Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c34ca21-604c-49a1-96b5-05c7630b0a46.roa
File: 3c34ca21-604c-49a1-96b5-05c7630b0a46.roa (raw, json)
Hash identifier: 7choUU2bBddtXGv0AXcErOo1U5UgVm2RVD1go2b+7gc=
Subject key identifier: FC:E9:84:70:C9:F3:20:BA:ED:C5:CD:DA:D3:17:50:9F:9E:77:ED:C9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 17D487675A895E9DE6012EC30989B6889EB3D4C8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c34ca21-604c-49a1-96b5-05c7630b0a46.roa
Signing time: Mon 23 Dec 2024 00:00:00 +0000
ROA not before: Mon 23 Dec 2024 00:00:00 +0000
ROA not after: Mon 27 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d017::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:d4:87:67:5a:89:5e:9d:e6:01:2e:c3:09:89:b6:88:9e:b3:d4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 23 00:00:00 2024 GMT
Not After : Jan 27 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:80:f5:df:92:7e:4c:df:c1:6f:c4:cb:e5:
28:ca:28:e5:4a:d1:32:cd:b1:55:5e:2c:c1:f5:5a:
c6:67:36:8a:f2:e7:05:ea:cd:b1:2d:25:cd:ea:df:
52:7e:1e:bb:dd:83:97:20:a8:80:4b:6f:4e:e4:7b:
25:49:43:5b:35:e6:6a:e9:90:fb:9b:4d:ff:29:df:
b7:16:81:b0:a9:5c:2a:21:f7:29:8f:ef:ef:49:72:
db:21:5b:81:89:c2:df:b3:de:12:24:b5:12:db:fc:
66:0d:bc:b2:64:b9:63:76:40:ba:ca:7b:bb:9a:12:
82:68:23:36:0a:60:d9:4a:5b:90:9d:6f:c5:52:b9:
0c:76:5b:df:ec:26:43:4f:82:8b:7c:61:d0:85:df:
80:c6:c8:b4:c0:ea:ba:24:93:96:bf:4b:8a:4a:29:
67:ae:53:03:60:a3:44:24:85:c9:57:c9:f0:23:b3:
6f:9d:24:2e:1f:14:8b:5e:c9:1d:3e:1f:56:42:0f:
51:3b:18:0e:16:1a:f0:fd:3e:80:f0:81:88:06:2c:
6e:68:98:cb:e3:fe:b0:d3:6d:b2:d3:41:74:c2:cb:
27:1b:b2:9e:48:9f:5d:55:c8:51:c8:a0:62:4f:e8:
5e:17:06:91:d8:f7:e1:43:7f:85:6a:e6:07:fa:5a:
0b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E9:84:70:C9:F3:20:BA:ED:C5:CD:DA:D3:17:50:9F:9E:77:ED:C9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c34ca21-604c-49a1-96b5-05c7630b0a46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d017::/36
Signature Algorithm: sha256WithRSAEncryption
11:67:62:bb:10:1f:a7:51:bb:c1:98:31:83:77:a1:92:bd:a5:
cc:21:94:8e:ea:5c:a0:49:78:49:4d:89:e9:0d:14:b9:7c:be:
72:f9:82:12:6c:0f:51:75:3a:1e:ca:0b:60:d0:7b:41:fb:25:
61:68:97:ca:df:ff:8a:f3:74:e3:bb:e2:29:5e:ba:b1:a3:e9:
6d:b4:42:0e:a8:a7:c5:50:07:39:26:e7:36:38:3d:91:1f:15:
04:46:71:0f:ea:8e:ec:b6:47:28:b1:6e:5d:5f:25:9a:b1:9a:
a1:49:e8:02:a4:38:f6:39:27:bf:94:35:39:9b:9c:7d:3b:c1:
69:fd:41:10:f0:9a:d1:f3:98:d0:18:5d:9a:e3:29:f8:e5:be:
db:67:31:b6:87:f6:e9:a6:42:05:d0:2f:6b:c5:8c:3a:b4:32:
d2:af:d4:b0:c3:96:11:db:80:b5:d0:9b:a1:5d:74:c8:df:99:
8c:b1:77:39:34:80:40:ee:cb:cd:9a:e8:7f:17:ac:0b:2d:89:
ef:5d:db:16:97:da:b1:12:51:fb:f8:c3:16:12:c1:4b:55:71:
7c:d7:9b:73:35:e2:63:58:2a:79:7c:e2:a4:e0:96:01:92:77:
f5:b3:94:41:e6:c5:f5:3b:b8:4e:48:72:b2:c3:47:37:54:98:
50:24:f1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:38 2025 by rpki-client