:b2:f1:8a:e6:13:df:
35:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:99:63:7F:C4:A9:C4:51:41:2E:69:5A:EA:EA:7B:00:C7:5F:83:92
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c1f2ad15-7280-4c7b-b51c-7254401510d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:c0c0::/46
Signature Algorithm: sha256WithRSAEncryption
37:76:4f:a5:6a:45:f6:00:8a:d3:9c:b5:92:e3:ec:84:9a:2c:
aa:92:2a:0f:a0:be:96:c9:17:75:06:6f:4b:2f:ea:46:29:e5:
0d:52:ba:b9:97:a0:ef:81:ca:ee:25:d2:db:63:79:34:b8:59:
3d:9d:3d:16:87:c3:84:1a:bf:d5:8b:f9:e1:56:f2:ae:94:21:
e2:6f:a5:86:09:bc:54:5e:81:f1:5b:fc:dd:43:ea:e1:75:2d:
ff:d6:9e:5e:0a:8a:51:90:43:85:8f:40:48:2f:39:97:67:3f:
85:74:2d:21:16:a3:69:6a:31:0a:4e:ca:9b:05:96:74:76:b4:
1f:ff:c3:f6:3d:21:9e:ad:49:1d:13:a0:65:04:f0:d7:d1:b1:
6d:47:ce:4d:02:b7:a1:e7:da:57:f1:64:ca:96:02:cd:6a:f6:
3a:57:67:e2:57:5c:25:72:0c:8c:c3:91:5e:6f:f3:18:1e:2d:
64:a6:69:ea:21:24:a6:2d:b6:d8:1c:e3:0d:72:17:02:fb:c2:
3b:a9:ab:36:fb:14:34:14:22:3f:06:be:c5:8d:42:b5:b8:ad:
8c:95:80:94:76:52:f5:91:20:86:56:98:1d:0d:44:ca:05:15:
0f:b4:f5:b3:91:f0:a8:8b:41:5e:8f:f7:e8:99:9e:55:be:92:
35:4a:1c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:06:20 2025 by rpki-client