Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9dd76c15-3765-4341-a0f2-8b0872cdedb8.roa
File: 9dd76c15-3765-4341-a0f2-8b0872cdedb8.roa (raw, json)
Hash identifier: VZrQy0iTSuB5UIPBSvFDCJtDIQjPKFd2G6xGKoNrVJo=
Subject key identifier: D3:A1:23:47:BC:2C:9E:3B:64:E1:03:AA:60:2A:85:10:CE:7D:28:07
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 61F0735700CA177E9BA0A2DDF593265B4A667904
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9dd76c15-3765-4341-a0f2-8b0872cdedb8.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:6000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:f0:73:57:00:ca:17:7e:9b:a0:a2:dd:f5:93:26:5b:4a:66:79:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:64:e9:57:eb:2d:bb:bc:91:67:d9:9e:46:72:
77:6d:6c:18:78:a9:c8:cb:3b:49:dd:ee:84:c9:b9:
87:bc:1e:84:a2:7a:f4:0d:81:8f:c5:e2:b0:50:50:
f7:8e:94:22:c2:2c:9a:b5:63:88:54:53:89:a8:5e:
e6:5f:86:3f:c3:eb:fe:03:0e:6e:04:dd:84:25:b8:
c6:53:ee:26:78:2a:81:2f:7e:0a:9b:79:c6:aa:17:
4f:21:50:fe:a2:55:61:8c:cb:7f:b4:78:2a:fd:e4:
7d:c7:11:10:68:3e:ba:b4:d1:c4:35:78:61:99:2f:
03:e6:78:8e:11:ed:a3:cd:4d:93:61:4e:bb:f1:38:
b0:dc:18:7a:c8:a6:54:7d:51:20:8e:ba:a6:63:6b:
53:3f:fa:16:b0:08:4c:ff:99:6c:3e:9a:7b:fd:bf:
24:16:60:c7:05:3a:7d:6c:e9:db:ab:6d:60:ff:61:
6b:30:31:eb:c6:15:d7:c8:53:60:33:02:76:1f:56:
75:80:a9:9e:d7:54:e1:e7:2d:27:fa:80:4d:00:ac:
9d:23:37:ff:16:97:42:a8:5b:fe:18:b6:68:7c:2b:
07:20:06:f7:2d:5a:70:b4:c5:bc:aa:ac:35:76:97:
7b:32:10:4a:40:0f:8d:ee:4a:7d:f9:57:5b:7e:44:
bc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A1:23:47:BC:2C:9E:3B:64:E1:03:AA:60:2A:85:10:CE:7D:28:07
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9dd76c15-3765-4341-a0f2-8b0872cdedb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:6000::/40
Signature Algorithm: sha256WithRSAEncryption
13:bc:e2:36:dd:5f:5b:e3:8f:32:a7:c8:e0:91:69:2b:3d:bb:
b8:55:39:f3:87:0a:7a:01:cf:80:f4:52:72:cc:6c:8f:69:3c:
51:9c:16:47:bd:96:b1:bb:26:7b:c3:97:81:4d:d5:0a:da:41:
c0:a4:67:b1:f4:ff:6b:11:73:84:56:f9:66:30:e7:7b:a3:af:
76:55:f5:44:e0:b3:6b:e8:a4:41:52:a4:88:b4:c2:6f:6d:f7:
73:c4:a5:da:00:69:ab:0f:d1:d6:d7:4f:9e:06:c2:6b:15:f5:
ff:04:e3:83:fc:1f:c2:9f:43:28:27:d6:86:3f:64:20:6c:13:
37:4c:a9:c9:41:b4:35:ed:7e:13:16:67:f0:8a:e3:11:c8:6b:
bc:b9:8d:c8:45:52:49:62:8c:d5:49:17:c3:7d:ce:fa:52:31:
9f:a1:37:94:d5:42:dc:7f:7f:86:84:c2:38:65:5d:db:b7:ab:
0b:76:cf:73:e4:fd:a7:87:6b:07:52:e0:fa:69:01:f7:eb:72:
a9:f1:eb:58:4e:1e:b1:a4:b5:a6:dc:3a:2b:44:eb:20:90:6b:
5a:b1:5c:3b:0f:02:a2:cb:44:01:b5:f6:1c:51:82:96:aa:91:
a8:a8:3b:5c:a8:8f:f3:f1:39:8c:b0:22:05:45:25:ff:f7:7c:
24:b6:25:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:51 2025 by rpki-client