Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0367559a-fe32-47c4-a58b-1115f3d0e6d7.roa
File: 0367559a-fe32-47c4-a58b-1115f3d0e6d7.roa (raw, json)
Hash identifier: jkileVndIREgFMcdTnOpNPDih0u0YdrqTIXVSlK89yY=
Subject key identifier: 33:53:7F:B8:A6:A5:EE:2F:4E:8C:4C:F8:33:33:B2:3F:6F:0D:F4:62
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 78B5082C1929CA44E6F67A30FAD080F11027D14B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0367559a-fe32-47c4-a58b-1115f3d0e6d7.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d070:1000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:b5:08:2c:19:29:ca:44:e6:f6:7a:30:fa:d0:80:f1:10:27:d1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c5:0f:22:fa:f6:71:c6:c6:9f:25:99:d8:c3:
bf:e2:1c:d0:72:c2:06:e9:17:26:a5:1b:23:9d:81:
78:5e:5f:07:08:e8:b3:c0:ee:c0:85:55:4f:79:b6:
8f:e6:73:36:57:76:63:83:a0:e1:6c:eb:35:66:e6:
9c:bb:6c:e3:a8:3c:e0:0b:a1:15:6c:ed:bb:2a:83:
18:b3:84:96:fc:7f:18:d1:9f:99:ef:af:31:64:aa:
ca:b6:50:53:c4:a5:b2:68:81:b9:c9:e8:80:74:74:
ea:69:ac:b8:b6:3e:70:de:50:de:cf:4f:0e:2b:4a:
f6:02:2a:a1:f3:54:20:3e:7c:98:b4:7e:6d:14:9c:
ec:39:c3:bb:3a:ac:1e:91:94:51:36:a7:2a:bf:62:
3d:61:88:7a:d6:3e:45:4c:5b:0e:00:70:01:21:07:
12:0b:48:4c:cb:8e:13:45:4e:16:a2:b5:b4:8a:89:
bf:08:1a:0e:a7:22:de:7f:6f:45:ac:8e:4a:34:59:
d6:ba:ee:67:eb:ad:49:6e:65:f9:80:eb:d1:c4:63:
cc:23:35:ae:b5:97:24:35:07:71:77:6a:6a:f3:d9:
df:d1:bf:87:01:9e:9f:a0:6a:8e:f4:6a:23:06:cf:
94:6b:7f:5e:22:ed:45:e6:e4:81:bb:f0:90:ed:70:
1f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:53:7F:B8:A6:A5:EE:2F:4E:8C:4C:F8:33:33:B2:3F:6F:0D:F4:62
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0367559a-fe32-47c4-a58b-1115f3d0e6d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d070:1000::/40
Signature Algorithm: sha256WithRSAEncryption
c9:28:00:bc:fe:43:4a:53:e8:0d:24:4c:88:b1:bb:e1:08:20:
0c:6b:50:b3:37:70:0c:82:18:d1:59:16:46:18:cd:32:16:d3:
4a:f2:75:73:23:ee:02:b1:83:3d:6b:ca:2f:1f:c8:34:b9:b3:
db:e5:2d:d6:93:f4:e9:9b:a7:2a:ac:e3:f0:fa:61:84:49:44:
ad:f8:1b:b6:70:17:bd:6f:f2:24:96:5c:16:bf:eb:0c:6c:b8:
23:b8:f2:0d:08:61:32:bc:3d:5c:17:db:4e:b3:84:64:85:6b:
31:7d:89:b2:65:9f:cf:bf:30:47:b2:ec:e9:2f:83:f0:4f:74:
db:88:bb:f6:4f:69:57:d0:31:b2:9c:98:33:e2:64:58:56:7a:
b7:50:4c:aa:78:3e:04:f4:b2:4e:9d:9a:57:e7:7e:c7:19:17:
2c:74:c3:d1:69:f5:38:30:06:a1:11:43:cb:10:75:bc:d8:b2:
e6:c0:78:f4:7f:0e:35:5b:9a:f4:81:d2:d3:aa:6d:ec:29:3a:
17:6b:c2:20:fe:ab:22:45:33:82:64:68:e8:64:56:aa:c3:ac:
6a:1d:bc:d9:d5:c6:3a:5d:45:89:2d:2f:07:e6:91:91:df:6a:
32:1d:a7:1c:30:20:80:33:4f:37:c8:a9:d0:e8:cf:ae:b1:d5:
49:38:49:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:49:13 2025 by rpki-client