Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c7ac716-d1bd-484d-8adb-eb85d7e5cf25.roa
File: 5c7ac716-d1bd-484d-8adb-eb85d7e5cf25.roa (raw, json)
Hash identifier: HeBVrHBHRR1Kq1LX+k9fmDgb2bZkKiSmR6bfeLivKPg=
Subject key identifier: 3A:EE:47:E4:C8:4C:20:FC:DB:AE:98:EF:01:5D:CB:D0:51:16:94:0F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3B32E5823C7C3BDCB59C7E2A67549B13B562871E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c7ac716-d1bd-484d-8adb-eb85d7e5cf25.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:2000::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:32:e5:82:3c:7c:3b:dc:b5:9c:7e:2a:67:54:9b:13:b5:62:87:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=55a9e10190fbfb352b508e4f2427992d6f901767ed84799ef9121f740a01fad1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:31:79:85:06:d9:82:37:0b:04:d6:64:bb:0d:
85:7f:58:d2:e1:6e:76:60:81:99:41:e0:ba:fa:41:
80:72:ba:d3:dc:49:8c:24:d3:ab:e2:99:cb:b0:66:
5b:6b:ca:05:df:d8:de:2d:1a:8b:de:6a:29:99:66:
2a:40:da:99:55:88:e7:a3:0e:29:2d:a1:c3:a9:15:
25:26:9c:f0:97:50:e8:a5:ce:b5:79:c4:d9:f9:2c:
91:df:29:d8:40:9b:54:6f:93:16:78:3f:95:7f:fe:
38:2c:26:9d:f0:5f:01:8f:07:9f:d5:0f:04:82:f6:
d3:b0:8c:7b:01:dd:bc:9d:d3:e8:56:11:e1:19:a6:
cb:01:0f:50:e7:d4:78:44:9a:0a:b7:7b:6f:b6:ac:
64:2c:6f:2b:b2:7c:d6:6d:17:c6:8a:b8:02:25:82:
f2:36:ec:a5:85:4f:9d:88:b3:35:54:a4:ad:2f:72:
a8:56:36:f6:cd:e6:9c:18:bd:96:23:4a:98:92:80:
a5:e6:d2:ba:ec:6d:a2:63:07:49:a2:90:05:20:bc:
6d:ca:a2:a0:b9:de:12:76:72:66:f3:74:4e:6f:b8:
24:8c:a7:2d:62:f8:ce:7c:0e:49:ba:21:c4:fb:95:
9b:63:ad:93:75:ee:b8:ad:5d:62:3d:58:ff:3a:06:
3b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EE:47:E4:C8:4C:20:FC:DB:AE:98:EF:01:5D:CB:D0:51:16:94:0F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c7ac716-d1bd-484d-8adb-eb85d7e5cf25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:2000::/40
Signature Algorithm: sha256WithRSAEncryption
9f:75:f9:3b:8d:30:bf:79:4c:6f:be:e1:2e:0f:99:4e:c6:ca:
8a:36:92:d7:ab:51:cc:76:f3:1b:97:3d:0f:eb:be:19:c2:40:
5e:ce:63:30:fb:2d:86:fe:07:74:4c:a7:b6:3b:e2:1d:be:70:
9f:a6:8b:05:a9:70:31:c4:38:78:98:7f:7c:ae:95:2a:0a:80:
f6:23:48:c1:20:44:5c:23:b8:ba:85:09:88:c1:7d:d7:11:83:
a7:6d:52:ee:74:8f:8c:26:12:93:ff:cf:97:ed:e8:08:1a:99:
a1:f5:ea:6e:78:2e:e1:52:d7:07:b4:33:83:08:fc:d5:6c:1a:
f2:16:5e:02:bb:fc:e5:8b:fe:28:52:ee:c7:02:ec:b9:c6:d7:
64:21:b5:b0:9d:bd:9c:96:e7:87:0a:d2:81:e6:05:06:c0:1c:
b7:8b:5e:5a:88:88:e7:09:7c:04:44:c7:d0:30:1d:bc:4f:22:
81:f8:8c:cb:c4:b6:96:aa:73:3d:ca:c3:8c:f4:bb:62:25:70:
8e:32:9b:f2:bd:68:e6:be:de:a7:11:e2:0f:b8:3a:36:bf:7a:
f9:4c:fb:7d:84:1f:8f:c7:1a:a7:fd:12:14:dc:d2:eb:f4:25:
86:40:aa:fd:7a:64:07:58:4f:8a:5b:fa:b0:9c:9c:92:87:9d:
7d:b3:dc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:44:14 2025 by rpki-client