Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12c4ac2e-2a89-4144-9c3f-24db18a67870.roa
File: 12c4ac2e-2a89-4144-9c3f-24db18a67870.roa (raw, json)
Hash identifier: ltMtu8/QhB3a1MHIKlWhbGH06i4oQAiMlv5cpTYaZEY=
Subject key identifier: AA:10:33:A0:11:13:81:E9:B8:DB:E5:EF:5F:AE:C2:DF:D5:B7:F2:C5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5819139D03FBC2A8D27FB6AEEB932083A3D87E9E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12c4ac2e-2a89-4144-9c3f-24db18a67870.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:b000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:19:13:9d:03:fb:c2:a8:d2:7f:b6:ae:eb:93:20:83:a3:d8:7e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=550dbad5b0d1a5d75962123c6f0ab90c19d2d29f5e87765a782fb09abf79fa7c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:18:85:77:73:d9:ac:c0:e4:1b:9d:81:aa:
28:14:c7:e6:bf:91:c9:99:10:b9:ac:aa:ce:50:4a:
27:58:df:1d:15:66:67:b1:cf:24:46:6d:4e:fd:23:
15:92:65:c9:7f:ed:af:50:58:f6:2b:a9:15:f7:26:
24:18:35:71:23:9d:50:af:8e:13:0a:f5:f5:fb:3e:
c2:94:20:f2:6b:e2:64:9a:ba:fd:22:5e:0a:8a:fe:
f7:72:75:60:25:9f:f3:8a:ff:30:e4:71:ea:32:24:
0c:47:ae:53:f6:a6:e6:37:4e:e0:a5:d8:81:83:46:
ae:48:3c:7f:d9:fd:eb:e6:9f:e4:1f:b4:ba:c8:0f:
f6:1b:de:74:97:2c:d6:43:5b:a0:16:2a:bc:5d:21:
f2:5b:d1:82:e1:aa:4d:94:d7:ee:cc:eb:85:15:e4:
e2:af:f6:97:4f:b2:3b:3c:22:ac:b0:68:57:f1:19:
15:cb:8b:a5:3b:7c:8f:18:09:f4:80:aa:82:06:4a:
1c:66:1f:a1:fb:45:7e:e3:2a:24:7e:7e:b3:ec:b6:
c3:c3:2c:36:4f:42:11:4f:87:7a:7d:fd:6e:40:41:
b5:a7:90:48:15:23:e9:97:14:c8:c7:5c:9f:7c:0e:
7a:da:3a:3a:25:8a:eb:48:5a:03:f2:68:20:5d:2f:
d0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:10:33:A0:11:13:81:E9:B8:DB:E5:EF:5F:AE:C2:DF:D5:B7:F2:C5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12c4ac2e-2a89-4144-9c3f-24db18a67870.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:b000::/40
Signature Algorithm: sha256WithRSAEncryption
56:52:d0:a5:f9:86:a5:ca:8d:28:03:da:65:e9:4c:7b:13:97:
63:49:8c:ed:ea:c1:57:18:ec:1a:04:5c:f1:bb:3d:46:75:91:
b4:60:3c:3d:92:ab:ff:7d:49:01:30:e0:d0:31:97:d6:4b:07:
1d:84:21:85:96:18:89:69:24:25:61:0f:4e:03:4b:69:8a:d8:
53:f3:ba:22:0e:32:ad:32:5e:8c:c1:fa:ed:b2:42:fe:0a:62:
87:bd:06:ae:88:0c:d0:f1:42:6d:9a:11:b8:a0:4f:db:a1:a1:
8b:c5:8a:ad:a3:3f:55:7c:ba:a8:3e:cd:c9:ab:7a:f2:e6:60:
6b:42:54:9f:05:b3:4b:96:26:b7:de:71:11:a0:58:1f:0d:bf:
c9:47:81:14:1f:77:ef:36:68:e4:08:40:5e:56:c2:74:5f:f4:
78:51:92:56:b0:15:e7:c8:8b:5b:35:33:e2:99:5c:d5:73:cb:
f9:36:4d:19:f4:59:89:eb:5e:a8:ba:66:9a:43:26:2d:5c:05:
12:1b:9e:80:da:bb:97:18:97:25:93:02:c0:4b:d5:72:2f:26:
af:eb:ba:df:ce:72:b5:95:4a:7b:ec:0a:c8:05:ce:bd:27:73:
82:bc:7f:e2:d0:41:c6:c6:c5:4c:93:4c:ad:0c:e2:9a:a9:6b:
1b:8e:5d:c3
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUWBkTnQP7wqjSf7au65Mgg6PYfp4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDcwMDAwMDBaFw0yNTAyMTEyMzU5NTlaMHoxSTBHBgNV
BAUTQDU1MGRiYWQ1YjBkMWE1ZDc1OTYyMTIzYzZmMGFiOTBjMTlkMmQyOWY1ZTg3
NzY1YTc4MmZiMDlhYmY3OWZhN2MxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMbMGIV3c9mswOQbnYGqKBTH5r+RyZkQuayqzlBKJ1jfHRVmZ7HPJEZtTv0j
FZJlyX/tr1BY9iupFfcmJBg1cSOdUK+OEwr19fs+wpQg8mviZJq6/SJeCor+93J1
YCWf84r/MORx6jIkDEeuU/am5jdO4KXYgYNGrkg8f9n96+af5B+0usgP9hvedJcs
1kNboBYqvF0h8lvRguGqTZTX7szrhRXk4q/2l0+yOzwirLBoV/EZFcuLpTt8jxgJ
9ICqggZKHGYfoftFfuMqJH5+s+y2w8MsNk9CEU+Hen39bkBBtaeQSBUj6ZcUyMdc
n3wOeto6OiWK60haA/JoIF0v0D8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSqEDOg
EROB6bjb5e9frsLf1bfyxTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTJjNGFjMmUtMmE4OS00MTQ0LTljM2YtMjRkYjE4YTY3ODcwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Huw
MA0GCSqGSIb3DQEBCwUAA4IBAQBWUtCl+Yalyo0oA9pl6Ux7E5djSYzt6sFXGOwa
BFzxuz1GdZG0YDw9kqv/fUkBMODQMZfWSwcdhCGFlhiJaSQlYQ9OA0tpithT87oi
DjKtMl6MwfrtskL+CmKHvQauiAzQ8UJtmhG4oE/boaGLxYqtoz9VfLqoPs3Jq3ry
5mBrQlSfBbNLlia33nERoFgfDb/JR4EUH3fvNmjkCEBeVsJ0X/R4UZJWsBXnyItb
NTPimVzVc8v5Nk0Z9FmJ616oumaaQyYtXAUSG56A2ruXGJclkwLAS9VyLyav67rf
znK1lUp77ArIBc69J3OCvH/i0EHGxsVMk0ytDOKaqWsbjl3D
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:34 2025 by rpki-client