Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ff27e9d1-ceb1-4c3f-b870-67bf9b6b52aa.roa
File: ff27e9d1-ceb1-4c3f-b870-67bf9b6b52aa.roa (raw, json)
Hash identifier: mVSbArFeoPVjX4j6k9+QsRtAOGm/saorUsc9LkHDwUI=
Subject key identifier: 83:FD:25:BD:B5:54:EC:F8:CD:2C:C4:E5:6A:D7:8F:84:1D:DD:CD:32
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1CC62495172C55F266244DD6CB80834E2E49A07D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ff27e9d1-ceb1-4c3f-b870-67bf9b6b52aa.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:b000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:c6:24:95:17:2c:55:f2:66:24:4d:d6:cb:80:83:4e:2e:49:a0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=ccf991c5401199ee60845467938f97c26db715bc312ee5d7851e1ef4b9a1ff14, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:31:96:48:34:63:a8:88:89:ec:36:64:45:
16:0f:52:ff:2d:3f:34:48:56:4c:16:b8:a9:d5:85:
68:4c:ae:10:d1:2a:eb:a1:cf:ec:45:d3:1b:e0:a9:
8b:a8:26:53:3c:b8:9e:6c:69:74:28:08:57:a4:a3:
3e:85:bf:49:33:70:3e:f3:8d:1b:8c:ff:7a:1f:97:
cc:97:4b:89:69:da:81:6f:44:42:8f:99:31:b9:35:
72:01:ee:ad:d6:6f:bc:06:67:8f:ae:21:d2:7b:09:
0e:2c:3a:07:69:9d:71:ff:33:21:e0:39:ca:81:f3:
e8:8a:ab:02:7f:62:57:9f:87:b6:47:c6:39:e4:e1:
8f:66:90:62:e2:2b:96:f8:c8:11:40:16:93:32:33:
ec:0a:b0:e6:53:30:bc:7c:09:87:d4:1a:a3:c8:56:
14:66:fa:f1:06:31:99:87:e0:f3:d4:8a:4e:57:dc:
c0:88:d0:67:fe:14:5c:17:32:d1:31:66:d8:cc:ad:
ec:4f:22:c4:0a:40:f0:25:81:3d:83:20:3d:02:7c:
45:1f:41:01:d0:86:18:f5:2f:12:fb:e6:20:de:58:
e4:ef:13:4a:fb:e6:07:da:00:1b:73:4b:84:31:b4:
12:cc:ad:b5:db:70:55:35:45:c0:d3:83:37:4e:d0:
c2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FD:25:BD:B5:54:EC:F8:CD:2C:C4:E5:6A:D7:8F:84:1D:DD:CD:32
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ff27e9d1-ceb1-4c3f-b870-67bf9b6b52aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:b000::/40
Signature Algorithm: sha256WithRSAEncryption
5e:c5:12:96:4b:f9:e7:ba:6b:31:4e:53:ac:09:c0:c1:92:e8:
76:fb:f8:bc:0b:2a:24:59:40:ef:91:71:26:c4:a2:66:ea:93:
47:60:14:b2:7a:c1:4b:5b:c7:8b:62:ca:3f:37:be:65:36:c4:
ed:fa:56:70:89:4c:c1:06:48:c1:5a:56:fc:b9:98:65:24:c8:
4d:14:47:ec:17:7e:01:87:21:02:e4:12:c0:a0:20:03:57:85:
d7:2e:48:c0:3c:ab:3d:b4:5c:61:8e:04:73:df:fa:7e:a3:6e:
3a:d6:40:b4:f6:1a:fc:ee:5f:f6:2d:89:28:e3:9c:98:f8:09:
2d:23:aa:87:56:be:33:61:2c:3d:b1:65:98:47:74:aa:52:27:
09:37:39:48:7c:9f:d6:2a:c4:42:7c:10:9b:af:fb:63:a9:6d:
a7:7b:3f:68:77:b9:e8:0d:2f:69:91:75:79:60:e0:ae:1e:d6:
3e:a7:4b:a5:16:3a:ce:3a:3a:20:4b:80:27:47:b9:c7:35:af:
c8:6f:bf:b8:74:3d:96:3d:e9:1d:ea:a7:0e:5c:35:b1:76:94:
a6:7d:5f:90:7b:59:24:f2:de:b5:a5:8e:6f:ab:c2:b8:c7:20:
63:21:37:47:c6:9c:f8:d5:3a:00:97:8f:c0:32:a5:1b:12:61:
f6:fd:b8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:10:55 2025 by rpki-client