Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0457f915-9a1e-4628-9399-bf0f6dcba1d9.roa
File: 0457f915-9a1e-4628-9399-bf0f6dcba1d9.roa (raw, json)
Hash identifier: ZcjqEhv71Su47/XgM9mukEo/WdryfROO4v2NDS3H+t4=
Subject key identifier: 9F:44:8D:BA:33:55:ED:FD:FE:98:C0:BC:77:8E:B9:5F:FC:03:A1:FE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3D6DD037ECBBF60A5C2AC12C744EAF92C85DC734
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0457f915-9a1e-4628-9399-bf0f6dcba1d9.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:e000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:6d:d0:37:ec:bb:f6:0a:5c:2a:c1:2c:74:4e:af:92:c8:5d:c7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: serialNumber=27eac25a2260be3ae281d165642c314c3c1825dfc9f3fa96c54f7475d1ce6288, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:4c:ae:dc:0e:56:38:03:5c:21:da:1a:00:
ab:b1:f1:8a:7e:30:be:d2:35:1c:47:bf:f9:d0:91:
75:fc:91:b2:94:82:41:93:00:13:78:0f:6d:f4:fa:
2a:fd:da:d7:6e:34:6b:32:5e:b9:14:a8:1a:04:41:
ec:d4:ac:35:6a:6c:a6:a6:16:2f:23:eb:83:2a:e9:
66:65:c2:20:ea:35:0c:74:ce:d1:0b:f4:2d:39:09:
b8:99:26:8d:17:a2:59:13:62:31:86:15:60:c0:d0:
3d:a0:b9:d6:69:29:83:49:d3:c0:b8:af:8b:0f:60:
13:18:84:53:bf:39:d8:b6:b8:d9:e1:9c:9b:3b:b7:
7b:64:89:3f:f1:fc:29:04:b3:19:a5:a4:93:df:d7:
3a:a0:ec:ac:5d:48:55:ab:47:14:61:ea:e1:de:6f:
ba:12:83:69:f3:c3:c3:f8:0a:54:1d:96:19:bb:16:
9e:34:2b:7a:38:aa:8b:ff:c6:6a:10:97:21:bd:d2:
a8:d4:a5:cf:04:f6:95:84:94:07:69:09:20:40:f6:
d0:8d:f3:6c:6c:2a:74:d4:55:39:f8:e1:90:6e:c1:
6f:99:b0:46:a7:27:ae:a0:d5:ee:5d:68:a1:1c:4d:
67:97:fb:96:89:dd:af:0f:ce:90:19:fa:c9:a1:05:
22:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:44:8D:BA:33:55:ED:FD:FE:98:C0:BC:77:8E:B9:5F:FC:03:A1:FE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0457f915-9a1e-4628-9399-bf0f6dcba1d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:e000::/40
Signature Algorithm: sha256WithRSAEncryption
a6:8f:b1:70:fa:f8:46:c1:52:34:6a:5a:9d:c6:e0:54:15:93:
e0:8f:2e:f7:ef:4d:ee:5b:d3:c8:de:e9:e2:7f:31:7a:1a:db:
4b:bb:9b:a9:c4:0e:09:d8:a2:f4:65:64:65:f6:2c:74:69:7d:
77:24:bf:d6:a3:cf:dd:18:14:4c:6d:ad:c3:94:8f:c1:3a:df:
9c:bb:01:3f:c6:5e:91:85:3d:9c:4e:8d:56:dd:68:0f:3f:02:
48:b0:6e:58:26:61:6d:4a:df:a1:9b:89:82:4e:6f:63:fe:01:
fd:14:82:db:77:a9:f7:48:4d:d6:2c:42:33:f3:2d:8a:60:04:
3e:db:24:60:bf:0f:b9:e8:67:c6:16:bc:95:cb:96:c9:74:72:
d6:41:ca:5a:63:57:60:63:37:c6:2a:4f:13:b8:81:8b:fc:21:
40:84:0c:a8:35:63:5f:69:c0:0f:a2:21:03:d3:8e:9e:08:f9:
cf:9b:6d:d9:c9:5a:9f:9d:2e:db:ab:e9:64:a5:a1:8a:8d:9b:
b9:0c:3c:d0:1e:0f:34:dc:3b:20:22:b9:92:95:ac:c0:47:66:
6f:dc:10:f8:77:04:3c:96:63:1b:35:7f:87:0e:ee:57:92:21:
3a:5a:e8:1e:e9:76:62:e5:97:ff:a5:5d:2a:54:e9:26:9f:41:
08:37:62:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:46:11 2025 by rpki-client