Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df0b6887-2704-40c5-bcf0-969d58228c11.roa
File: df0b6887-2704-40c5-bcf0-969d58228c11.roa (raw, json)
Hash identifier: nAZTnUZbTn/vHrtyD1+1r891xU1Bdc2jdsdGASfkZXk=
Subject key identifier: 6F:9B:89:C6:A3:9C:D0:DD:91:54:AB:1D:3C:56:9A:41:0B:09:2D:F1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 139A8FE0E77233CA1D911CD2999EA915F97BAACF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df0b6887-2704-40c5-bcf0-969d58228c11.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:5000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:9a:8f:e0:e7:72:33:ca:1d:91:1c:d2:99:9e:a9:15:f9:7b:aa:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:40:58:88:a1:85:d2:6e:07:68:16:60:44:
c4:3a:90:50:93:a4:cf:c4:49:87:ee:3c:bc:21:7f:
c6:53:7d:fd:e3:f0:e9:10:98:4e:1a:6f:b3:8a:f9:
f0:f3:ef:83:05:63:97:85:af:ba:83:8c:d7:cb:67:
50:77:ec:56:30:b1:fc:3e:c0:b3:db:da:88:2f:4e:
f8:83:d7:9c:77:53:fd:19:18:c4:09:bc:79:04:7f:
7d:7b:06:f9:75:dc:ec:48:c6:fb:0a:74:07:a6:0a:
39:40:ce:9b:83:f4:ac:e3:7a:07:0e:0a:a4:9b:fe:
41:82:36:83:e2:c2:f5:a1:4f:1b:0a:a1:be:5f:7e:
32:24:1d:54:a9:2a:cf:6b:da:c8:22:df:76:07:9b:
3c:f0:4b:25:99:78:2b:7d:d1:61:fd:c3:b9:04:6e:
be:81:14:9c:f0:91:ec:43:f7:4c:af:93:31:5b:a6:
93:d6:e1:ca:ec:2b:bd:9e:e0:9d:4c:ab:34:70:3d:
bc:25:6f:e1:6f:97:40:ff:48:2d:d3:69:07:42:20:
d4:42:2a:97:d9:b6:30:2e:3d:80:2b:19:ce:4f:97:
b9:90:de:30:64:6d:e3:f2:2b:36:c2:b0:e0:e0:6d:
26:65:28:88:1f:e5:4c:28:2b:5b:df:b2:81:bc:9e:
b9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9B:89:C6:A3:9C:D0:DD:91:54:AB:1D:3C:56:9A:41:0B:09:2D:F1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df0b6887-2704-40c5-bcf0-969d58228c11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:5000::/40
Signature Algorithm: sha256WithRSAEncryption
6c:b8:9d:26:c2:ad:dc:f5:b1:1d:ce:33:e8:ee:fa:1f:cb:3d:
2a:4c:a9:56:72:71:17:24:39:7c:34:64:69:f7:ab:3e:83:3b:
5d:16:4c:bf:86:59:d0:e9:71:17:f5:6b:f4:4c:ac:a5:bb:89:
a5:87:4a:e3:21:ec:2e:98:e9:74:f3:e6:75:bd:7b:1e:3a:4c:
40:71:f4:ab:66:a5:39:5a:5f:3c:30:0f:59:c9:48:2b:dd:4b:
7c:be:db:74:f6:4f:57:52:8f:4f:84:e7:b0:d4:a9:51:3c:7d:
45:ac:d9:07:83:0a:d6:7e:23:57:df:2c:68:13:80:60:fb:fa:
0e:bc:79:65:fd:7e:4a:a1:4a:ba:54:07:a7:88:66:69:1f:a2:
19:c5:4e:f1:3a:aa:cb:45:82:43:e7:28:b8:00:b1:a7:4b:9b:
88:c2:1a:28:2b:79:38:73:fd:76:f6:e2:ab:7e:93:6c:22:64:
f3:0c:56:60:fd:72:4d:97:16:21:5e:b4:2c:a0:17:2a:53:7e:
3c:cd:9e:4c:8c:8f:23:d8:62:c2:94:a7:2e:9e:dc:83:89:f2:
89:9d:20:ed:e9:6f:12:ce:2f:60:2f:07:dd:02:c5:a4:e7:62:
a8:98:d2:e7:77:e4:a5:e3:40:47:ec:01:68:d4:7a:b8:32:04:
8b:70:62:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:56:21 2025 by rpki-client