Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/905bb587-bceb-45a9-857c-944564030c20.roa
File: 905bb587-bceb-45a9-857c-944564030c20.roa (raw, json)
Hash identifier: e6Rhamx07ABRwagHZagmRap3/VY1q0DiqOVH4I2miSA=
Subject key identifier: 50:40:C4:CA:2C:B5:AB:7B:BF:FF:46:3D:DE:D0:C5:9A:76:4F:0D:65
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 510BC77633883E71F24C06E0D88290F59E00CB9E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/905bb587-bceb-45a9-857c-944564030c20.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:2000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:0b:c7:76:33:88:3e:71:f2:4c:06:e0:d8:82:90:f5:9e:00:cb:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:c0:c2:2d:25:e8:5e:71:94:b3:94:e7:c0:
ad:33:ba:d9:8a:af:50:41:c0:56:19:b9:cf:12:07:
d1:f0:0d:c2:77:53:df:73:10:2c:a6:4f:c4:9a:cc:
54:32:5c:ca:0d:1b:ea:ff:68:45:3a:42:4c:be:21:
8d:f3:da:3d:39:17:26:6c:05:74:43:8f:04:ff:6d:
72:35:df:8d:e0:2b:ef:da:4b:44:58:7a:de:b5:19:
32:91:b5:93:00:e4:c3:68:54:d2:1e:c4:c8:99:63:
a1:27:1f:25:9d:28:ee:25:6b:b1:74:36:60:68:43:
e8:96:c8:ee:52:3f:ed:6e:8e:0b:a7:b2:25:49:6b:
6b:f6:aa:ba:40:7e:cc:f5:c5:8a:82:ee:28:cb:4a:
b9:30:73:62:ef:1b:5e:0d:6c:c0:80:f4:f0:eb:8f:
7a:d8:fb:7b:8a:fd:e3:02:a6:26:cf:a1:a2:97:49:
0a:2e:b2:cc:ac:c5:d9:f8:93:c4:ca:86:34:8a:03:
07:fa:64:49:bc:2e:b7:aa:79:b7:c1:a4:1a:f3:50:
8f:09:43:75:bc:3d:00:bd:21:b6:37:56:f2:7c:c0:
5c:0c:7f:80:57:20:5f:0a:b8:2e:01:0d:5d:cc:84:
a4:a5:c4:95:cd:98:f0:2b:3e:6e:a2:1a:1f:34:20:
9b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:40:C4:CA:2C:B5:AB:7B:BF:FF:46:3D:DE:D0:C5:9A:76:4F:0D:65
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/905bb587-bceb-45a9-857c-944564030c20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:2000::/40
Signature Algorithm: sha256WithRSAEncryption
7c:67:2a:1c:47:e0:6d:2d:77:b7:c6:54:0a:5c:af:f1:ae:32:
d7:61:bd:18:45:a1:10:c2:09:66:25:cb:cf:62:d6:65:2c:c8:
91:66:88:ad:ac:12:9a:cc:78:37:0b:7e:9f:70:f0:78:e8:12:
83:48:ef:52:57:87:44:6b:2e:1c:2c:4c:10:11:ee:d0:c5:34:
77:dc:5c:64:d7:f8:ec:52:aa:eb:f7:44:16:67:85:1e:1a:ce:
a6:d8:3e:e7:58:1a:e5:7d:5d:0d:55:ff:8a:ed:9e:31:03:ed:
c8:fe:dd:dc:92:33:ee:b3:30:be:58:85:1e:b0:9f:45:6d:ea:
db:3a:da:36:d1:e7:6d:57:d0:74:c7:ec:bf:61:35:ea:9d:59:
45:03:2d:ef:20:e6:dc:57:7c:04:36:a9:cc:2a:3e:24:b8:7b:
76:9b:07:9a:2e:0c:ec:03:79:c9:35:0c:10:db:6e:5d:7b:ee:
3e:f7:0e:ea:22:a4:80:b2:20:8e:5d:4e:06:90:3f:4f:dd:a4:
c7:54:38:b3:c8:5d:24:b5:de:62:17:98:3f:37:9d:6f:12:6b:
e4:67:75:71:33:94:1c:33:ee:92:1e:8e:29:b2:f5:cb:e3:b7:
47:43:09:87:0d:27:46:09:1d:08:b6:2e:48:10:fd:a6:e3:2a:
35:06:d7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:30 2025 by rpki-client