Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/55182b76-cd4f-469e-b03e-f88479c7d323.roa
File: 55182b76-cd4f-469e-b03e-f88479c7d323.roa (raw, json)
Hash identifier: j4aVrRC+3keutPACR9eL03Rb8kNfUxXyAHs7x3nPb0w=
Subject key identifier: B1:06:4B:5D:7A:9F:1A:26:C4:1C:AA:79:A5:DC:BA:7B:F9:41:20:D2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 28B082EC6FF5C685AEACA5944C4A67DF4C44ADDA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/55182b76-cd4f-469e-b03e-f88479c7d323.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:b000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:b0:82:ec:6f:f5:c6:85:ae:ac:a5:94:4c:4a:67:df:4c:44:ad:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:5c:37:b0:8a:87:f7:99:04:5a:61:62:39:
dd:5a:af:53:bc:ed:cc:9d:cb:da:da:78:5c:91:ad:
1d:92:87:29:aa:5d:94:2d:5f:94:5a:37:93:f0:cf:
87:e6:e0:3f:2f:e4:97:87:63:14:25:b9:23:9d:5a:
37:41:aa:d8:cb:44:c7:82:cd:86:4e:b7:d9:72:15:
df:37:14:91:84:ac:ee:44:41:63:6c:83:e9:41:8d:
d7:13:4e:76:51:8d:c0:9c:5b:1f:55:b0:8b:e1:59:
0c:7b:2c:5a:1b:9b:e7:14:86:81:db:48:44:60:b3:
9e:57:af:83:e7:3b:00:01:5e:da:04:c6:0c:f3:17:
44:ac:33:2b:85:46:b5:1f:13:72:44:23:ee:3d:33:
e7:df:4f:a0:88:e5:66:69:42:00:fb:96:56:01:d7:
84:a2:27:d3:85:11:a5:44:f3:b4:e2:95:5b:67:42:
08:31:6c:c7:b1:a7:b9:f2:af:9b:95:e3:e3:99:9f:
bc:e8:e4:40:35:36:8f:29:54:28:14:06:ed:eb:92:
12:af:23:11:0c:2d:e0:81:15:f0:b9:f9:8e:b2:0e:
ed:d6:a8:38:76:e1:44:0b:76:4f:d7:a1:dd:5b:c7:
38:b8:bd:d4:c7:82:72:9f:90:d2:b7:ef:f0:57:6d:
22:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:06:4B:5D:7A:9F:1A:26:C4:1C:AA:79:A5:DC:BA:7B:F9:41:20:D2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/55182b76-cd4f-469e-b03e-f88479c7d323.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:b000::/40
Signature Algorithm: sha256WithRSAEncryption
7e:a3:25:52:fe:bb:e3:f1:4b:27:31:51:c2:75:ff:98:49:59:
5b:1c:6f:31:b0:09:e1:df:80:68:eb:c1:f4:db:dd:cd:83:29:
66:40:dd:ab:d7:03:1d:05:c9:c4:60:6f:86:7f:32:2b:39:91:
07:b2:aa:10:36:b9:06:99:ba:98:a8:30:59:91:cb:a7:8c:ef:
a7:7b:77:fd:fc:a8:bb:e4:42:cc:47:ca:29:85:b3:9d:07:eb:
73:83:d9:c2:7d:d7:69:e6:6e:ba:c8:a3:74:27:98:7d:ab:0b:
cb:ec:62:9e:6e:13:87:6b:a0:30:77:e6:a4:8f:6e:e1:a8:1a:
97:e5:ca:6e:9a:40:ed:47:6d:77:9b:f3:ad:91:1e:bd:0a:5f:
3a:36:fe:69:a2:a0:33:c9:d7:42:9e:81:19:3e:52:11:62:48:
a3:2f:24:8c:87:a1:08:08:34:4c:f8:df:28:5f:92:e9:a6:cb:
a7:f1:0b:33:04:c2:12:21:a8:53:a6:e0:6c:e8:f4:36:cd:ba:
15:3a:2e:f4:16:d1:1f:f4:f0:ef:20:04:6e:89:0d:47:f9:b6:
cf:18:f1:08:7a:2b:61:1d:bf:bc:3b:1d:87:b0:9c:66:50:70:
dd:84:df:94:ac:86:fd:4e:19:28:47:5f:ea:35:9d:03:5b:61:
44:cb:d8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:12 2025 by rpki-client