Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0129a519-09b3-42f6-b662-39b10215c10e.roa
File: 0129a519-09b3-42f6-b662-39b10215c10e.roa (raw, json)
Hash identifier: 3Fpc/WFCBFj+Xd8l/M23y6VHzClFaBLjhg0QK6iG4dY=
Subject key identifier: D9:E7:03:63:A7:0C:68:DA:97:CB:91:74:CB:A2:19:E1:8F:2C:D6:17
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0245A28B306A602C337664091F25C777814FE6BB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0129a519-09b3-42f6-b662-39b10215c10e.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d015::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:45:a2:8b:30:6a:60:2c:33:76:64:09:1f:25:c7:77:81:4f:e6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=d008aadb06d071c8609d66f67bc1484834a6ec42010e35351969fe75be8a6c47, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0f:37:55:e8:75:84:e5:36:ac:34:22:aa:bf:
a3:7a:4e:7d:40:e7:06:5c:06:c1:69:c2:ec:b4:e1:
ac:87:1d:81:74:99:d6:2e:1f:cc:5d:db:78:ac:86:
71:39:8e:33:f0:96:47:68:3a:3a:8b:76:0b:c7:28:
ec:6b:9e:2b:37:62:c7:61:76:7d:a3:ef:55:b2:e0:
fa:9f:19:77:5b:ef:58:58:92:83:d4:a1:07:d5:25:
32:1e:a1:53:87:da:cf:7e:00:5e:51:d7:17:42:0d:
5c:b9:20:f2:82:3e:e5:f0:91:87:10:22:3f:e3:68:
80:a0:a0:32:4e:50:5a:94:d4:09:f8:e6:ef:71:b0:
5f:0f:8c:6d:32:d6:d5:b9:7a:65:22:68:cc:f2:12:
a9:25:db:8c:59:4d:0a:39:f9:c9:fa:b9:d5:70:85:
10:42:ca:77:d8:fb:ce:b4:48:64:d2:d2:5a:38:68:
f0:3a:ef:ff:5b:7b:84:a1:61:f9:d9:5b:54:87:22:
7f:5f:c0:31:9d:d8:05:de:8d:d8:36:8c:34:e4:8b:
c2:5c:5a:8b:44:ed:56:b4:a3:bc:c8:a3:61:ed:2a:
f9:d7:3a:5c:b2:97:49:58:69:3d:05:8a:71:d6:09:
13:48:b1:44:5d:af:9e:c8:80:f5:60:fd:fe:46:fe:
59:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E7:03:63:A7:0C:68:DA:97:CB:91:74:CB:A2:19:E1:8F:2C:D6:17
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0129a519-09b3-42f6-b662-39b10215c10e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d015::/36
Signature Algorithm: sha256WithRSAEncryption
35:00:49:c0:bf:90:10:08:48:ae:1f:3a:21:f6:d0:52:6a:56:
31:73:ba:50:88:d2:85:24:e5:09:70:5b:8d:31:e9:b0:fc:6c:
0b:b0:0e:a4:09:bb:ab:3f:b2:95:76:51:ec:b2:8f:10:f8:0e:
b6:0b:f3:b5:6d:cf:95:56:62:16:84:36:fb:bf:06:2f:09:96:
6e:eb:da:d1:59:6a:79:b8:f2:11:9b:5a:c3:4e:b4:89:48:ad:
32:b3:0b:bc:51:15:de:7b:5b:c5:6f:da:8c:45:4b:14:85:36:
40:3b:54:78:65:20:ce:cf:b9:19:b5:f5:91:40:6f:83:1e:81:
e3:07:2b:d8:0f:d6:1f:58:36:43:a5:42:a2:ec:e6:44:56:41:
6c:06:8f:6c:c9:19:e6:0e:cf:9d:3c:1b:89:62:dc:c7:af:17:
8d:62:93:1a:0c:63:ac:25:fc:21:b4:09:ba:01:30:75:f3:1a:
b0:d8:bc:1f:d5:0a:39:4a:cc:27:5e:df:97:71:e9:06:55:67:
8e:e2:59:3b:37:6e:03:63:fb:cc:3d:b0:e5:6f:3b:6e:60:19:
4b:36:a0:73:83:b4:eb:be:81:88:51:aa:93:43:a9:16:f5:27:
6e:7f:13:28:a5:30:39:25:d8:19:0b:7c:30:6c:98:d1:87:38:
22:5b:cf:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:26:19 2025 by rpki-client