Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7b457542-f2de-44e5-aa2d-266e91992a29.roa
File: 7b457542-f2de-44e5-aa2d-266e91992a29.roa (raw, json)
Hash identifier: oeNk9xvj1xXCaVZcZwOG/vi+sCHQqfxT4p8IFps5VdM=
Subject key identifier: 5C:49:FD:B6:0E:7E:64:65:E2:B2:B5:17:74:48:45:38:A3:9D:DF:BE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6F762637CAC5CB1203AE547CC5B4B793EAE3FBC2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7b457542-f2de-44e5-aa2d-266e91992a29.roa
Signing time: Tue 31 Dec 2024 00:00:00 +0000
ROA not before: Tue 31 Dec 2024 00:00:00 +0000
ROA not after: Tue 04 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:9000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:76:26:37:ca:c5:cb:12:03:ae:54:7c:c5:b4:b7:93:ea:e3:fb:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 31 00:00:00 2024 GMT
Not After : Feb 4 23:59:59 2025 GMT
Subject: serialNumber=68dbc14d083d03acb72997797846ba909785106751fa21769e295c0bf5d4022d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:b3:04:32:c9:b3:fd:de:45:43:bb:d3:e7:
56:f8:a9:1d:43:1b:6a:28:9e:5c:00:8a:1a:f5:87:
ab:81:00:ed:69:d3:4b:95:f1:0a:28:8a:b8:9c:fb:
1a:07:c6:59:c9:2f:1e:e5:8a:1e:40:8a:b2:ba:10:
50:72:04:63:1e:15:a6:a1:da:cd:45:99:24:ad:7c:
77:e8:91:46:b6:3d:27:23:a4:4e:9c:0a:9e:27:ee:
8c:cf:5b:95:29:68:bc:f2:48:02:cd:ea:26:01:70:
41:cd:49:c8:f8:1f:fb:8c:f3:65:b0:a9:cb:18:3b:
72:76:58:88:24:7d:77:9d:fa:ae:3c:8e:07:a7:dc:
8e:91:8e:64:95:f1:37:e6:b6:33:af:9d:cf:01:86:
42:cb:1f:03:54:4e:33:2e:92:2a:4c:5d:ff:72:b6:
21:2b:12:71:fa:39:49:7f:c6:d9:6d:3a:6c:1f:9a:
74:ef:a3:d7:a1:63:d9:d7:c4:21:46:db:ac:6a:6a:
09:76:42:db:92:4b:f7:46:3d:5c:f1:2d:dc:27:7b:
2f:63:b1:fd:42:57:e6:4c:f1:ce:8b:b9:41:8c:41:
e1:db:fe:11:08:90:26:1b:fa:39:65:f4:fe:53:f5:
02:19:57:88:0e:de:d7:98:7c:ef:64:28:40:cc:30:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:49:FD:B6:0E:7E:64:65:E2:B2:B5:17:74:48:45:38:A3:9D:DF:BE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7b457542-f2de-44e5-aa2d-266e91992a29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:9000::/40
Signature Algorithm: sha256WithRSAEncryption
53:b6:8e:9f:28:25:00:b7:fb:9a:43:ef:81:bb:b9:a7:9e:41:
5f:68:69:cf:6a:57:61:68:a2:14:fc:91:c9:65:ba:79:af:50:
a7:52:93:55:1e:e8:df:a9:6f:d2:be:30:a7:46:15:59:c0:2f:
d2:16:67:9f:dd:00:bc:d2:f0:82:e4:fc:c9:98:96:01:ae:1a:
7e:5e:91:3f:19:7b:d2:c2:ba:1e:31:cb:18:27:08:71:fd:ae:
f7:fa:21:cc:07:2b:45:98:e5:01:9a:e8:10:a2:47:e7:86:0b:
ff:a9:53:6a:ff:5d:7c:cc:45:09:59:fc:1b:f6:b8:00:ec:7b:
02:b8:0d:0d:45:72:69:c8:8d:f6:7f:f0:a7:0c:81:de:1b:55:
ed:e2:47:b0:a7:a9:c0:e6:c1:67:42:67:26:f8:c0:7a:a7:ce:
bc:91:9b:e3:b2:cf:2b:4a:6d:75:25:5f:22:80:78:67:d0:ef:
3e:56:0f:39:96:c1:32:4f:56:ff:33:a0:5c:31:93:2c:d2:95:
7a:b3:f8:9e:b4:da:90:a8:44:46:ae:ce:00:eb:cd:75:91:f9:
07:fd:e6:2c:a5:68:84:36:cd:8a:6d:76:59:8c:0b:64:b6:1c:
4e:ce:7b:c6:b7:ac:c6:b5:db:7b:01:98:62:49:d4:3f:11:ee:
14:24:5e:c6
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUb3YmN8rFyxIDrlR8xbS3k+rj+8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDEyMzEwMDAwMDBaFw0yNTAyMDQyMzU5NTlaMHoxSTBHBgNV
BAUTQDY4ZGJjMTRkMDgzZDAzYWNiNzI5OTc3OTc4NDZiYTkwOTc4NTEwNjc1MWZh
MjE3NjllMjk1YzBiZjVkNDAyMmQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALwIswQyybP93kVDu9PnVvipHUMbaiieXACKGvWHq4EA7WnTS5XxCiiKuJz7
GgfGWckvHuWKHkCKsroQUHIEYx4VpqHazUWZJK18d+iRRrY9JyOkTpwKnifujM9b
lSlovPJIAs3qJgFwQc1JyPgf+4zzZbCpyxg7cnZYiCR9d536rjyOB6fcjpGOZJXx
N+a2M6+dzwGGQssfA1ROMy6SKkxd/3K2ISsScfo5SX/G2W06bB+adO+j16Fj2dfE
IUbbrGpqCXZC25JL90Y9XPEt3Cd7L2Ox/UJX5kzxzou5QYxB4dv+EQiQJhv6OWX0
/lP1AhlXiA7e15h872QoQMwwNg8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRcSf22
Dn5kZeKytRd0SEU4o53fvjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
N2I0NTc1NDItZjJkZS00NGU1LWFhMmQtMjY2ZTkxOTkyYTI5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DKQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBTto6fKCUAt/uaQ++Bu7mnnkFfaGnPaldhaKIU
/JHJZbp5r1CnUpNVHujfqW/SvjCnRhVZwC/SFmef3QC80vCC5PzJmJYBrhp+XpE/
GXvSwroeMcsYJwhx/a73+iHMBytFmOUBmugQokfnhgv/qVNq/118zEUJWfwb9rgA
7HsCuA0NRXJpyI32f/CnDIHeG1Xt4kewp6nA5sFnQmcm+MB6p868kZvjss8rSm11
JV8igHhn0O8+Vg85lsEyT1b/M6BcMZMs0pV6s/ietNqQqERGrs4A6811kfkH/eYs
pWiENs2KbXZZjAtkthxOznvGt6zGtdt7AZhiSdQ/Ee4UJF7G
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:46:06 2025 by rpki-client