Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d735e06b-da70-43f9-a07c-a9978bc62606.roa
File: d735e06b-da70-43f9-a07c-a9978bc62606.roa (raw, json)
Hash identifier: 3CxsaJwQmRN/8NgfWvNjlsCv5FK2QIQ5mpiPn3Erl1k=
Subject key identifier: DF:A4:D6:C9:61:8A:11:67:73:35:60:69:B0:5C:10:04:CE:76:34:95
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 27959FFE229DAD6012087CC826C7F927D4247B59
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d735e06b-da70-43f9-a07c-a9978bc62606.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d070:2000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:95:9f:fe:22:9d:ad:60:12:08:7c:c8:26:c7:f9:27:d4:24:7b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=2ed03ca3cd435a80bed34d0ed055e98957476d26a6a44c752df64ae72bf4bc26, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2f:3b:10:87:1e:c6:17:bc:54:d8:d7:f6:9b:
f4:b8:4f:93:d5:75:7c:e5:ea:4d:72:31:9c:51:e4:
c6:ce:8a:2d:31:d0:a0:b0:18:73:26:3e:d9:21:5c:
03:6d:dd:7a:30:17:53:ef:c1:7b:f8:0c:80:2e:12:
07:25:c4:64:88:b5:ac:dc:4f:3f:d8:77:4e:ba:12:
1c:17:e0:75:88:74:6c:be:e4:9c:7f:69:de:a6:98:
c6:48:3d:c4:f9:9c:62:c1:94:c7:af:cf:65:3d:00:
ed:e1:90:25:93:e7:0a:5a:54:dd:50:21:b2:41:47:
79:9f:14:01:da:e0:76:05:c7:d4:44:51:4f:bc:34:
23:60:76:24:8c:d6:0d:f8:60:7d:34:84:ce:4a:90:
87:0e:75:f0:4b:36:c6:36:e5:89:ce:ed:d2:54:16:
b8:c1:bf:61:2b:39:2d:61:b2:f7:45:19:8c:64:60:
e3:c7:6f:7d:fb:f2:0b:78:ba:83:84:27:47:c9:3e:
95:ca:e3:8e:8e:03:de:4d:9a:77:9a:0e:0e:e7:7e:
5a:b3:9e:0b:60:10:6e:b3:f3:b8:60:40:af:42:59:
a1:55:bc:20:41:e8:31:92:ba:ba:2e:08:0d:18:3a:
54:70:27:7f:79:94:b9:25:56:2e:15:5d:7d:4c:05:
80:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A4:D6:C9:61:8A:11:67:73:35:60:69:B0:5C:10:04:CE:76:34:95
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d735e06b-da70-43f9-a07c-a9978bc62606.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d070:2000::/40
Signature Algorithm: sha256WithRSAEncryption
b0:a6:b9:28:1f:30:35:fb:0e:09:0a:8e:3c:c1:b9:2e:d0:1c:
25:7c:5b:99:f7:ab:18:8d:86:9a:3d:d7:7e:06:32:5a:a9:73:
83:39:ce:f9:2a:72:14:a2:28:d4:e3:50:95:cb:20:1b:c5:77:
25:9f:51:08:43:dc:32:4e:9c:91:72:d1:c7:1a:c2:b1:41:34:
90:8e:69:2c:1f:27:2c:12:42:bf:d8:b2:d3:e0:88:2e:4d:8f:
8b:08:84:14:2c:a0:be:a6:d5:b0:f8:6a:72:92:03:43:f2:7b:
2d:7e:34:2a:23:be:29:8b:6d:ca:31:41:78:fc:81:73:de:fa:
f3:ba:59:6a:d3:6f:95:fc:cb:66:95:27:03:a4:33:55:2c:7b:
ce:c4:5a:83:4b:e4:9b:18:d6:da:83:ff:76:c9:a8:09:23:68:
11:be:97:41:e2:8a:fe:56:2d:e2:e9:f4:b1:68:c4:98:b4:ac:
65:c0:01:a6:5e:a1:42:ff:e7:57:f1:97:ae:d1:fe:89:65:a8:
fa:2e:32:7b:25:27:77:74:ec:03:8f:60:84:52:85:41:9e:4b:
9e:9f:85:08:19:21:e3:c0:d4:b1:e5:b0:13:6b:e5:48:6d:15:
48:94:80:98:a7:b2:ec:2c:ff:28:68:aa:a3:62:99:07:93:4d:
a4:89:d3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:06:23 2025 by rpki-client