Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/683a6571-9667-4864-9f7e-71f16a7bcb81.roa
File: 683a6571-9667-4864-9f7e-71f16a7bcb81.roa (raw, json)
Hash identifier: HqJCuo3MD8zOSVjEfTtE1xQFtyjO/pvBrqvYMP9SW1I=
Subject key identifier: B7:87:B3:9A:86:64:5C:80:D7:53:D5:72:4F:E5:98:24:D2:7A:1D:D2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: F28879283E34F7555C8C6A7331ED7666ADBFF8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/683a6571-9667-4864-9f7e-71f16a7bcb81.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:a000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
f2:88:79:28:3e:34:f7:55:5c:8c:6a:73:31:ed:76:66:ad:bf:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:7d:44:46:d8:d2:6d:4d:d0:10:7b:c5:bf:
91:c7:d6:88:23:17:8f:1f:99:c2:67:d6:43:bf:91:
13:91:ef:e9:4f:9c:16:e3:c7:0d:7e:df:d9:38:ef:
6c:b6:a8:bb:d2:bf:32:8f:b9:eb:d3:0c:98:15:2d:
e5:08:99:fa:9b:88:b2:33:6f:09:7d:0e:e6:7a:db:
7d:a5:d0:37:dd:97:32:de:84:35:18:90:ef:e8:ad:
61:af:1f:4b:f8:d7:c8:29:22:3d:23:1b:dd:52:95:
5e:32:9b:c2:51:3c:fe:fb:03:fb:d5:1f:2f:40:85:
de:0f:28:d4:43:09:6f:7d:56:98:81:65:2f:a3:30:
26:2c:25:ac:2b:9f:14:6e:28:fb:71:79:fb:0e:97:
63:86:08:6e:70:92:52:93:48:e2:28:db:36:7b:95:
dd:80:f6:f6:17:3e:44:1d:b1:25:6f:2e:f2:35:7c:
23:0d:98:ba:75:5a:c9:97:f1:2c:f9:00:c3:f8:da:
7f:73:e7:df:c5:45:02:db:3f:d1:2f:5e:8a:2a:63:
e1:4a:03:9c:20:d0:e3:0f:1f:f0:6a:1b:4c:a4:de:
ab:b2:de:3d:4b:b9:6f:f2:36:31:54:3e:dc:89:75:
05:b8:3d:d4:60:f8:d6:4a:e6:45:8e:af:04:83:49:
03:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:87:B3:9A:86:64:5C:80:D7:53:D5:72:4F:E5:98:24:D2:7A:1D:D2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/683a6571-9667-4864-9f7e-71f16a7bcb81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:a000::/40
Signature Algorithm: sha256WithRSAEncryption
0d:34:94:6b:91:46:36:9c:57:6f:29:7a:f1:ff:28:3e:a7:98:
1e:e6:9c:d7:de:60:c2:4b:62:ea:a5:4d:81:2b:8c:9e:5c:f3:
ee:be:42:09:87:b8:f0:72:23:e5:9a:3f:73:c8:c9:24:9b:c8:
d2:6b:56:b3:21:f8:02:c5:b3:ca:87:f5:44:f7:44:46:69:d5:
96:8a:82:a5:d1:69:98:e9:ac:9c:64:b4:7d:ea:45:da:15:ad:
a8:bb:41:8f:73:56:20:09:52:c4:12:8c:32:41:5a:d1:1c:c0:
ec:6d:98:ff:8b:55:29:59:f6:0a:cc:a9:e9:69:81:bb:18:90:
7d:e5:28:e1:1e:bf:43:c9:6b:66:18:10:3b:5e:32:09:79:e7:
4e:e9:bc:d7:eb:85:b1:5b:22:7e:62:79:c5:fe:e8:4c:2c:54:
c1:f0:ab:18:96:ab:cb:9c:e7:93:13:fa:fe:5b:2f:70:9e:3f:
cf:3c:9f:62:b5:96:a3:0f:75:ac:a3:57:c3:c6:aa:a1:27:cd:
af:1d:eb:67:e4:9c:4b:0d:77:98:e6:f4:0d:aa:c7:47:20:53:
b0:5b:18:f7:f1:68:45:d0:bd:3a:dc:fb:ce:ba:f5:c9:e7:81:
80:77:e8:52:b7:59:71:02:37:cb:9d:95:ab:b2:92:e3:50:b3:
64:08:ab:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:32 2025 by rpki-client