Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36ae2e29-3b0a-402e-802c-fd195a3375ac.roa
File: 36ae2e29-3b0a-402e-802c-fd195a3375ac.roa (raw, json)
Hash identifier: zo+9P4ZLITTomOVDwhLB7uB1T1LS3nWnopU8M3vCbqo=
Subject key identifier: 5D:38:3D:48:FF:7C:8D:8F:76:C0:90:04:EC:2C:C1:36:05:F1:7C:E5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 121F627F77B94221916230CBFD61298DCB68506B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36ae2e29-3b0a-402e-802c-fd195a3375ac.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:6000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:1f:62:7f:77:b9:42:21:91:62:30:cb:fd:61:29:8d:cb:68:50:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4d:89:b0:fc:91:1c:f5:f5:38:d2:47:f6:c9:
c8:0f:8c:c7:65:b2:24:8c:f0:a4:7d:04:d8:87:f2:
2a:b1:d7:dc:76:8d:71:da:92:af:85:b5:c9:cc:90:
ec:ae:f9:31:92:4d:80:6b:50:85:9e:a1:be:8e:35:
50:e4:3a:14:c9:8f:27:b2:a3:4a:14:56:dc:51:4e:
79:dd:8b:9d:cb:37:1c:b5:ec:f8:79:8d:f2:40:eb:
05:94:75:f4:8d:c6:e3:25:76:dc:4b:92:10:e8:76:
17:cd:84:2b:ae:c6:d3:84:b1:1c:99:49:22:79:69:
c8:16:b5:d3:24:9c:01:a9:cc:72:97:ee:20:85:4e:
58:c8:c0:8b:de:95:92:cc:bc:cf:07:ac:b2:e0:14:
7e:20:fb:f3:59:58:63:0e:42:88:ab:2b:dc:85:88:
49:b7:b0:20:0c:91:9f:e3:ea:65:0d:1c:b1:1e:85:
1a:f5:7f:73:ca:a9:46:4d:fb:38:02:b4:e9:22:0f:
a7:9b:bf:2a:b2:ba:ac:a3:24:9a:62:3a:03:26:6f:
28:0d:33:36:c4:97:9c:fb:19:ea:44:25:91:86:07:
53:1d:70:36:c9:60:55:95:77:a3:09:9f:da:60:b8:
1c:73:9c:46:8f:8f:56:e1:3a:2d:d6:47:a4:22:4d:
96:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:38:3D:48:FF:7C:8D:8F:76:C0:90:04:EC:2C:C1:36:05:F1:7C:E5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36ae2e29-3b0a-402e-802c-fd195a3375ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:6000::/40
Signature Algorithm: sha256WithRSAEncryption
20:23:f3:bd:65:dd:b6:2d:e6:9f:01:12:c6:a6:de:db:0f:6a:
30:12:54:45:9e:4f:e9:80:44:24:b0:08:c1:ee:91:b5:f5:ea:
10:a1:12:9c:dc:b2:68:65:9a:f6:25:5e:69:40:7e:96:4c:62:
4b:36:c7:ee:9b:3c:7e:75:ca:f0:6d:db:b0:d4:ba:70:f1:84:
70:62:99:5e:be:e7:9a:b5:44:42:d2:07:97:16:44:00:43:44:
75:bf:a0:3d:10:2b:1d:50:af:40:46:d2:3b:de:52:69:c6:b3:
62:cc:c1:81:46:10:3c:77:fb:e1:98:05:a5:4e:b8:64:cc:58:
12:59:4f:64:ba:cb:5d:45:40:2d:79:f2:40:5a:7e:e7:fb:dd:
47:4a:25:ca:67:89:50:9f:4b:46:40:23:dd:9b:d8:69:0e:05:
5d:62:56:37:d3:ec:dc:a7:2a:b0:2c:a5:95:93:44:e1:ec:da:
14:82:fc:d6:22:6f:8e:9e:80:20:58:78:a2:2c:58:9d:5d:a9:
15:c8:4f:46:41:37:b0:35:8d:0a:89:fb:14:bb:9b:a7:74:34:
42:b8:ca:f3:78:8b:68:7b:5b:a1:6e:df:59:b2:c1:20:ba:30:
a6:e7:1b:76:fa:33:00:81:28:55:94:58:4f:da:71:ca:e8:fe:
a6:b6:70:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:49 2025 by rpki-client