Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aadbed7-6865-4002-be72-ad85410ef5e0.roa
File: 4aadbed7-6865-4002-be72-ad85410ef5e0.roa (raw, json)
Hash identifier: N2IfJHS6XicMirkUYlNFZuAa4abynK3+MItijFL0TDc=
Subject key identifier: 39:75:79:09:07:78:73:EA:A2:F4:F8:E2:09:A4:1E:4E:B9:B2:74:B1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 39B33EA172202E3272AA980E4FF2E3E88D3D6369
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aadbed7-6865-4002-be72-ad85410ef5e0.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:9080::/46 maxlen: 46
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:b3:3e:a1:72:20:2e:32:72:aa:98:0e:4f:f2:e3:e8:8d:3d:63:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=47b9cee3aee028ff8ac56359ef405e73111ad96a2bae3559e030a2c33dec6b05, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:33:8b:01:8e:8d:7e:8b:f6:28:6e:f2:4a:
13:14:12:c8:5a:b5:8f:6d:cb:f3:a0:61:60:75:eb:
e1:12:23:b5:f7:15:c3:1f:75:02:ab:f7:92:d4:79:
79:7a:99:79:55:3e:41:aa:0f:69:45:03:8a:a7:39:
7d:da:af:63:fa:51:f8:2c:69:03:dc:f5:5b:05:4f:
84:f4:76:1a:c7:e7:07:0b:51:ad:80:88:b6:07:62:
25:7f:ff:e3:da:5a:da:9f:81:69:87:7c:ae:25:4f:
f7:24:67:2f:63:f5:54:21:72:0e:dc:80:ac:06:03:
16:4b:67:8a:dc:a0:66:18:f7:1e:30:de:4b:e4:d3:
29:49:7b:a8:1f:3d:b1:b6:6b:a2:01:b3:3f:8c:1f:
bf:21:59:6a:62:3d:21:aa:71:91:b9:7e:a2:c8:78:
f9:f2:97:8d:da:f8:b8:d5:2c:31:f4:56:b8:8c:2b:
9d:5f:5e:8d:f4:28:fa:91:c4:7b:5d:cb:2a:e5:11:
16:56:01:fd:89:78:ea:95:de:87:3b:56:c2:a7:d2:
5a:4a:ac:78:c8:41:b5:43:24:b0:8b:81:13:16:f5:
72:7b:5f:98:1f:a1:02:2f:42:7f:5b:3d:e4:ca:a9:
6d:27:c2:8f:14:c5:79:b7:a3:f8:bb:c4:b2:12:3e:
b2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:75:79:09:07:78:73:EA:A2:F4:F8:E2:09:A4:1E:4E:B9:B2:74:B1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aadbed7-6865-4002-be72-ad85410ef5e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:9080::/46
Signature Algorithm: sha256WithRSAEncryption
5f:58:d2:ef:09:a0:c2:a7:eb:96:f9:2d:bf:48:80:6b:9b:e1:
c4:41:ad:d0:1d:86:5e:f8:8e:b1:f9:ec:9f:1f:46:44:1a:64:
e6:b8:5a:b9:0b:d2:19:65:c9:e0:54:38:86:ca:0a:0f:ea:19:
8f:32:97:85:a5:e0:31:46:62:69:37:c4:79:6b:9e:ee:90:c1:
95:d2:7a:81:57:50:fe:76:46:89:84:ea:59:86:ed:ae:81:78:
a8:9f:63:f6:7d:55:27:d5:93:19:9d:80:7a:74:75:62:4a:4b:
8d:cc:96:23:21:c4:86:d3:e3:a1:ac:63:70:af:f8:a7:17:3c:
96:2d:20:67:d5:d7:e6:52:ac:95:50:3e:a7:91:e4:69:31:a4:
da:20:b2:9c:3b:0d:e0:cb:d6:2e:c5:a1:5c:6f:25:9d:f9:e4:
53:3f:dd:1f:2d:d9:29:5d:18:da:34:ea:df:35:0e:ae:33:f6:
81:02:b6:1c:5d:67:95:54:c7:65:f0:13:cd:58:a3:fe:79:d0:
ee:9d:e6:e1:b3:bd:25:b4:06:a3:b3:58:e6:db:78:c3:de:24:
33:3b:0e:fa:9d:9f:95:6d:47:29:98:00:5f:45:73:f4:42:81:
cf:2b:29:cf:7a:c6:5c:cf:8d:6c:ee:12:f5:a7:4b:dd:01:0c:
5d:11:ca:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:26 2025 by rpki-client