Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/626298aa-2f65-4606-86ed-699bfc1bdf91.roa
File: 626298aa-2f65-4606-86ed-699bfc1bdf91.roa (raw, json)
Hash identifier: WpHv8AP07SdO4uPt/oLNu/PuzNNl2jpWSKWEY0945po=
Subject key identifier: 14:19:1E:42:00:01:B5:97:85:FB:4D:98:61:C3:4F:AF:B6:3E:33:C4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0EF15F3394CA39017A493A10EF01D9AE10844E54
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/626298aa-2f65-4606-86ed-699bfc1bdf91.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:10c0::/46 maxlen: 46
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:f1:5f:33:94:ca:39:01:7a:49:3a:10:ef:01:d9:ae:10:84:4e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=37e97aad73bb5763f679724d221399f9b344365f25dbc3fb06806ab206d45615, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:ca:a9:ba:d5:87:33:ca:95:5b:6b:50:0c:
b0:5e:2c:5e:9c:f0:0d:b6:13:c9:90:2d:d0:75:51:
33:63:cb:a6:b8:69:13:a6:bb:97:6f:d9:c4:b9:86:
39:2c:fb:3e:3e:9a:d3:82:16:21:a8:29:35:16:e1:
af:37:8b:07:b6:54:54:f6:61:8b:bb:ef:cc:00:6f:
c9:88:c7:c4:9e:73:d7:f8:73:3b:70:17:25:33:68:
3c:36:59:ca:8a:47:06:46:bf:50:b6:bd:10:f4:d5:
79:fc:9f:b4:a0:de:a0:d9:89:ff:b9:21:a2:10:24:
13:f8:9b:7e:ea:06:d3:dd:60:bb:73:92:4f:8b:48:
46:56:e8:3f:49:df:79:7e:e2:08:60:d6:f2:b5:2e:
96:9d:7a:30:5f:b0:ae:b3:e0:59:9e:5f:f9:e6:21:
62:20:ef:35:5e:7f:38:eb:ee:6b:34:0a:0f:40:cc:
c2:8c:3d:bf:e3:fc:16:72:55:3e:71:9c:9c:e7:b8:
63:17:05:a7:6c:0c:fe:73:4e:2b:72:5d:97:ba:62:
73:c4:51:43:33:08:ea:6b:0d:d2:ef:74:b3:b6:67:
e9:4c:e4:ae:7e:51:cc:2c:00:53:2b:08:d5:5e:b1:
b4:bd:1c:04:72:fe:82:0a:5a:d2:3a:79:c4:cb:da:
b1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:19:1E:42:00:01:B5:97:85:FB:4D:98:61:C3:4F:AF:B6:3E:33:C4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/626298aa-2f65-4606-86ed-699bfc1bdf91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:10c0::/46
Signature Algorithm: sha256WithRSAEncryption
25:83:c1:3b:3d:b0:74:d4:3d:5f:eb:c9:2b:b4:bf:b3:7b:a6:
ac:1a:87:98:bd:c7:f0:d2:0a:b4:63:37:17:b1:1e:cf:8b:3b:
c9:12:c4:c4:80:04:0d:1a:18:37:42:c8:2d:24:c9:e2:16:ac:
55:c9:69:fb:37:d5:e9:f2:6f:6f:b6:6a:ef:f7:15:75:1d:de:
57:5e:39:d6:80:70:c7:8d:9c:58:ad:5e:07:ff:57:91:f0:ee:
a9:1e:ee:a6:26:66:a4:87:d3:90:47:b2:5c:94:02:4f:4f:ab:
50:e4:42:5f:81:87:de:9f:7c:95:21:96:7e:21:b8:d5:13:d7:
97:0e:f5:a1:4b:27:43:c9:d1:df:08:7b:22:74:2f:21:4b:eb:
17:06:80:1b:88:64:c7:d7:74:da:23:bf:dd:74:45:f1:33:2d:
5f:bb:21:84:3e:bb:96:13:80:2c:26:cf:a3:db:42:13:9a:23:
1c:de:ed:ec:3d:49:d2:39:53:69:75:e1:f3:ad:44:00:d4:b7:
06:60:49:6c:1b:80:d2:73:31:43:69:50:96:1a:55:1c:0e:0d:
4c:81:97:9b:cb:9c:55:f9:7d:03:49:63:5f:fa:c7:10:dd:74:
a0:fe:fa:41:f6:50:13:f8:87:ae:4b:1d:ef:f5:c7:7c:b3:4f:
10:12:6c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:48:27 2025 by rpki-client