Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f324111-4b95-44d9-93fa-2778bdda69e8.roa
File: 3f324111-4b95-44d9-93fa-2778bdda69e8.roa (raw, json)
Hash identifier: P2+3rYLe3GtbzZZ9fPx2ji4CxUZJl3nBU2J7Q+ooO9s=
Subject key identifier: DE:6F:7F:5B:2B:57:49:60:BB:8F:01:90:B2:B6:32:89:8C:B9:51:5D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 741FC99AAAF85F75E7B785262C214651353F99B5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f324111-4b95-44d9-93fa-2778bdda69e8.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:4000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:1f:c9:9a:aa:f8:5f:75:e7:b7:85:26:2c:21:46:51:35:3f:99:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=de0034171b8eaf79348d1043a526705784e0e8541c98fe091e3223340bb2a20b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:df:9d:17:f8:dc:6e:6f:28:ad:e0:6c:65:
aa:90:9a:e9:61:63:1f:86:e7:86:2a:7d:d5:9a:c4:
76:95:30:db:4a:52:0c:eb:4e:4a:f9:0f:17:8b:ab:
15:e7:ff:b1:c0:32:5b:63:8e:74:b4:b2:d5:52:94:
e9:cb:99:ff:db:b5:15:93:e0:a0:ac:7d:ce:9b:c0:
b4:11:d9:76:00:77:4c:a8:43:c1:d4:7e:28:61:7b:
53:71:72:02:f0:52:3f:64:ca:a3:40:18:6e:70:72:
6c:31:ec:74:43:4c:06:d1:82:d6:bc:1f:ec:7b:a6:
9a:2e:69:fe:76:9d:58:18:78:02:49:ea:cf:e5:bf:
a9:a3:3f:9a:94:34:c6:5e:ef:66:de:3d:4a:c2:b4:
65:56:af:dd:65:c4:46:ff:00:0f:75:9f:37:2b:cc:
c8:ba:7e:80:6c:dc:ac:76:cd:08:7d:89:9b:a4:b8:
16:be:8c:aa:ae:3e:38:5b:12:33:46:42:0e:ce:d3:
a6:82:77:b4:7b:49:ef:af:fd:73:37:71:e3:6e:1b:
f8:79:52:b9:fe:6d:de:c2:04:8e:df:da:4c:3e:1a:
d5:0d:05:ad:eb:56:46:6d:bf:69:1e:06:6d:5d:6a:
a0:64:e8:f2:7c:fe:7c:f2:e5:81:62:cf:56:05:91:
c1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6F:7F:5B:2B:57:49:60:BB:8F:01:90:B2:B6:32:89:8C:B9:51:5D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f324111-4b95-44d9-93fa-2778bdda69e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:4000::/40
Signature Algorithm: sha256WithRSAEncryption
a0:5c:14:bd:74:66:c7:aa:99:6e:6f:95:0f:b5:67:4d:77:4f:
53:54:06:49:d4:84:03:f5:8e:8d:75:df:73:ae:e4:9c:12:a9:
47:40:5a:55:d4:5c:fe:d9:24:9f:7f:87:2c:16:15:ba:18:a5:
ad:2f:ef:f6:d6:79:5b:c2:4f:22:87:53:38:e0:a8:6a:9a:2c:
81:65:0a:88:1f:de:48:f5:7e:78:4b:c4:f4:2a:53:f3:1e:b2:
ff:eb:cd:2b:c4:e9:c8:97:fe:37:ef:a1:8a:b6:a7:26:6e:7b:
11:04:e5:e2:11:02:3b:a8:a1:a9:96:c5:d1:93:38:8d:f3:92:
b9:1b:52:0b:00:04:da:90:a2:d0:04:ae:8e:b6:51:76:5e:11:
39:f4:44:b8:66:97:6a:c0:dd:b4:ed:12:b4:60:e2:34:29:ac:
76:cb:ea:28:d8:f2:dd:09:79:41:45:43:58:28:32:b8:2c:62:
74:8e:8b:e5:75:2c:f3:ad:0a:52:7b:aa:91:c8:ed:f9:8a:a4:
57:1c:bc:d0:df:03:5d:f0:41:9a:23:2e:1a:04:11:06:b5:98:
bd:35:5a:db:cb:30:5c:3f:0e:be:85:35:5f:65:6b:0a:7e:af:
ad:d3:2d:f6:d6:ab:39:76:a0:c5:ec:94:32:e0:22:9e:0f:99:
2e:a8:1f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:44:20 2025 by rpki-client