Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5bcb30c5-2ff7-4730-914b-9d1a18172246.roa
File: 5bcb30c5-2ff7-4730-914b-9d1a18172246.roa (raw, json)
Hash identifier: zGIeut+hNvAv53R1lgOSawYbASW9Cq37r/TS3dawBvI=
Subject key identifier: CB:D3:A0:E8:A8:2A:EA:4F:33:30:88:4E:A8:3E:39:D9:23:B7:9A:3D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3E311667F8D53EB89A722D0CD63FEA26C835B9DD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5bcb30c5-2ff7-4730-914b-9d1a18172246.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:5000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:31:16:67:f8:d5:3e:b8:9a:72:2d:0c:d6:3f:ea:26:c8:35:b9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b6:eb:a9:e0:6f:60:42:43:23:8e:99:a2:be:
0f:88:6f:4d:73:7c:b7:9e:27:d0:6a:9a:e6:28:2c:
4b:36:d9:c8:50:1e:3a:29:e5:9f:1c:91:8a:6f:e2:
2c:a2:15:b9:c6:af:1e:ce:d6:0f:a7:e2:c8:0b:36:
2f:a5:4b:8b:79:bc:79:bc:88:eb:87:96:a4:8c:cf:
7e:39:ec:a7:de:0c:25:c5:39:c0:07:ee:3a:a6:b8:
92:ef:e2:2d:46:4f:d1:a6:fd:f5:a2:e4:8f:65:da:
7c:da:e0:51:cc:59:7e:68:ae:24:6d:12:ff:d8:81:
79:32:3c:bd:2e:c6:01:6d:85:f9:b1:b7:97:3b:93:
1c:a1:58:e1:98:1d:fc:a5:02:28:ac:74:10:7e:34:
81:b5:f5:c9:c6:2b:0a:27:fb:62:19:2f:1d:26:cc:
68:a4:b9:a3:53:48:ff:5a:91:40:67:5f:f6:cf:69:
2f:a9:f2:4b:67:f1:d0:77:d3:e5:cd:14:24:b6:79:
9c:18:f6:26:2f:3c:87:7e:64:81:6c:d5:ef:04:07:
5e:1a:13:fe:1e:d0:b7:04:2b:ae:da:be:be:f6:dd:
d8:e0:fb:97:5c:07:bb:56:84:37:32:a3:69:76:50:
f5:24:ed:4f:3a:6d:fc:46:eb:5a:76:93:93:35:a5:
26:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D3:A0:E8:A8:2A:EA:4F:33:30:88:4E:A8:3E:39:D9:23:B7:9A:3D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5bcb30c5-2ff7-4730-914b-9d1a18172246.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:5000::/40
Signature Algorithm: sha256WithRSAEncryption
21:9e:7c:48:99:bd:97:ec:1d:95:c6:9a:83:17:84:99:8b:16:
cc:b3:64:0c:2c:3e:a2:75:34:76:35:44:09:fe:38:b5:b5:b1:
94:b9:e8:a3:2f:9c:ac:35:af:e7:df:6a:49:24:cf:38:bc:1f:
c9:ad:6f:4f:66:4e:f6:46:a5:c6:a0:e8:ba:d6:be:70:7a:6a:
eb:5e:12:74:27:8f:1d:02:49:a9:cd:82:e9:86:6e:ce:f9:60:
4f:20:08:5e:75:d2:ed:87:b3:c5:d3:0c:c2:46:c2:bc:04:a2:
43:55:d1:57:43:d5:01:e2:6f:06:d6:61:a0:2f:d1:86:f0:d0:
43:4f:01:51:2b:a4:3e:98:0f:e6:e3:c6:55:1c:48:69:ee:f4:
6c:3d:39:10:43:13:51:9f:96:04:dd:dd:e7:e9:de:f6:01:eb:
b4:4e:94:00:f5:75:1b:79:d3:5f:80:fa:7f:3b:3e:fb:ac:17:
9f:ce:3a:68:00:a4:29:4a:01:2b:b9:8d:37:75:3e:f1:a6:56:
ad:24:97:1c:93:40:bc:95:46:42:a9:d0:8e:f8:a1:bd:6a:59:
7b:eb:e8:16:f9:e8:be:2b:0a:d6:80:3d:19:00:83:28:c8:40:
f7:16:5c:6b:36:e2:51:56:80:40:a3:0d:ef:25:10:59:c9:3e:
59:26:7a:23
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUPjEWZ/jVPriaci0M1j/qJsg1ud0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDYwMDAwMDBaFw0yNTAyMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQGEyNjQ4ZTFiZDY1YzY4ZWIxZDM5ODdmYzIzNzYxZDlhNTg1ZGY3NGZmMGNk
ODU5OTFjMmQ2ZTEzMGY2NDU5MDYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIa266ngb2BCQyOOmaK+D4hvTXN8t54n0Gqa5igsSzbZyFAeOinlnxyRim/i
LKIVucavHs7WD6fiyAs2L6VLi3m8ebyI64eWpIzPfjnsp94MJcU5wAfuOqa4ku/i
LUZP0ab99aLkj2XafNrgUcxZfmiuJG0S/9iBeTI8vS7GAW2F+bG3lzuTHKFY4Zgd
/KUCKKx0EH40gbX1ycYrCif7YhkvHSbMaKS5o1NI/1qRQGdf9s9pL6nyS2fx0HfT
5c0UJLZ5nBj2Ji88h35kgWzV7wQHXhoT/h7QtwQrrtq+vvbd2OD7l1wHu1aENzKj
aXZQ9STtTzpt/EbrWnaTkzWlJssCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTL06Do
qCrqTzMwiE6oPjnZI7eaPTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NWJjYjMwYzUtMmZmNy00NzMwLTkxNGItOWQxYTE4MTcyMjQ2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HtQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAhnnxImb2X7B2VxpqDF4SZixbMs2QMLD6idTR2
NUQJ/ji1tbGUueijL5ysNa/n32pJJM84vB/JrW9PZk72RqXGoOi61r5wemrrXhJ0
J48dAkmpzYLphm7O+WBPIAheddLth7PF0wzCRsK8BKJDVdFXQ9UB4m8G1mGgL9GG
8NBDTwFRK6Q+mA/m48ZVHEhp7vRsPTkQQxNRn5YE3d3n6d72Aeu0TpQA9XUbedNf
gPp/Oz77rBefzjpoAKQpSgEruY03dT7xplatJJcck0C8lUZCqdCO+KG9all76+gW
+ei+KwrWgD0ZAIMoyED3FlxrNuJRVoBAow3vJRBZyT5ZJnoj
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:46 2025 by rpki-client