Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eb595351-0edb-41ab-a62d-fee65cd98eed.roa
File: eb595351-0edb-41ab-a62d-fee65cd98eed.roa (raw, json)
Hash identifier: tCu+O4DRdxi3cGpHZ8gmG3Nxfuj3IuGBjjJshh0ZGwk=
Subject key identifier: 88:FB:79:F1:00:C6:F6:A7:6F:7B:93:81:F8:06:11:7B:B2:E2:DE:C3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 29ACB74BC15A9933CD16F09AABA10957EEF1AB83
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eb595351-0edb-41ab-a62d-fee65cd98eed.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:ac:b7:4b:c1:5a:99:33:cd:16:f0:9a:ab:a1:09:57:ee:f1:ab:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1a:ff:84:66:1b:1b:fe:4e:ee:6b:3d:e3:7f:
da:30:6e:c1:f3:fc:3c:54:3b:20:64:eb:ba:1f:e4:
d3:d9:de:a3:00:e9:75:ed:76:c9:11:56:cf:bf:cc:
94:44:e6:a5:be:e1:83:67:f6:40:43:bc:16:bb:88:
5a:3d:4c:fb:b5:e3:b5:4d:d5:8c:a7:dd:35:6e:c9:
0b:ed:11:9b:fb:b0:df:6e:5a:1d:9e:0b:98:0e:7a:
a2:55:2d:89:6d:27:91:c7:23:f2:53:e4:20:52:4b:
ca:84:b3:b1:38:fe:6d:1c:c0:3e:05:bc:79:3c:77:
2b:ef:0d:69:df:80:e6:fe:b5:68:fb:83:40:7f:36:
c0:bf:a5:e3:26:06:40:21:3d:7c:fe:e2:c6:6f:aa:
39:9a:94:2b:95:bd:34:38:9f:74:12:ce:a9:7a:a5:
b9:55:21:44:3c:75:f3:65:39:ce:bc:f9:b0:d1:93:
3c:0e:67:04:39:25:76:0e:c3:7d:39:fe:72:66:42:
f3:1b:c9:88:ca:e7:0a:3c:16:9e:42:24:62:55:84:
76:22:8a:96:d3:07:ee:12:70:ab:6d:c5:db:a2:f6:
00:bb:20:04:ad:4f:4f:4d:7e:f2:78:39:52:21:d5:
fd:70:02:96:a3:0b:c0:ee:4a:a9:fb:95:7a:94:27:
7f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FB:79:F1:00:C6:F6:A7:6F:7B:93:81:F8:06:11:7B:B2:E2:DE:C3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eb595351-0edb-41ab-a62d-fee65cd98eed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4d:4e:0a:75:23:8f:95:92:3a:3c:b5:17:e4:a1:50:c0:a3:02:
6c:e7:8b:c3:df:28:9f:29:45:a0:0f:1f:b3:6e:54:29:51:d8:
09:b1:42:28:b8:9a:b1:f0:20:7c:63:f7:b7:9b:76:b0:57:42:
af:ec:e3:db:74:64:dd:7d:e9:f1:ab:92:af:90:12:06:55:2b:
4f:f3:77:5d:61:2a:e8:22:85:5b:21:80:10:f0:29:36:f8:60:
44:2b:81:e4:e0:9f:5b:58:5c:15:82:1b:6e:48:f0:32:34:99:
d6:30:94:5a:1f:d0:e4:16:c4:5b:d7:16:9e:82:0b:36:3c:ba:
d3:36:21:62:c7:17:4b:1f:90:1a:3a:6b:31:3b:ed:5d:1c:b2:
2f:3b:fe:1e:0a:b8:9f:59:9b:f8:83:68:b2:4d:88:37:79:82:
f5:62:e3:5b:66:d3:c1:d0:58:40:b5:80:5f:b7:52:41:5e:67:
83:dd:a1:06:e1:d7:9e:78:fb:7c:f7:22:3f:6f:24:c3:e9:15:
48:b9:a5:f0:c8:fe:31:15:1e:66:09:b0:81:e0:fc:db:17:15:
b3:28:68:e9:ba:b7:17:25:46:bf:97:dc:fc:82:e2:ad:20:d8:
a0:b8:5f:31:10:dc:c6:fc:3f:de:6e:59:0c:ef:97:db:45:4e:
d7:41:21:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:34 2025 by rpki-client