Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/219e919e-0c59-4a94-b0e0-62a17a92446b.roa
File: 219e919e-0c59-4a94-b0e0-62a17a92446b.roa (raw, json)
Hash identifier: V3e2qZjVay9dgJi1AXmWIxCuoEWjDIXfqeBH3GwG2Js=
Subject key identifier: 69:3B:6F:0B:46:E7:8D:09:FC:D4:C9:4C:69:09:44:A0:01:E0:44:AF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 23E5294F465F468812CCE97C9C75CF71B7FF7A51
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/219e919e-0c59-4a94-b0e0-62a17a92446b.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:a000::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:e5:29:4f:46:5f:46:88:12:cc:e9:7c:9c:75:cf:71:b7:ff:7a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=ae042551423b36452f2bb04fb687a29411a193a52e7de226d8b91dc6a78e8acc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e2:04:3d:48:a8:ad:c9:50:73:da:8a:52:3b:
7c:f3:36:a6:56:b2:b0:0e:fe:bf:8f:ac:71:6d:2a:
86:47:a8:13:45:3f:80:9c:5b:b0:b8:a1:c2:68:fc:
fd:bf:d3:d7:37:cb:e5:05:c2:bc:c6:ff:44:1f:a8:
2e:e6:2c:77:da:cc:4c:49:c8:77:49:18:37:d0:5d:
f6:67:bf:bd:5e:9a:4b:40:43:d0:e0:eb:bd:68:bd:
09:bb:01:48:d0:76:70:21:17:a6:96:52:49:bb:d6:
74:4b:ca:c5:bf:af:a6:1e:ac:75:7b:7a:81:f7:5d:
3d:cb:97:d5:85:a0:aa:8d:75:ec:18:bb:a9:e1:55:
59:af:13:02:09:b9:97:cf:b5:f0:0e:2f:5a:98:7e:
d4:f9:2e:50:a9:19:64:ba:67:83:9d:95:05:96:9c:
8e:33:e6:0e:35:99:f7:8e:af:37:8c:5e:c6:4d:fe:
77:8f:a9:33:8d:a6:d8:5f:51:99:43:43:af:e1:bb:
3e:0d:47:c8:3e:e7:59:d8:34:82:eb:b6:c3:58:9f:
a1:90:41:a7:24:65:5d:d6:c6:9f:ab:bb:70:c4:fb:
f7:b6:89:b6:cd:1c:dd:db:e0:9e:27:00:ba:4d:3f:
34:3f:96:03:0a:0f:6a:3a:fd:e4:19:22:0d:40:d9:
7e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3B:6F:0B:46:E7:8D:09:FC:D4:C9:4C:69:09:44:A0:01:E0:44:AF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/219e919e-0c59-4a94-b0e0-62a17a92446b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:a000::/40
Signature Algorithm: sha256WithRSAEncryption
c2:0b:68:8f:c5:56:f7:6c:34:c8:b3:49:13:be:77:5b:30:13:
64:36:08:29:0e:5a:78:de:5e:ba:47:95:66:8e:e3:12:6d:cb:
e1:f2:ea:c9:41:52:ee:5a:7f:e7:d4:03:5a:c2:7b:af:fa:81:
c9:a3:09:31:db:a9:6f:c1:2f:70:e9:31:28:9e:b5:d1:02:99:
9e:e2:2c:ec:cc:76:c6:08:8b:72:20:2a:65:99:62:82:ef:31:
52:9c:08:68:3c:85:1e:e4:85:26:2d:97:40:83:66:dd:12:a7:
28:66:ed:41:6e:b9:38:02:e6:26:e3:87:f8:0f:a0:b3:46:7a:
51:e7:f2:05:84:c4:d2:7c:c1:c3:19:b5:c4:69:1b:4c:ee:d7:
c9:ee:5b:74:7b:0b:4c:cb:dd:dc:08:a1:6e:ec:52:45:a1:06:
91:d0:c2:9f:bc:01:a0:95:7e:95:1f:01:64:cd:ca:06:37:2a:
85:d8:ed:10:2a:f1:3d:65:84:de:36:24:d1:04:c5:6d:34:31:
60:98:69:e9:b8:01:2c:be:7d:7a:f6:51:31:af:a9:23:63:b6:
e2:1c:b6:3f:33:84:6c:62:4d:0b:de:92:93:35:2e:a1:c2:24:
6a:7e:9f:5d:a0:d7:84:07:08:d3:b3:84:a7:df:4e:f9:7d:d3:
67:9c:09:52
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUI+UpT0ZfRogSzOl8nHXPcbf/elEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQGFlMDQyNTUxNDIzYjM2NDUyZjJiYjA0ZmI2ODdhMjk0MTFhMTkzYTUyZTdk
ZTIyNmQ4YjkxZGM2YTc4ZThhY2MxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM7iBD1IqK3JUHPailI7fPM2playsA7+v4+scW0qhkeoE0U/gJxbsLihwmj8
/b/T1zfL5QXCvMb/RB+oLuYsd9rMTEnId0kYN9Bd9me/vV6aS0BD0ODrvWi9CbsB
SNB2cCEXppZSSbvWdEvKxb+vph6sdXt6gfddPcuX1YWgqo117Bi7qeFVWa8TAgm5
l8+18A4vWph+1PkuUKkZZLpng52VBZacjjPmDjWZ946vN4xexk3+d4+pM42m2F9R
mUNDr+G7Pg1HyD7nWdg0guu2w1ifoZBBpyRlXdbGn6u7cMT797aJts0c3dvgnicA
uk0/ND+WAwoPajr95BkiDUDZfn8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRpO28L
RueNCfzUyUxpCUSgAeBErzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MjE5ZTkxOWUtMGM1OS00YTk0LWIwZTAtNjJhMTdhOTI0NDZiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DCg
MA0GCSqGSIb3DQEBCwUAA4IBAQDCC2iPxVb3bDTIs0kTvndbMBNkNggpDlp43l66
R5VmjuMSbcvh8urJQVLuWn/n1ANawnuv+oHJowkx26lvwS9w6TEonrXRApme4izs
zHbGCItyICplmWKC7zFSnAhoPIUe5IUmLZdAg2bdEqcoZu1Bbrk4AuYm44f4D6Cz
RnpR5/IFhMTSfMHDGbXEaRtM7tfJ7lt0ewtMy93cCKFu7FJFoQaR0MKfvAGglX6V
HwFkzcoGNyqF2O0QKvE9ZYTeNiTRBMVtNDFgmGnpuAEsvn169lExr6kjY7biHLY/
M4RsYk0L3pKTNS6hwiRqfp9doNeEBwjTs4Sn3075fdNnnAlS
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:16 2025 by rpki-client