Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/26c0d0b7-a86e-46e0-b9ac-92bdbae4fe99.roa
File: 26c0d0b7-a86e-46e0-b9ac-92bdbae4fe99.roa (raw, json)
Hash identifier: dd87OacXEXIqHv1D8Im6Ne1+6hpBed9kFVyKIh4/wws=
Subject key identifier: 56:CC:09:BF:48:27:91:D7:43:C4:52:0E:3F:DF:DB:70:58:C4:EA:3A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 710A271FEF15419B534354226351BA5354FDCAE8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/26c0d0b7-a86e-46e0-b9ac-92bdbae4fe99.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:a000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:0a:27:1f:ef:15:41:9b:53:43:54:22:63:51:ba:53:54:fd:ca:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:56:11:03:9b:2a:6b:34:7c:7f:a5:1b:4f:
61:94:50:07:10:95:45:da:46:d6:cb:65:8a:b0:9e:
bd:92:f1:3d:bf:c7:07:03:61:cd:35:26:a2:9c:9b:
ca:52:0c:ae:11:d7:09:02:a2:65:d2:1a:15:f2:82:
33:0c:f3:79:56:70:4c:6d:03:a2:b6:a7:ff:e3:08:
4c:1a:75:17:96:2e:d2:f3:8f:a5:cf:52:50:59:fe:
16:f8:73:38:e8:00:b4:d1:15:c9:3a:fc:8a:6f:a8:
17:91:31:45:43:8f:7b:dd:c4:2f:ee:b6:7e:23:ef:
3d:4b:78:5a:4b:65:ff:df:a2:38:9d:03:45:25:e4:
03:fc:8e:35:87:94:2e:fe:c2:f8:18:7c:40:31:4e:
33:03:21:21:25:56:f1:0c:96:56:b9:10:18:ab:1e:
44:46:4e:3a:34:2e:aa:e1:46:48:28:e7:78:a6:44:
bc:0a:e6:b0:5b:25:da:7f:68:61:de:c2:96:ba:b5:
e5:9d:a6:33:3f:35:fa:f0:31:f9:97:be:96:43:b4:
3d:d4:ed:2d:44:b3:95:1a:47:10:8e:c4:9e:5f:39:
b8:34:a0:ac:73:90:dd:5d:95:c8:89:a8:7a:df:e4:
6c:1b:ed:9a:f8:44:f9:c2:c7:46:bd:cc:6b:bc:b3:
e9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CC:09:BF:48:27:91:D7:43:C4:52:0E:3F:DF:DB:70:58:C4:EA:3A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/26c0d0b7-a86e-46e0-b9ac-92bdbae4fe99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:a000::/40
Signature Algorithm: sha256WithRSAEncryption
86:a9:1f:4d:ce:9c:a1:b0:80:c8:9d:92:75:62:58:79:09:6e:
9b:7f:7a:3b:78:8e:45:9f:f3:8a:c4:d0:78:25:95:7a:ea:1c:
78:20:5f:e3:a9:69:4c:07:7d:b2:53:c1:b5:ed:40:83:b7:f4:
e7:57:7e:cf:4d:09:c5:ca:44:9b:4b:ba:57:71:aa:35:28:60:
e8:12:17:d5:34:11:cb:1f:e1:fc:05:00:d4:74:1f:e1:f5:94:
b7:1b:a7:d6:5a:27:05:4a:d0:2b:f2:d4:d4:3a:dd:08:05:0e:
2b:43:7d:c0:4f:5d:bb:f2:98:31:92:14:84:0f:e6:8e:a3:f7:
33:2c:ff:78:0b:6e:db:ad:0f:9f:38:b7:51:92:5d:4f:5c:82:
f1:95:c7:9c:e1:f4:4c:e7:08:07:af:47:34:41:fe:3b:b4:3a:
55:4e:42:8e:77:be:ad:ab:8e:14:2c:49:af:d1:3e:5b:d0:ce:
e7:db:70:ac:f2:c8:4c:98:02:36:4b:bd:7f:99:a3:47:ea:3b:
e4:34:f6:2a:32:b8:72:af:86:a7:61:69:06:7d:a4:27:0c:00:
d5:1f:59:d0:7f:36:80:f0:68:d2:2c:c3:c1:76:3a:9d:78:c3:
c6:fc:b7:19:12:bb:b8:3c:86:4c:a3:55:93:90:4e:ae:a1:ff:
06:ee:42:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:29 2025 by rpki-client