Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ef5c39aa-2844-4be9-9a54-855ef6587b5c.roa
File: ef5c39aa-2844-4be9-9a54-855ef6587b5c.roa (raw, json)
Hash identifier: UQGPVJ5j7TUCZBkq6204aNXKnDp9Unx36zoywsQUMB4=
Subject key identifier: EF:92:DA:35:1B:99:5E:98:80:C4:6A:35:54:D3:5C:64:9F:3C:3D:2E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2BC57C4E3997916486854307071AA86B91B87718
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ef5c39aa-2844-4be9-9a54-855ef6587b5c.roa
Signing time: Tue 31 Dec 2024 00:00:00 +0000
ROA not before: Tue 31 Dec 2024 00:00:00 +0000
ROA not after: Tue 04 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:e000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:c5:7c:4e:39:97:91:64:86:85:43:07:07:1a:a8:6b:91:b8:77:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 31 00:00:00 2024 GMT
Not After : Feb 4 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:d8:3c:e1:d6:1a:59:f1:78:f0:c2:41:87:
50:b7:64:45:15:87:ed:0f:f3:ab:47:04:4f:09:02:
18:82:73:1a:55:4d:21:38:cc:39:89:a4:5d:1a:c9:
1e:d2:82:bd:68:8b:9e:64:84:ea:de:30:d1:f2:27:
9a:16:44:b3:8d:f5:aa:65:ce:2d:bd:5a:5c:15:a4:
fa:57:2c:82:21:99:24:af:c5:22:9d:9d:1c:6d:bb:
db:5f:4b:0a:49:b2:d3:33:42:72:18:92:82:aa:d2:
69:7e:42:6a:10:b1:09:3c:e1:cd:63:57:a8:18:21:
26:ce:4b:8b:4a:f6:95:c2:6e:b9:29:5a:5d:13:9a:
68:6d:8a:bd:33:fd:a4:bd:3d:26:31:6d:eb:fd:3b:
52:8d:4c:38:7c:3c:67:6d:fd:48:6a:17:09:ca:d4:
91:56:2d:d6:0d:9d:cd:cb:eb:3d:19:2c:a9:11:77:
e3:28:ba:59:94:4e:c8:99:a6:f1:f1:39:44:e2:9e:
50:fe:6e:6b:01:6f:00:c3:1e:81:a8:61:17:19:b2:
ae:05:f4:8a:c9:c6:a5:35:87:59:0a:c2:e5:b5:39:
83:71:f3:ca:3b:d4:58:c1:eb:f2:35:f7:0e:fe:d4:
a7:1e:16:36:b5:43:30:60:7c:85:ad:c2:28:91:eb:
c4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:92:DA:35:1B:99:5E:98:80:C4:6A:35:54:D3:5C:64:9F:3C:3D:2E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ef5c39aa-2844-4be9-9a54-855ef6587b5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:e000::/40
Signature Algorithm: sha256WithRSAEncryption
6f:23:43:39:71:60:d1:7d:f4:0f:30:10:bc:5b:49:c0:02:8f:
c0:06:da:9f:8a:ef:9f:b0:6e:6d:de:97:24:21:ef:32:5d:53:
15:80:23:66:d2:67:ee:85:af:13:34:9e:32:6e:43:16:be:e8:
28:0c:0c:14:37:4a:77:22:91:80:5f:db:62:93:dd:1e:7b:a4:
72:7a:76:29:17:33:44:2c:45:9d:2d:a4:45:31:10:5e:39:27:
7c:78:bf:cb:bf:8a:57:6a:ca:cb:d4:0d:b2:c9:80:5d:82:74:
73:94:9c:37:57:ba:8b:8d:dc:5a:5c:b2:1d:d1:d6:db:3b:cd:
30:38:02:55:46:29:19:31:fb:40:d3:00:9d:76:d8:2c:f1:ba:
59:e9:19:3b:31:fb:88:72:fd:46:89:69:a0:55:57:c9:0f:7a:
e3:27:4a:b3:14:2f:be:58:f0:9d:6d:23:2b:0c:1a:d9:c6:a5:
82:8d:78:1a:54:5f:d8:c0:f7:48:e4:6d:14:96:c5:d5:e2:0c:
a2:ee:08:f9:69:60:cf:d0:50:21:3a:19:5d:45:73:1c:29:79:
da:2c:cd:26:ad:58:f9:57:cb:77:e5:e1:61:f5:44:23:10:11:
8c:ad:8c:e4:22:25:e1:c4:60:ce:8f:bb:31:68:ea:10:cd:81:
a6:c5:7a:f0
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUK8V8TjmXkWSGhUMHBxqoa5G4dxgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDEyMzEwMDAwMDBaFw0yNTAyMDQyMzU5NTlaMHoxSTBHBgNV
BAUTQDI2NzFlYTUxYjhhM2Q0NmI4NDE1Y2E1YmU0MjUzNmZiNWE4YTg5ZjJlNjYy
ZDEzZjg1N2Y5ZGY1NDYyMmM2ODUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALDv2Dzh1hpZ8XjwwkGHULdkRRWH7Q/zq0cETwkCGIJzGlVNITjMOYmkXRrJ
HtKCvWiLnmSE6t4w0fInmhZEs431qmXOLb1aXBWk+lcsgiGZJK/FIp2dHG27219L
Ckmy0zNCchiSgqrSaX5CahCxCTzhzWNXqBghJs5Li0r2lcJuuSlaXROaaG2KvTP9
pL09JjFt6/07Uo1MOHw8Z239SGoXCcrUkVYt1g2dzcvrPRksqRF34yi6WZROyJmm
8fE5ROKeUP5uawFvAMMegahhFxmyrgX0isnGpTWHWQrC5bU5g3HzyjvUWMHr8jX3
Dv7Upx4WNrVDMGB8ha3CKJHrxGECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTvkto1
G5lemIDEajVU01xknzw9LjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZWY1YzM5YWEtMjg0NC00YmU5LTlhNTQtODU1ZWY2NTg3YjVjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DLg
MA0GCSqGSIb3DQEBCwUAA4IBAQBvI0M5cWDRffQPMBC8W0nAAo/ABtqfiu+fsG5t
3pckIe8yXVMVgCNm0mfuha8TNJ4ybkMWvugoDAwUN0p3IpGAX9tik90ee6RyenYp
FzNELEWdLaRFMRBeOSd8eL/Lv4pXasrL1A2yyYBdgnRzlJw3V7qLjdxaXLId0dbb
O80wOAJVRikZMftA0wCddtgs8bpZ6Rk7MfuIcv1GiWmgVVfJD3rjJ0qzFC++WPCd
bSMrDBrZxqWCjXgaVF/YwPdI5G0UlsXV4gyi7gj5aWDP0FAhOhldRXMcKXnaLM0m
rVj5V8t35eFh9UQjEBGMrYzkIiXhxGDOj7sxaOoQzYGmxXrw
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:09 2025 by rpki-client