Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58d3d0e3-44a1-4172-b9bf-138a61abfdf2.roa
File: 58d3d0e3-44a1-4172-b9bf-138a61abfdf2.roa (raw, json)
Hash identifier: xaeDyekw83mFFqW49dAzS2mXtE6O0+ichsZl9sRVmXY=
Subject key identifier: 37:B8:99:65:B0:14:E6:AC:18:AE:A3:F3:95:DA:ED:21:66:67:01:F5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 44B8966E9E16FBE6128D1E2E8ED52338ED90A2A1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58d3d0e3-44a1-4172-b9bf-138a61abfdf2.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:8000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:b8:96:6e:9e:16:fb:e6:12:8d:1e:2e:8e:d5:23:38:ed:90:a2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:66:8a:a7:a4:69:dc:21:88:fb:7c:31:c7:
ca:ca:ba:3d:e3:ce:14:55:db:20:bb:65:2d:bc:57:
31:a6:37:96:37:e1:44:d7:b4:7c:12:87:2d:04:df:
47:53:40:c5:c5:0a:e4:11:6b:a5:a3:f0:17:3d:36:
72:ff:54:85:b9:30:d9:03:50:05:fb:94:c0:70:18:
1f:52:94:7d:b7:d7:b5:a8:30:c0:c8:c8:e4:1c:8b:
37:21:f5:ed:a4:09:04:0c:27:61:1d:df:09:6e:e5:
7c:90:57:ce:d1:5e:60:a2:bf:90:21:95:a2:42:16:
96:49:a1:4d:17:50:11:9c:ef:0c:de:13:dd:27:2d:
2f:f5:a8:b9:df:c4:96:58:dd:7d:d5:cd:9f:8b:a0:
c5:c0:bd:30:03:ce:2d:03:7b:63:18:e8:dc:93:b5:
76:74:09:90:48:70:60:34:f1:f9:cf:95:8c:00:0d:
e7:ce:f9:d6:9a:12:32:05:20:1a:67:53:87:0f:11:
3f:e6:99:68:a8:b7:9a:c0:ea:04:75:6e:5f:96:0a:
55:e9:86:67:68:c7:d5:50:94:fb:de:fa:68:24:c8:
7a:b7:ea:b5:f2:7e:a1:ec:d6:b1:0e:25:06:5e:cc:
cf:4b:88:ee:c2:83:ad:e8:08:4f:f3:f6:2c:4a:9d:
e8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B8:99:65:B0:14:E6:AC:18:AE:A3:F3:95:DA:ED:21:66:67:01:F5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58d3d0e3-44a1-4172-b9bf-138a61abfdf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:8000::/40
Signature Algorithm: sha256WithRSAEncryption
a0:ed:bc:4d:3f:50:92:81:14:1e:1d:9a:52:3b:43:54:d8:7a:
1e:f4:60:11:b5:6d:1a:a1:f8:08:2f:1b:b5:f3:13:cc:b6:be:
51:6b:3c:aa:04:86:56:de:c4:a0:af:42:9a:72:59:a8:45:22:
14:81:00:e9:5e:7a:97:05:10:3a:15:c0:16:6a:0b:8d:86:7c:
04:ee:c5:96:b7:e7:12:de:d0:c2:90:2a:f5:a6:97:2c:ab:f3:
05:51:e7:8e:66:49:f2:fa:f2:41:bc:f1:e3:e0:23:ad:91:3b:
b3:c2:29:39:a7:88:86:cf:02:79:39:8e:4c:23:9d:60:34:73:
8e:33:0a:6c:f2:3c:80:14:b2:48:cd:83:58:3d:ee:77:47:db:
1a:e0:3d:c2:d7:b9:62:11:9f:a6:b9:5a:d1:d7:51:9d:25:71:
29:9e:3d:70:b1:0f:eb:0c:78:f3:fc:3d:0a:7f:36:a6:f9:89:
53:bf:74:97:ef:e3:93:02:ec:5d:77:56:cd:60:e1:f2:51:f7:
e3:1d:61:2f:d9:fe:b5:c3:2c:34:31:c3:85:56:a2:22:02:fa:
f1:b8:2e:9d:93:05:11:a5:df:0a:ee:76:15:37:66:55:44:f1:
7e:fb:45:19:f2:6d:9e:8b:8c:76:ee:06:d9:5f:8b:a6:25:2f:
37:55:a1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:19 2025 by rpki-client