Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46ed0f7f-82df-4918-a3b4-be852e7852e9.roa
File: 46ed0f7f-82df-4918-a3b4-be852e7852e9.roa (raw, json)
Hash identifier: 5ion8d6H6jUpchOM2bh980XdmqtX5O66PtrNxco3rmw=
Subject key identifier: 33:C9:FC:F4:49:D2:52:0A:54:06:BE:E2:FF:B3:C0:9A:CB:00:AC:7D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4F95D713C68B2C59306A756D59B3E1B14375DBED
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46ed0f7f-82df-4918-a3b4-be852e7852e9.roa
Signing time: Thu 17 Apr 2025 16:37:18 +0000
ROA not before: Thu 17 Apr 2025 16:37:18 +0000
ROA not after: Thu 22 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06e:1000::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:95:d7:13:c6:8b:2c:59:30:6a:75:6d:59:b3:e1:b1:43:75:db:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 17 16:37:18 2025 GMT
Not After : May 22 23:59:59 2025 GMT
Subject: serialNumber=8afa7824fb2954661face9fe41f8634e0eb31feba9d2ee971c56c2ef76b9be9f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:83:31:76:41:41:e4:46:8c:86:02:ed:2c:91:
a7:30:f1:d1:96:f0:fc:26:40:20:20:a5:d5:53:e9:
30:38:60:dc:81:61:85:9c:e5:80:c1:4a:28:d8:ef:
47:cc:e4:df:ba:fe:8b:cf:af:1e:7a:44:51:a9:80:
77:1b:46:5d:56:ae:16:64:7c:fb:28:cd:0c:3f:be:
5a:95:f0:30:e2:59:ae:17:4b:68:e5:85:b2:7f:cc:
b0:c0:91:44:ed:56:df:4c:fa:9e:46:9d:48:91:0c:
52:fe:f3:8e:db:0c:0b:44:ba:c6:1b:eb:6b:3a:be:
94:d7:1f:c7:2b:46:5d:1d:ce:e8:9a:43:1c:00:c0:
a4:48:a9:88:37:ff:cb:cd:76:e3:4d:ac:fc:47:2d:
9f:b5:b9:8f:66:32:cb:40:b2:64:57:b6:5b:40:e7:
83:59:b2:69:84:45:66:24:77:fa:2e:9a:51:b5:95:
cb:3d:0d:d2:5a:92:ef:6a:fe:f5:f1:99:eb:00:42:
07:53:fc:ef:93:36:63:30:5e:d7:e3:c0:b7:0e:73:
d5:11:7f:cf:0c:96:f3:b4:53:15:c9:e3:d0:ff:16:
8c:9a:7f:06:d2:88:07:a2:4e:c5:9f:35:b2:30:dd:
67:e8:45:a5:3a:58:be:f7:84:6f:6e:44:6b:d1:7f:
79:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C9:FC:F4:49:D2:52:0A:54:06:BE:E2:FF:B3:C0:9A:CB:00:AC:7D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46ed0f7f-82df-4918-a3b4-be852e7852e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06e:1000::/40
Signature Algorithm: sha256WithRSAEncryption
01:44:52:07:be:84:28:5c:a2:b0:53:3d:48:ca:e4:1c:a4:1a:
04:3c:06:bb:4a:75:fa:16:1b:ef:d7:fa:d9:1d:4d:3e:da:13:
7d:4f:aa:d5:47:33:15:7a:cb:c4:01:93:dc:76:86:58:a0:ac:
b6:f2:06:b0:c3:af:c7:7d:35:4c:6b:54:33:cb:92:04:60:93:
44:5f:e6:b3:3f:de:33:68:e9:19:01:32:9c:83:1b:4a:b7:89:
87:fc:09:69:ae:21:d1:d0:f0:7a:b2:1c:7b:8f:fa:24:96:b5:
da:a4:9b:21:ec:5d:87:7f:c7:70:3e:25:f6:65:77:9d:35:ca:
5e:4e:f0:ad:bd:96:33:e3:b7:f8:3c:c1:45:17:47:ee:b4:44:
77:43:01:3a:5b:a0:1e:e7:fc:cf:81:19:96:4e:6a:b9:b0:70:
10:9d:e6:93:19:30:a5:fd:78:7c:45:a7:93:02:4e:2d:e2:4f:
e4:8a:33:d2:26:8d:25:08:7a:9a:5c:6c:af:c6:1c:cd:8a:4b:
8f:7f:16:fa:dd:f9:01:2a:ff:f9:e9:ee:0a:60:aa:7a:ce:17:
49:67:3e:c2:f0:5b:b7:fe:36:a5:f7:de:75:5e:e1:48:ba:a9:
2c:2a:0d:7e:a1:ed:6f:8f:04:d2:28:a3:5a:1b:cb:2d:a4:ce:
c2:f3:6e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:09:57 2025 by rpki-client