Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4d73790-6202-486d-8585-dd95418e8d44.roa
File: d4d73790-6202-486d-8585-dd95418e8d44.roa (raw, json)
Hash identifier: 4Z8O8i5MjRY1OPsaOJLagubHPSa3EVtjQB+fUQwy198=
Subject key identifier: C7:74:60:B0:0F:7D:B2:D0:E5:21:9A:0A:15:76:6E:87:40:F1:B3:B6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 744C4934F53E4543AEAB30F22E872A8A440450FA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4d73790-6202-486d-8585-dd95418e8d44.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:a000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:4c:49:34:f5:3e:45:43:ae:ab:30:f2:2e:87:2a:8a:44:04:50:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:7e:be:c0:9a:95:5b:49:7a:6d:98:09:06:
21:ea:69:a9:3b:04:16:b3:13:21:8b:fc:83:4e:21:
78:6e:04:db:ba:ff:db:f4:4b:c1:b7:3f:67:2c:80:
32:d8:27:95:fc:5c:96:73:79:a1:56:46:30:85:85:
72:5c:f1:57:fa:4e:e3:a1:e4:09:a6:3b:f3:be:4e:
c3:93:4d:58:c1:83:8c:40:99:90:86:e3:04:39:b8:
ba:21:37:f6:96:8e:af:fc:66:2c:ff:4c:d6:eb:28:
38:60:9a:c7:dc:1f:6d:55:e2:95:82:21:87:25:fb:
58:c0:2e:0b:13:f5:af:0c:c8:fc:48:1e:ef:cd:53:
75:7f:0b:d4:a2:a5:d5:e1:98:1e:77:2c:82:ef:32:
27:6b:70:fe:b1:20:33:77:b0:f1:7c:dc:34:4d:db:
71:6f:6d:6d:7a:6a:49:90:b7:2b:69:6a:1e:08:c5:
f8:47:db:28:1a:28:40:db:a9:c6:52:32:ab:e0:0f:
b2:9c:49:52:d7:fc:e6:b3:8b:92:68:fa:ae:ec:5e:
12:35:00:68:55:fe:55:88:1f:87:c7:4e:b0:0a:a4:
d5:e0:a6:7e:48:b7:d2:ed:c9:22:e4:22:66:19:20:
2d:87:ff:f9:f2:ea:d3:26:b0:7b:21:58:73:28:19:
ce:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:74:60:B0:0F:7D:B2:D0:E5:21:9A:0A:15:76:6E:87:40:F1:B3:B6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4d73790-6202-486d-8585-dd95418e8d44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:a000::/40
Signature Algorithm: sha256WithRSAEncryption
b1:b6:f8:81:3f:9d:74:a9:aa:b7:e3:74:16:3f:b9:8b:07:85:
b8:55:ad:b0:d9:8b:69:98:5f:34:2d:9e:69:96:00:89:30:dd:
37:4d:a5:91:1f:b1:e1:57:7b:8e:55:ba:19:cf:2c:45:bb:78:
22:8f:fe:7d:e7:b4:d3:2e:6b:26:29:81:c3:35:a7:15:40:4c:
24:8b:d8:fe:b7:65:2e:da:49:fe:2c:01:a7:1e:d3:8a:16:89:
a6:b6:b6:ac:6a:a9:76:23:f5:f6:39:80:8f:bb:1e:c4:f0:7b:
e3:0b:f7:03:c9:f5:41:29:92:46:48:1a:66:1b:fb:8f:2f:bc:
94:13:dd:73:4e:e6:04:8f:10:79:95:c4:3c:a7:2b:99:a5:37:
aa:37:ff:7f:3a:6b:fe:63:b6:46:af:a6:a8:0e:42:d8:89:cf:
9c:1c:8a:e2:23:65:d9:e0:89:bf:4e:d7:3b:04:a9:f1:41:c2:
73:ad:28:01:c7:a1:29:3f:83:58:f1:e1:37:1c:e7:54:61:48:
89:81:fd:09:74:4f:e3:d7:41:2f:18:6c:12:ee:40:bb:f8:fa:
b1:c4:a7:a2:ca:c3:0e:55:f6:c3:97:9a:92:99:2b:76:31:e6:
03:0b:3d:f6:2a:af:4b:dc:48:af:c6:25:21:57:d9:85:97:29:
e0:59:5a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:29 2025 by rpki-client