Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/829639b2-d3fc-422f-8540-044327dad29b.roa
File: 829639b2-d3fc-422f-8540-044327dad29b.roa (raw, json)
Hash identifier: BVsgntZFf3IAd5uTY4pD/edB9FdN6RwMN08nC974BUc=
Subject key identifier: AC:46:D5:90:34:CB:32:58:DA:A0:E7:4A:3F:4B:09:17:C3:BD:34:F0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 25C68378BA716878ED3DD7A329C57C6F363AABAE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/829639b2-d3fc-422f-8540-044327dad29b.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:a000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:c6:83:78:ba:71:68:78:ed:3d:d7:a3:29:c5:7c:6f:36:3a:ab:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=85895ecd124d05c403525013dbdaca84c61e60e2bb886ce8f6c5f85a5c40ef46, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f9:6b:22:d4:e4:47:77:ca:6c:9f:d0:bc:77:
d4:46:41:90:4f:f7:e7:8c:15:10:db:7d:db:3e:ff:
d2:68:cf:28:4f:7e:e7:9f:f5:54:fc:15:33:74:6e:
6c:cc:b7:f5:6e:19:b9:cf:ca:7b:52:58:ed:95:62:
85:86:f3:fe:36:0b:21:bf:a7:b4:45:59:fe:eb:8e:
58:ab:26:7d:24:72:3b:e0:2a:ec:1b:93:8a:4d:29:
7a:13:7b:b8:80:5c:ca:95:b1:f4:27:9d:c2:c6:ad:
2e:c5:f5:74:2d:9d:85:80:96:7a:f9:b2:67:dc:c0:
19:25:9e:69:f0:c2:7e:dc:0e:0b:56:f2:a2:db:4a:
05:c1:67:54:57:64:79:47:06:d9:7f:a4:87:34:b9:
aa:79:3d:1a:86:3f:30:b5:d3:b1:05:06:71:be:6e:
88:22:e4:ae:d1:f9:cb:b5:29:a6:7b:19:5e:9e:26:
17:8b:db:b2:17:ce:a2:b6:d1:3a:9e:fc:dc:92:f4:
6c:7d:77:1f:38:31:44:a4:8a:52:ba:3d:ae:74:81:
5d:82:ae:89:19:15:53:b4:2c:07:69:27:17:1d:e4:
f7:f4:e8:4d:02:35:ff:18:a0:94:cb:37:18:93:b9:
49:71:c2:a8:da:01:7b:b5:b1:7f:cd:b6:f2:12:cb:
f6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:46:D5:90:34:CB:32:58:DA:A0:E7:4A:3F:4B:09:17:C3:BD:34:F0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/829639b2-d3fc-422f-8540-044327dad29b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:a000::/40
Signature Algorithm: sha256WithRSAEncryption
b6:93:48:56:18:5f:34:e6:17:6b:fa:90:85:39:3f:a7:db:be:
59:b7:dd:e8:40:af:e3:f6:b0:e4:7f:d9:ea:e6:0d:e9:7d:78:
87:30:4d:a3:cd:a4:cc:fd:45:ef:ff:69:40:9c:42:65:49:42:
55:5f:ab:dd:5e:8d:60:87:04:93:12:ac:5d:c3:e9:a6:06:a4:
c5:4b:24:91:9a:ff:fe:16:c6:1b:f8:ec:e8:88:bd:0c:a8:2d:
e2:9d:06:e6:46:58:12:90:38:cd:e6:3d:eb:f3:23:c5:76:6e:
56:6b:7a:09:16:79:78:20:6f:e7:8f:2d:f5:40:7a:6f:40:2f:
da:7c:59:64:ff:92:ab:87:c9:f7:65:0c:fc:20:12:c1:e2:06:
6b:f2:62:13:8a:e3:a9:e3:bf:16:45:48:e1:85:c6:a0:16:2d:
15:c8:ea:f4:78:f7:b6:7f:cf:14:3d:4b:cf:b8:34:90:90:9b:
aa:79:09:83:a8:ad:b0:f4:6e:63:1f:f3:ea:a9:3b:42:a2:92:
7c:22:f3:79:2b:37:08:a0:29:e5:40:e3:f4:f0:5d:d5:3c:98:
9d:26:d7:05:4a:b4:61:6d:49:cf:d6:37:d9:1d:e0:a0:76:ea:
96:03:99:4b:75:45:31:59:09:0b:d6:c7:ae:54:91:1c:72:6f:
6f:2a:cb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:44:24 2025 by rpki-client