Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f8d2db0-3420-4eb0-a3d5-3804ce1948cf.roa
File: 0f8d2db0-3420-4eb0-a3d5-3804ce1948cf.roa (raw, json)
Hash identifier: py4oF8ALvXWRzPd5pkUR9ahYh+JG+IeaeDr9dxdfjFs=
Subject key identifier: 84:2D:47:05:53:51:AB:D6:F4:68:BE:89:F9:6B:7D:4A:F5:E0:A6:FB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3146E447859A180690603225A427D1E4A9F310B8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f8d2db0-3420-4eb0-a3d5-3804ce1948cf.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:6000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:46:e4:47:85:9a:18:06:90:60:32:25:a4:27:d1:e4:a9:f3:10:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1a:eb:c6:16:b7:33:6b:a6:4b:a7:6c:a4:ca:
18:d3:c8:8f:6d:de:36:9b:29:03:1f:77:41:ef:c2:
7b:51:32:43:3b:79:85:ea:f7:bd:03:7f:be:37:d1:
81:09:96:26:9f:03:12:ef:d3:2b:86:8e:a8:34:22:
0c:df:8e:4b:97:c5:13:72:ac:3c:cc:85:55:25:33:
c3:2a:cb:2d:b1:a1:16:b0:91:47:fc:24:d1:4c:b0:
2f:11:78:be:a7:44:12:4f:46:7f:e2:25:2f:60:6a:
16:03:45:11:cd:98:fe:8d:a7:0c:e7:19:6b:a6:43:
44:c9:54:84:9b:a4:ed:5b:0d:e9:e6:09:c4:28:49:
2b:23:48:79:33:18:83:90:d9:a2:04:1c:95:9e:36:
82:d8:85:87:31:91:a3:28:9b:e8:a4:6f:93:ca:11:
0f:66:0c:91:3c:be:de:62:45:32:80:d6:8a:51:5f:
26:a1:0d:e4:ee:01:a4:55:52:e1:7e:50:e1:d2:20:
91:e5:c3:f8:db:03:cd:b7:7a:80:af:2c:ba:cf:ce:
d4:4a:db:26:46:a6:94:93:f2:cb:01:64:ef:64:c3:
d3:81:33:2f:0e:80:eb:e4:bf:21:04:c9:06:05:5c:
03:70:62:04:67:40:5e:b7:9a:40:77:1e:f7:14:93:
f2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2D:47:05:53:51:AB:D6:F4:68:BE:89:F9:6B:7D:4A:F5:E0:A6:FB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f8d2db0-3420-4eb0-a3d5-3804ce1948cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:6000::/40
Signature Algorithm: sha256WithRSAEncryption
69:a4:03:4a:4f:2b:b7:b9:71:69:d1:37:73:47:31:bc:f4:fb:
48:15:65:39:24:7a:9b:ef:12:87:9d:ad:fb:c0:36:8b:62:c1:
f4:75:90:b3:53:62:9a:6e:c2:b3:7d:64:e4:4c:f8:7a:74:1d:
df:d9:29:57:8f:58:3a:f1:2e:ce:f0:89:5b:14:58:62:4f:65:
b2:5b:11:ea:26:8e:55:7d:8c:1a:0f:cb:c9:78:3b:f2:09:b3:
aa:9b:25:ae:84:cd:f6:36:3d:46:14:45:5e:de:65:0d:11:51:
86:cc:2d:8b:0d:de:92:ab:93:21:4f:8f:a3:f9:65:d4:98:02:
03:68:a7:69:32:b5:56:b9:09:e2:ad:26:2d:91:9a:54:19:1e:
e3:f8:8c:57:5e:d4:9a:76:7d:51:92:72:73:78:2f:e3:27:8a:
4d:dd:4b:45:2d:58:2c:dd:4f:7a:7d:d2:3b:19:72:a5:81:04:
ba:82:2c:e3:17:4a:1a:f8:3a:51:cb:5d:7e:ff:94:87:82:f9:
a6:cd:67:c2:18:b5:9f:81:90:25:78:24:35:11:ef:39:56:ca:
b2:ac:81:b0:1f:9d:72:3a:8a:ef:02:24:32:69:1a:96:24:df:
8d:37:b3:55:00:6a:fa:4d:c5:f9:e1:f2:12:86:69:13:25:40:
89:1e:09:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:11 2025 by rpki-client