Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6f38a7e0-8c77-41da-b0a3-7ec66e06c125.roa
File: 6f38a7e0-8c77-41da-b0a3-7ec66e06c125.roa (raw, json)
Hash identifier: xhCVGTvC49IRZLyrKv3dx9az6sAJb6w1oMExQXnyazg=
Subject key identifier: E3:89:6D:26:98:96:4F:A5:84:13:44:FA:F0:E2:22:BE:1C:24:B6:76
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 65CFF429E1771244E255DAF08F3AA179183C61F3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6f38a7e0-8c77-41da-b0a3-7ec66e06c125.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:c000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:cf:f4:29:e1:77:12:44:e2:55:da:f0:8f:3a:a1:79:18:3c:61:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=fc32209e565ac27780b293305f1f6809f8758abeccd5e2afa18c52d6ed283a12, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:aa:4a:58:1f:1b:70:81:fb:ad:1e:18:92:
de:46:34:d9:8e:85:8f:42:9d:bf:0e:96:ad:7e:ba:
65:99:ac:d0:18:35:07:8b:36:33:cd:34:a2:59:55:
9f:69:0e:85:4e:01:45:30:89:ff:93:21:0a:0b:e5:
0a:90:8c:3b:d4:94:1c:3b:2e:1d:aa:67:87:a5:8e:
f6:5e:17:87:f3:fe:60:3c:57:8f:2d:0e:0f:ea:63:
83:9c:8c:a4:ad:48:75:89:dc:d5:20:02:02:d2:06:
db:b3:30:40:60:73:d3:52:72:c9:49:17:27:a1:5f:
3b:dc:e4:de:d0:c7:40:2b:ed:24:f5:0e:56:d8:83:
cd:a3:02:36:1d:86:7d:7d:5e:fe:38:c8:13:9d:25:
65:88:4f:d9:69:35:01:3f:00:7e:a5:4f:ef:4b:55:
f8:70:e7:a3:79:43:e7:b8:49:52:1f:2a:6c:7f:a8:
e7:40:79:f3:de:d3:02:aa:62:a9:03:d2:75:11:6b:
6b:f7:33:73:91:42:27:dc:35:37:ad:26:44:35:e6:
ac:d0:72:ae:d7:4b:d4:e8:5d:82:53:38:57:fa:74:
8a:4d:6a:38:4f:12:71:ec:51:29:86:57:b4:63:bb:
88:28:87:83:af:41:f9:02:17:36:e4:7a:1a:da:1a:
40:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:89:6D:26:98:96:4F:A5:84:13:44:FA:F0:E2:22:BE:1C:24:B6:76
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6f38a7e0-8c77-41da-b0a3-7ec66e06c125.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:c000::/40
Signature Algorithm: sha256WithRSAEncryption
1b:51:ee:8d:6e:73:3d:2b:94:15:51:ac:d7:19:f1:3c:1f:d5:
e9:18:c7:70:dd:3a:8c:5f:3c:b7:13:66:d0:fc:1b:ee:4e:de:
7c:aa:86:ac:21:32:f9:9c:5c:86:b2:f4:f6:92:a4:b9:e5:70:
75:af:b6:64:69:45:dd:4a:84:d9:c4:38:02:27:70:5a:f2:e4:
2c:82:85:86:c5:65:50:19:3d:7b:f7:b4:39:c1:38:ce:c0:03:
93:93:59:50:0b:10:65:97:41:e3:63:8e:9b:42:96:f5:4b:31:
bc:f7:2a:86:11:31:24:96:fc:8d:4f:9e:a0:3d:04:97:16:d0:
86:23:87:dc:fa:a1:88:43:4d:f4:56:19:6a:04:73:b2:a3:1e:
25:76:f4:3c:39:11:35:c3:02:88:fd:30:ab:f0:71:a9:fb:af:
2a:bb:1c:7c:7b:eb:d4:34:8f:c1:8f:cf:df:15:e1:76:9d:05:
d2:57:72:66:09:c6:bd:e3:3b:c8:ae:a4:ab:77:32:e9:d7:45:
85:d5:99:4a:2c:5d:c6:46:a5:48:81:d5:91:17:b5:cb:9b:78:
4f:3e:ab:d6:8b:c4:bb:6c:d2:2c:05:c8:67:d2:47:12:8b:f0:
18:a2:81:04:b6:cd:1d:fe:ac:7d:7a:69:41:80:3b:6a:d8:d4:
6b:2d:41:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:15 2025 by rpki-client