Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3c120d2-b640-4365-9bfc-3021f21ce388.roa
File: c3c120d2-b640-4365-9bfc-3021f21ce388.roa (raw, json)
Hash identifier: oiipP0ZBtBLvfoaqBWxuFP1AOwAKcSI8IrwjC4Z9pMc=
Subject key identifier: 56:49:A7:BF:4B:B0:4E:F5:99:B9:50:A2:2F:99:E4:BB:F1:C8:B6:85
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 701BE148FCDD262B01FF2B0E4D583EDC75851F19
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3c120d2-b640-4365-9bfc-3021f21ce388.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:b000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:1b:e1:48:fc:dd:26:2b:01:ff:2b:0e:4d:58:3e:dc:75:85:1f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=d0a5fea07468b84185b5ebb109df181a507019cf4622f6b409fa6bf7a057759b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:24:c9:80:9a:4f:ef:f1:16:0c:6c:43:6b:a1:
57:d1:83:80:36:19:93:ef:69:b5:41:25:8c:98:28:
d3:75:9b:6a:e1:bb:85:13:82:b2:7d:a0:5a:77:f7:
6e:46:8b:37:64:47:09:51:df:b5:15:ef:79:8a:79:
65:12:84:74:81:7a:34:8f:a6:26:58:7a:77:97:df:
49:0c:5c:a5:1e:e2:f6:ca:48:a3:42:5e:f2:d6:01:
a1:fb:d7:71:dd:96:5e:88:12:a7:1d:02:dc:0d:66:
c9:ff:2f:24:86:fd:55:82:c4:60:4a:61:88:59:c2:
64:8c:7d:b3:43:75:f6:3f:c1:9a:d6:45:04:32:7a:
41:33:56:13:c7:ed:3c:db:91:38:59:13:49:2a:e9:
bd:ac:ed:b8:ca:8f:c1:f4:9f:87:ed:f6:68:8c:d6:
ca:e9:de:c5:ad:1f:88:3d:b7:67:d8:04:3f:67:83:
2a:9c:cc:57:d8:64:4b:92:a2:94:ea:08:0d:d5:83:
3a:79:fe:68:26:6e:ac:ef:b7:b9:d2:02:77:05:f9:
47:40:87:b2:95:5c:bb:fd:6a:ea:18:8d:a3:95:24:
8b:d8:39:55:cb:fe:96:e2:9d:e6:f9:9d:7f:65:00:
20:3d:b5:4d:4d:9b:f4:74:e3:d2:a3:b4:92:47:e5:
1f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:49:A7:BF:4B:B0:4E:F5:99:B9:50:A2:2F:99:E4:BB:F1:C8:B6:85
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3c120d2-b640-4365-9bfc-3021f21ce388.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:b000::/40
Signature Algorithm: sha256WithRSAEncryption
07:95:59:8f:16:96:e3:ad:70:84:24:50:cd:75:1c:a6:95:5f:
33:a2:99:8f:82:56:14:5a:63:fb:0d:2b:de:7b:be:ea:83:fb:
09:e8:f9:1a:f9:55:5b:f8:3f:fe:d9:05:00:a4:4d:40:84:a3:
9e:46:79:af:f5:8e:98:35:36:9b:f8:f6:d7:0a:ae:d7:b5:26:
d6:77:b2:8d:2b:c2:92:3e:09:15:92:f4:ad:5d:60:0b:88:08:
4b:ae:e1:53:ad:b1:ee:91:1b:e1:17:42:33:cd:10:ec:29:99:
ec:ce:ae:59:d3:5b:dd:d4:8b:4d:c5:ff:72:36:67:ee:da:8a:
c5:aa:15:e2:b1:c4:ae:c9:19:76:39:63:f7:46:89:f0:bd:b0:
cb:42:34:43:d7:be:d7:b6:a1:69:68:05:4e:1b:ee:bd:b1:c4:
c4:a1:81:00:84:25:18:7a:c7:31:da:32:c7:7d:3c:13:f5:1b:
ef:30:0a:6f:b6:03:d3:fb:b6:41:f6:9c:38:37:8c:4a:12:b0:
7e:49:ef:7a:af:a7:c4:69:70:d9:ee:11:4b:76:33:59:f1:dd:
b8:8c:ff:1b:b1:ea:6c:20:15:54:81:d8:4c:dc:03:e4:e5:25:
6d:ef:e4:85:46:25:77:31:8e:aa:a1:b1:94:31:0b:7f:ea:0f:
da:14:d3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:10:55 2025 by rpki-client