Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/651dabbc-ea96-4696-a874-5fa7163b0e4f.roa
File: 651dabbc-ea96-4696-a874-5fa7163b0e4f.roa (raw, json)
Hash identifier: W6qDlk93p1I3CFXj3DK01OpTHcKic/YvSs1axJ86IAM=
Subject key identifier: C2:89:F8:91:D9:2F:3D:35:7C:19:F4:E4:93:8F:D0:24:99:7D:79:5F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 600ADB450318F88C3920C11D1FAA4EAB07871D68
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/651dabbc-ea96-4696-a874-5fa7163b0e4f.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:9000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:0a:db:45:03:18:f8:8c:39:20:c1:1d:1f:aa:4e:ab:07:87:1d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=dcac5fbf4692581a53b25a30a58f95417d8fc8de653234e4496eedb963f450a0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:35:7c:cd:de:b8:9d:f1:b8:52:68:30:98:dc:
1b:af:56:a1:21:99:fc:1d:d1:f5:43:e0:05:e7:a8:
eb:54:0e:4c:f8:00:dd:cc:bd:ad:d5:eb:1a:82:84:
38:3c:91:28:f9:18:01:10:c1:5d:f4:f7:93:b4:4a:
31:64:01:67:a0:59:be:ac:ac:68:78:46:ae:7b:f1:
ed:ba:d5:bb:bc:6b:8f:b3:8e:41:3c:f8:46:fd:8a:
2a:7f:4c:1d:61:89:95:54:5b:ed:03:8b:a9:ef:ff:
9c:6b:93:d9:fa:61:aa:e1:c9:f3:c6:f0:2a:31:1d:
17:72:3f:53:95:c0:ba:8f:1b:5c:31:5c:02:d5:8a:
32:63:bc:8b:60:54:6a:22:23:a3:af:ba:b9:7a:b8:
05:ec:ba:dc:f8:cf:58:5e:31:e2:9a:c5:f2:c0:92:
a6:99:74:08:38:1a:10:a6:89:65:bf:79:48:f0:d7:
ae:cd:38:45:57:42:7c:38:c4:9e:51:1b:67:46:fc:
36:35:2f:5d:2c:a5:ba:5d:a0:59:71:2d:ad:4f:0a:
dc:74:ef:59:bb:f8:dc:46:9b:65:47:2b:3b:e8:a1:
09:b2:19:55:fe:b6:7b:db:70:b7:ca:fd:20:f6:0e:
f2:64:38:5a:90:20:fc:04:f6:9a:5a:f2:75:bc:a6:
32:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:89:F8:91:D9:2F:3D:35:7C:19:F4:E4:93:8F:D0:24:99:7D:79:5F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/651dabbc-ea96-4696-a874-5fa7163b0e4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:9000::/40
Signature Algorithm: sha256WithRSAEncryption
67:73:44:0a:69:3c:44:f5:e8:25:ad:93:28:17:00:d9:b5:e9:
52:51:53:ed:96:b0:ed:5c:ed:77:23:65:32:3b:e6:dd:18:ff:
ca:53:40:28:86:fe:ba:79:05:80:b8:e5:b5:41:fe:ca:c9:8b:
98:43:07:6b:4e:39:b5:83:72:8a:db:07:e1:1d:d5:3c:e9:cb:
d5:e8:23:1a:d6:c7:49:59:63:8e:3a:1f:7e:25:32:04:fc:63:
c0:36:f2:2a:65:cb:c9:c1:20:1f:ba:2b:11:f4:7f:29:93:75:
01:e3:76:2c:12:87:d8:99:a2:19:dc:fe:08:36:ae:85:f3:a6:
97:0d:03:85:c7:93:d7:ce:5f:fc:71:51:cd:a7:50:e4:a2:fa:
ab:20:80:c8:69:25:9e:cf:71:d1:f4:54:e3:c0:dc:a2:be:c9:
cb:f7:5c:b4:51:84:b2:2d:43:69:95:d3:00:80:d5:f5:7f:32:
42:e9:22:2a:b7:be:45:1e:c5:48:c8:a8:c6:f5:fc:64:34:b7:
36:53:21:6d:24:45:86:98:a0:6c:3a:9b:30:a2:c3:61:a1:2f:
09:45:ef:dd:5d:50:2e:d9:a7:dc:60:f0:7a:45:c7:da:3f:92:
9b:e6:de:ec:8f:29:89:60:b7:25:8a:0c:82:e5:28:8a:62:25:
72:c7:b5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:26:06 2025 by rpki-client