Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ef2bdd05-07c6-4642-b5d5-368984c4ef11.roa
File: ef2bdd05-07c6-4642-b5d5-368984c4ef11.roa (raw, json)
Hash identifier: pFfAgJAHJoKWQlJNFkMwJAcHAbl9X0jhCgJudxEtYnY=
Subject key identifier: 75:1B:5B:8B:43:B2:09:8E:27:97:A4:E5:E5:20:66:AC:FF:58:AF:69
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0F7511CDC9E6004082142838490986445311E973
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ef2bdd05-07c6-4642-b5d5-368984c4ef11.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:5000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:75:11:cd:c9:e6:00:40:82:14:28:38:49:09:86:44:53:11:e9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:c5:4f:3a:92:e3:ab:8d:a9:4c:e7:8d:46:
56:0d:46:57:5d:c1:74:44:0f:7f:38:64:17:17:97:
29:ee:6a:0b:da:6e:f7:68:d5:0b:26:18:00:f2:e1:
40:1e:66:e9:d5:f2:f7:2f:b0:ba:05:16:52:f9:f4:
bd:f3:8c:21:b8:fd:04:72:a1:35:ca:5a:40:88:c6:
69:cd:2d:00:06:24:59:a2:22:a0:6c:74:7c:27:1d:
09:16:98:55:3c:cc:b0:81:77:68:bf:0d:4b:ca:67:
1e:28:da:17:99:ed:52:6e:35:c0:46:18:af:40:c7:
18:64:ec:3d:8d:38:1b:e5:1e:48:8d:42:cf:4c:f1:
11:01:b6:64:ec:83:9d:98:5c:56:8d:7c:c8:a6:29:
ec:6b:af:c6:35:52:dc:eb:7d:86:3a:bc:16:ce:7c:
62:9d:e2:28:d7:70:45:0a:2e:15:5e:de:6a:47:56:
0f:67:f7:66:43:ab:6d:8c:bf:dd:f2:e8:d2:9c:dc:
44:02:e8:a6:33:bf:ea:5b:48:c0:79:5f:42:af:a6:
41:c3:11:e7:fd:2e:26:36:43:a4:3a:5e:14:50:a5:
93:e9:3a:96:ff:00:53:30:f9:a7:9b:28:cd:21:8f:
09:80:91:d1:78:43:ef:68:fc:5d:1c:e2:cc:4a:5a:
3b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1B:5B:8B:43:B2:09:8E:27:97:A4:E5:E5:20:66:AC:FF:58:AF:69
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ef2bdd05-07c6-4642-b5d5-368984c4ef11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:5000::/40
Signature Algorithm: sha256WithRSAEncryption
2b:97:f7:15:8e:fd:2e:8a:7a:16:24:a2:21:c6:3c:e1:3e:c2:
f4:76:ca:44:bb:6a:01:56:33:39:c3:2a:b3:3f:59:23:05:c1:
de:23:ca:aa:48:f0:0d:9b:b7:16:14:46:81:b5:49:ed:1c:89:
a1:23:36:80:58:52:07:b2:e4:6e:76:18:c3:bf:d2:e1:18:2b:
f2:90:22:ee:10:7d:c2:85:50:11:dd:3e:b0:db:c2:8e:d7:0b:
fb:65:4d:f9:2e:98:a9:1b:15:82:13:5c:ae:ac:70:55:20:b8:
8d:e7:db:79:67:f0:14:d5:43:41:a9:39:23:45:a0:e6:e6:5f:
84:9a:e3:d7:db:ba:db:cc:c6:1e:6d:33:91:81:83:4d:3c:43:
a9:1a:3b:ff:78:60:4a:2a:ce:17:af:bc:5a:41:a8:35:d7:6f:
41:ed:31:da:ef:f7:4a:ab:95:5a:ee:e2:eb:d0:32:ec:47:8b:
03:76:94:96:2a:cb:13:85:c1:70:a1:31:d7:e5:0b:f7:01:db:
71:ae:a3:e9:96:72:ad:b9:76:31:a0:62:b8:ab:61:ed:ca:8e:
8d:62:26:df:93:c9:f8:57:22:a5:7b:17:58:e0:fb:2a:86:67:
0b:40:13:e5:a5:fe:3b:9d:7b:59:3c:47:26:ff:e2:d8:27:79:
80:84:cc:89
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUD3URzcnmAECCFCg4SQmGRFMR6XMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDEyMTYwMDAwMDBaFw0yNTAxMjAyMzU5NTlaMHoxSTBHBgNV
BAUTQDRmMGQ4MmE0OGJlZmQ0ZWNjNWJjZTY1ZmUwMmZhZTJkMWM5ZGViYTkzZjcx
ODQ3MTFlZWM0MDdlNGQzMDUzYTMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKKhxU86kuOrjalM541GVg1GV13BdEQPfzhkFxeXKe5qC9pu92jVCyYYAPLh
QB5m6dXy9y+wugUWUvn0vfOMIbj9BHKhNcpaQIjGac0tAAYkWaIioGx0fCcdCRaY
VTzMsIF3aL8NS8pnHijaF5ntUm41wEYYr0DHGGTsPY04G+UeSI1Cz0zxEQG2ZOyD
nZhcVo18yKYp7GuvxjVS3Ot9hjq8Fs58Yp3iKNdwRQouFV7eakdWD2f3ZkOrbYy/
3fLo0pzcRALopjO/6ltIwHlfQq+mQcMR5/0uJjZDpDpeFFClk+k6lv8AUzD5p5so
zSGPCYCR0XhD72j8XRzizEpaO0sCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR1G1uL
Q7IJjieXpOXlIGas/1ivaTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZWYyYmRkMDUtMDdjNi00NjQyLWI1ZDUtMzY4OTg0YzRlZjExLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DZQ
MA0GCSqGSIb3DQEBCwUAA4IBAQArl/cVjv0uinoWJKIhxjzhPsL0dspEu2oBVjM5
wyqzP1kjBcHeI8qqSPANm7cWFEaBtUntHImhIzaAWFIHsuRudhjDv9LhGCvykCLu
EH3ChVAR3T6w28KO1wv7ZU35LpipGxWCE1yurHBVILiN59t5Z/AU1UNBqTkjRaDm
5l+EmuPX27rbzMYebTORgYNNPEOpGjv/eGBKKs4Xr7xaQag1129B7THa7/dKq5Va
7uLr0DLsR4sDdpSWKssThcFwoTHX5Qv3AdtxrqPplnKtuXYxoGK4q2Htyo6NYibf
k8n4VyKlexdY4PsqhmcLQBPlpf47nXtZPEcm/+LYJ3mAhMyJ
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:58 2025 by rpki-client