Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73cde438-0645-4a6f-883e-f9a7517dde97.roa
File: 73cde438-0645-4a6f-883e-f9a7517dde97.roa (raw, json)
Hash identifier: AJ/wXpA9J8w2H3s8cgl1yYPo41qP+xW5V4DhY5y74n0=
Subject key identifier: EB:2A:57:4E:F5:56:FF:7D:AA:D7:01:D1:CA:6D:83:F6:CE:1C:F0:C1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 18959F9C220DA1EEAD583F6B36C4AFCF8120400C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73cde438-0645-4a6f-883e-f9a7517dde97.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:c000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:95:9f:9c:22:0d:a1:ee:ad:58:3f:6b:36:c4:af:cf:81:20:40:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:2e:5d:64:f6:e2:02:15:d1:57:cb:fb:a9:
82:59:b3:de:7f:43:55:39:fa:a3:80:e9:4e:49:ad:
28:e5:bd:97:ef:d2:6b:73:89:7a:dd:ff:76:a4:c4:
ed:38:6a:97:45:93:fd:c6:d5:7d:3e:ba:30:d6:76:
56:37:71:83:93:fb:f5:74:f7:07:cc:cd:56:71:40:
a8:52:30:cf:bb:fd:e2:90:fa:29:c2:fe:01:0e:1e:
af:43:01:f7:ab:a1:14:b5:48:c0:38:ef:56:52:4b:
ed:ca:f8:57:a9:71:7c:33:52:34:14:03:30:80:df:
02:b6:f3:4a:e1:10:63:75:0a:83:31:a4:3b:c9:21:
ec:e9:73:be:0a:d9:d7:b7:3e:5a:35:ca:14:a8:86:
0c:7d:95:1a:17:dd:8c:35:b8:a8:36:ad:17:09:c6:
71:1b:22:28:14:55:bf:26:4c:21:13:73:93:c7:e7:
69:e1:d7:c8:a0:5a:63:bd:e6:84:3f:68:f9:65:63:
bf:ae:35:f6:fc:98:47:8b:83:92:de:51:0e:28:a2:
c1:19:3c:cf:e2:21:01:3f:a6:b8:c1:26:4d:47:0b:
bc:53:7a:7b:1b:be:13:fc:3f:ea:30:0a:56:5f:0a:
50:d6:f1:94:83:fa:91:6f:f8:f1:e3:cc:cb:53:ec:
4e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2A:57:4E:F5:56:FF:7D:AA:D7:01:D1:CA:6D:83:F6:CE:1C:F0:C1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73cde438-0645-4a6f-883e-f9a7517dde97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:c000::/40
Signature Algorithm: sha256WithRSAEncryption
75:d9:73:a6:58:be:e5:3a:e2:47:ab:03:4d:50:8c:16:6e:15:
97:6c:0a:c5:00:11:b2:e3:8c:38:de:84:6d:63:35:19:3c:3f:
3e:47:f3:8a:72:2a:d2:1c:0e:6a:cd:d5:b5:d8:14:8a:72:c4:
66:34:92:fe:f1:21:aa:8e:fd:ea:80:fb:e0:20:b2:f6:e1:e2:
19:26:36:10:60:e1:27:f7:92:7f:c9:4b:6f:28:3b:21:83:b2:
85:a7:9a:2a:6f:96:a1:15:f9:c9:f2:f9:b7:fb:e1:e8:80:45:
77:22:f0:63:eb:8c:42:cc:50:89:d0:a7:0c:dc:79:85:96:4b:
f2:1d:30:04:9e:a2:ab:a7:12:94:6e:b5:1c:5f:06:42:37:64:
32:5f:0f:6a:01:cb:4d:26:a8:c4:29:f2:81:db:f1:b7:92:00:
af:e6:dd:95:e2:0e:d1:88:3d:2d:37:24:5f:cf:d0:b7:3f:12:
bf:10:f8:d0:e8:2a:3f:a6:a8:1c:4e:63:8d:f6:48:2e:7c:98:
1d:b4:e0:ab:44:80:5a:6d:1d:9d:5b:d0:bd:5b:2c:41:29:a6:
66:09:94:0b:2b:0f:a4:0e:d6:a6:c4:64:b2:6b:ec:ab:34:56:
1b:ef:a2:3e:5c:ad:77:ff:e9:a5:a2:dd:f9:3e:ec:e5:e6:a7:
42:13:a1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:45 2025 by rpki-client