Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dbb4489e-e204-425d-985d-41d46f882454.roa
File: dbb4489e-e204-425d-985d-41d46f882454.roa (raw, json)
Hash identifier: 9nJnVCwGq47Q/CvN3D4abZO5XefQCPkptBDhvbSa49A=
Subject key identifier: F8:75:A5:39:F8:B8:6E:6C:E5:96:3D:BE:A7:68:71:19:E5:CB:76:DC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 51D437ABAE1E720D1CDD45F55419F1DC816E70B8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dbb4489e-e204-425d-985d-41d46f882454.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:8000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:d4:37:ab:ae:1e:72:0d:1c:dd:45:f5:54:19:f1:dc:81:6e:70:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: serialNumber=4fc71ea60726bafb9a5bdad3c00d8228d1749a88ff71d804e11f26f87bb81b3a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4d:0c:90:f7:b7:53:14:36:ff:0e:38:8f:b0:
b3:c6:16:5b:35:cf:16:76:f2:84:ff:4a:33:75:b9:
42:6d:bf:a5:ef:71:4d:ef:47:7b:ad:a2:55:13:da:
78:02:5f:2d:ed:d2:4a:ba:a0:12:e9:ad:c7:4d:97:
c5:3b:41:84:23:0a:f9:82:25:39:cc:8f:d8:18:66:
1a:cc:21:1a:c4:d1:a6:60:96:c4:56:bf:88:fc:36:
66:8d:ea:b0:c4:03:19:3b:56:58:c0:c6:2d:59:ef:
2f:56:a6:0b:74:cd:d5:71:1d:ab:8d:49:89:ba:cf:
9f:56:b6:14:87:57:a6:82:8e:e2:a7:d5:73:52:45:
4e:57:86:0b:28:59:bd:87:42:38:74:29:57:f7:4e:
3d:54:00:33:9b:42:67:79:23:0d:ca:4a:36:05:82:
61:ec:9b:db:0b:64:4e:47:2f:eb:a9:0c:7a:c6:37:
50:36:e1:3d:3f:9e:fd:4c:99:b7:a1:ee:19:01:31:
85:ef:de:13:c0:45:f2:6a:78:9f:2d:07:44:00:c7:
60:48:23:51:dc:58:09:2d:30:6b:55:bc:8d:71:c1:
81:b6:96:27:d0:6a:25:14:28:02:0d:d9:5f:29:3a:
cd:8f:6f:28:22:84:e6:bd:4e:1b:58:8c:2c:65:b9:
5f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:75:A5:39:F8:B8:6E:6C:E5:96:3D:BE:A7:68:71:19:E5:CB:76:DC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dbb4489e-e204-425d-985d-41d46f882454.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:8000::/40
Signature Algorithm: sha256WithRSAEncryption
17:da:ae:2e:3c:4e:44:df:0b:d5:13:9e:73:98:ec:12:2b:60:
59:28:12:5f:db:59:98:95:f6:6d:66:a7:a4:bb:48:8e:db:1e:
a9:13:9e:5f:89:a9:27:1b:4d:ad:8e:29:be:40:9b:b9:34:eb:
75:9e:42:a4:7a:fb:38:bb:59:f0:33:a3:44:f2:1f:71:30:cb:
27:3e:43:c8:da:90:83:3a:25:a2:05:61:1c:1f:e2:9f:21:d1:
33:1f:e5:09:49:c5:f3:91:53:bc:4e:c2:bc:94:58:19:da:f3:
d3:6d:1c:e7:e4:d5:b6:b7:7b:88:e2:82:3d:f1:84:11:2a:eb:
e9:a2:b4:7d:41:13:af:a7:c1:41:30:a4:4c:0d:86:2d:3d:cb:
66:46:e7:40:50:96:ca:2c:09:86:96:60:8d:c6:56:cc:7d:64:
22:3d:1b:a1:21:2a:5b:d2:39:72:ee:76:96:6b:74:3c:61:a0:
70:04:05:ce:d1:96:7a:c3:8b:0f:7b:cf:b0:b7:f7:0e:d5:57:
cc:bf:c0:4c:ec:37:84:63:b8:fe:b4:66:1a:1d:d4:b8:4f:40:
58:e8:8a:05:a5:5f:82:9b:c6:36:ee:ae:17:e9:c4:b5:51:c8:
eb:df:3a:7c:aa:6b:bb:f4:d8:58:81:5a:eb:b5:6b:1c:82:8d:
ab:d1:ec:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:10:22 2025 by rpki-client