Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f410204-155a-436a-a343-5a74a7999df6.roa
File: 7f410204-155a-436a-a343-5a74a7999df6.roa (raw, json)
Hash identifier: 04lfyrx++ccoRZW0rrnd/D6JOMIa+KApe5/mke102DU=
Subject key identifier: A1:9D:14:7E:46:46:1A:17:DF:F6:53:AF:B2:43:C6:53:07:CB:55:DC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 54C207F9FD7B23A7DF15356A028ABAC5B20D9853
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f410204-155a-436a-a343-5a74a7999df6.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d070:6000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:c2:07:f9:fd:7b:23:a7:df:15:35:6a:02:8a:ba:c5:b2:0d:98:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: serialNumber=618c7eba2c9f6a71c50c7bc7d1d0d96454e75d4aa21134d8d7be6360aa574d9f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:27:c6:9c:25:12:cc:69:04:f4:0d:9d:1d:7f:
35:0e:f4:0e:f0:2a:6a:c9:12:35:7d:bb:a8:58:57:
e8:91:eb:aa:37:0d:41:10:ea:9a:fa:ce:94:40:a4:
43:33:ae:62:47:f0:13:fe:b5:a4:e0:c8:a0:6e:3f:
da:ae:e7:2b:cc:9c:b0:6f:b2:a3:b5:9e:c9:69:44:
15:f2:5f:0d:94:03:78:b2:95:04:09:94:0c:17:16:
c2:3a:c0:d3:ba:c0:0f:99:2d:cb:b7:37:fb:88:7f:
85:c0:74:4d:9d:b5:bc:4e:19:c3:ed:61:1d:3d:28:
bd:1e:55:f5:dd:2b:cc:26:d1:8b:00:79:3b:79:a5:
f5:6a:ac:42:0d:12:08:ae:02:27:c1:6f:28:37:6c:
d5:2e:ad:74:23:1d:db:dd:b6:e6:cb:e9:22:01:15:
05:12:72:96:cf:a7:ec:d4:68:e5:ce:07:52:32:ed:
4b:46:f7:c3:0f:07:d1:f5:38:00:17:87:2a:83:74:
e2:66:8b:ea:90:4c:17:10:90:68:77:54:08:83:8c:
7a:a8:b8:ea:8e:4d:94:e2:4a:29:8c:9c:84:57:77:
10:27:f4:36:81:b4:7b:15:08:48:81:89:89:6b:a3:
95:33:7d:ad:aa:45:ba:2f:f6:11:a7:2f:43:cb:fd:
4d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9D:14:7E:46:46:1A:17:DF:F6:53:AF:B2:43:C6:53:07:CB:55:DC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f410204-155a-436a-a343-5a74a7999df6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d070:6000::/40
Signature Algorithm: sha256WithRSAEncryption
2c:5f:9f:91:7c:b3:f6:d0:b3:78:98:46:2d:a0:e3:01:d2:16:
f9:78:be:45:fc:12:2e:7f:45:c9:68:a6:d6:5a:1a:44:58:53:
7d:6a:c7:fc:28:20:7d:05:45:c7:ac:d8:48:f7:7e:dd:0d:62:
fd:1a:1d:30:09:90:8c:ea:93:f7:d4:f0:12:95:63:ea:28:6e:
91:0c:b5:fc:82:8f:be:bd:42:f3:6d:a2:c2:a2:ad:bf:4b:fa:
25:31:2c:fc:d5:81:bc:98:bb:c8:71:48:8c:fe:d9:cc:47:68:
5e:8d:c0:de:4e:91:39:8c:a7:e3:7e:33:01:85:fb:d3:ca:a4:
9f:4d:03:4f:13:a1:75:c7:91:cc:2e:d9:ff:fd:8b:99:b2:d0:
33:88:6f:17:07:c4:f9:04:5c:ef:4e:b7:19:b2:59:48:84:10:
3c:bb:90:aa:30:34:e9:3e:e0:23:89:d2:33:ac:e4:94:6c:a4:
5a:53:5e:59:01:06:21:c2:a7:f7:b4:73:13:8e:de:8f:2e:31:
54:1d:b7:0a:2f:c4:9b:0a:ef:f5:36:e8:73:f8:b8:24:0c:8e:
a1:1d:b7:a2:4d:27:56:99:95:86:5e:45:dd:ae:ec:45:fb:24:
57:98:1e:c6:e8:c2:d4:ce:d6:60:b9:2b:b2:e0:70:ee:ff:57:
9a:58:94:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:48:21 2025 by rpki-client