Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d93bd046-e594-4155-a13b-64e948814e8e.roa
File: d93bd046-e594-4155-a13b-64e948814e8e.roa (raw, json)
Hash identifier: ACMm42SdzXpECeyfFxtrp71zfpdgngtjgWnGajQ55yQ=
Subject key identifier: 75:CE:F1:9A:53:AC:D0:7E:27:EB:D1:6E:22:F6:84:C6:53:8F:81:3B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 15E132440E6B8AD0E65FBF70F81D36861CC40FE1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d93bd046-e594-4155-a13b-64e948814e8e.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:e080::/46 maxlen: 46
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e1:32:44:0e:6b:8a:d0:e6:5f:bf:70:f8:1d:36:86:1c:c4:0f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=b964c53584ade59e8200af401a0141be8b06562b725afcd4395be5de412858e6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:7d:46:4b:a9:76:02:be:f2:5d:54:4a:a9:
0b:f3:f0:c3:0b:36:b2:f9:28:8f:95:9f:41:60:a2:
8d:96:21:6b:06:4e:b5:63:c9:e2:d3:de:32:af:ec:
d0:a3:55:fe:3e:18:36:b4:05:f1:6b:3f:0b:d5:fd:
e8:f0:67:55:a8:f8:a0:1d:cd:a6:ab:8b:d0:12:58:
01:c6:44:36:ae:82:1b:03:1f:cc:46:62:d5:bd:46:
39:f5:d2:af:12:47:24:89:77:bb:a6:15:88:2b:5b:
4d:3b:29:7b:66:b0:a4:aa:3a:e5:5a:e0:49:27:39:
7e:d6:4e:b8:a8:8d:84:d7:cd:5d:88:cb:36:9f:f0:
fd:92:4a:6f:fd:73:32:c7:4d:07:4d:a7:a8:a1:56:
c8:ba:8e:de:75:d1:72:29:ec:43:74:94:07:eb:1d:
25:1a:ac:f0:a0:f4:86:74:95:5f:ae:37:bd:29:e0:
a9:e9:63:05:52:5a:59:27:bf:0a:71:49:f3:db:94:
f6:57:da:be:f9:4e:ae:03:68:80:68:17:89:e9:1e:
86:94:0c:90:75:f4:b6:a2:90:6a:98:c4:fc:e0:25:
dd:00:b0:01:34:a7:4e:03:8b:08:65:0a:c7:10:68:
45:d5:9d:f4:c3:06:b9:79:6d:6b:ac:67:bc:15:f4:
10:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CE:F1:9A:53:AC:D0:7E:27:EB:D1:6E:22:F6:84:C6:53:8F:81:3B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d93bd046-e594-4155-a13b-64e948814e8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:e080::/46
Signature Algorithm: sha256WithRSAEncryption
30:32:57:75:c0:5a:58:5d:c9:35:82:09:91:05:00:2b:2f:fa:
02:40:85:2e:f4:e3:f2:88:72:7b:b3:b4:0b:0e:61:3d:3a:5a:
57:35:a4:4b:40:09:58:e6:5b:e7:36:5f:21:cd:c9:6d:49:ce:
eb:04:df:6e:b7:0a:e7:2b:22:d5:10:7c:cd:c1:c7:4a:eb:33:
45:19:8c:a6:d3:c9:69:d2:38:f2:06:91:33:90:00:26:cc:51:
9c:6c:7e:50:f1:a0:1f:18:47:3a:e2:6d:8f:25:0c:3c:00:54:
49:b8:4a:56:a9:41:c6:ba:15:a1:4c:31:12:ba:12:08:d8:7e:
5f:16:28:9b:9e:c3:6e:9b:29:4f:63:05:a3:0d:c8:ff:43:1b:
85:71:fb:1b:b0:b8:23:aa:93:6e:e4:71:8a:a1:12:e6:73:96:
a6:68:83:d1:e5:79:00:10:35:ae:95:61:6b:d0:50:3c:ae:6f:
df:5f:3a:7f:d2:ea:41:39:de:0a:d1:24:41:29:b7:5b:ac:d8:
57:13:0a:63:a3:c8:b7:c8:e1:4c:fa:fa:18:77:55:36:cf:9d:
e9:2d:bc:12:d5:cf:ce:22:a6:5f:51:26:8b:5e:7f:30:c1:aa:
3d:50:57:47:ab:09:09:67:95:51:60:78:d2:27:12:98:10:bd:
d7:7d:93:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:10:54 2025 by rpki-client