Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f49370c8-883c-400a-80c0-5b716bcb6f95.roa
File: f49370c8-883c-400a-80c0-5b716bcb6f95.roa (raw, json)
Hash identifier: gnA0AARMFgOZ5WmCjxKGUpWzoT4mj09of32efSN407c=
Subject key identifier: 89:2A:66:1A:C4:55:07:35:19:0A:8D:DD:DF:F5:F7:F3:A4:84:5F:65
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2E57F4E16910CCD8960BDDA4106F1BA4DD0D6ABB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f49370c8-883c-400a-80c0-5b716bcb6f95.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d070:c000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:57:f4:e1:69:10:cc:d8:96:0b:dd:a4:10:6f:1b:a4:dd:0d:6a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=c822e2ee11d6045113cc883a9e27a1dcff259b376fb81af56f21c9158a29e350, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e4:df:3d:8a:a1:17:1c:f0:23:c0:a2:b8:fa:
f3:e3:60:0a:b7:24:12:0a:9a:63:12:0d:2d:cf:f4:
86:b1:27:20:e0:84:9a:12:4b:ec:8d:25:2d:34:9e:
b3:1c:90:28:27:fa:18:63:10:05:e6:3e:f7:52:6f:
0b:53:56:c1:48:df:6a:83:cc:21:ed:b0:22:51:6f:
8e:ce:31:a1:ce:9e:c3:3c:28:19:d8:4f:42:6e:85:
d3:cf:c7:d2:0d:bc:8f:49:8f:ba:82:7d:3c:e4:f0:
d6:36:c4:42:1a:53:3c:7f:28:af:d2:ec:b5:e9:6a:
fe:68:3d:72:06:fe:c6:e0:08:d4:1e:35:53:f9:bb:
4c:25:08:59:fe:c1:86:cb:fc:72:11:7e:bf:c1:bb:
5d:13:52:3e:65:51:44:ce:2a:9e:be:b7:7e:94:1b:
5b:13:57:f7:70:c9:29:e5:c4:5d:5f:0b:20:1e:3f:
77:8b:a7:ac:97:fb:96:85:f4:f1:8a:9d:f5:a0:cb:
63:f1:b3:de:ec:27:ab:69:1e:f7:84:5b:11:30:45:
6e:5b:95:2e:27:20:17:f0:cb:4b:74:2f:8d:dd:39:
30:49:8d:2e:aa:fa:e2:b7:c8:1c:56:4b:64:85:f6:
55:ff:0a:41:97:54:b9:5e:3e:11:b3:7e:e7:b0:dd:
21:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2A:66:1A:C4:55:07:35:19:0A:8D:DD:DF:F5:F7:F3:A4:84:5F:65
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f49370c8-883c-400a-80c0-5b716bcb6f95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d070:c000::/40
Signature Algorithm: sha256WithRSAEncryption
46:26:57:c8:a0:14:29:d3:a0:20:5b:b2:30:08:66:17:7d:2f:
a8:af:1e:37:3c:e9:0a:fa:f6:be:c9:42:d0:e3:17:9f:63:82:
70:c2:39:4c:22:38:ea:e5:4d:e7:70:c0:11:90:63:79:db:e4:
73:2c:21:84:80:2c:6b:8c:fb:47:5f:ba:95:a0:ba:b5:7a:b0:
b0:7b:d2:3a:44:39:73:c7:aa:92:47:e0:8b:5e:f1:39:6d:be:
d5:f8:b2:b5:6f:d2:8a:c7:5c:8e:d9:d5:0f:57:34:f0:cb:60:
2b:f8:bd:31:a6:2f:a1:7b:0e:b0:97:ca:d8:cb:ed:5d:e2:80:
2b:ec:3b:42:53:23:39:3b:20:41:a5:4a:53:75:a9:4f:1d:fd:
d6:ca:2f:09:f5:83:fa:43:3e:7a:e1:6a:50:34:dc:d6:95:60:
68:2c:2b:6a:7f:8a:21:7b:27:2b:19:61:6c:3c:93:93:43:e0:
4a:91:08:6a:0c:6d:1b:45:7d:c7:a9:76:2e:45:96:a0:77:ed:
10:4e:b4:50:dc:8c:cd:4a:36:80:ee:a1:59:84:82:f0:8e:29:
d7:01:9c:22:c4:b3:fe:24:80:51:2e:fc:b2:cb:76:8e:9e:bd:
11:3c:e5:8a:ac:59:6d:e4:34:7b:01:a9:a3:d4:13:ee:53:81:
19:f9:86:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:07:20 2025 by rpki-client