Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a0ec97a-c1aa-4ca3-890d-988a41544811.roa
File: 8a0ec97a-c1aa-4ca3-890d-988a41544811.roa (raw, json)
Hash identifier: fQU9wP4N/fJ5gpGXwaDpxlMLOyVMpFF3etVJh1iMShU=
Subject key identifier: C4:C8:02:61:88:BF:A2:61:02:9B:6D:82:7D:65:B8:CE:59:53:4D:3C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3F9A3CD7AF892EB0EF46CCC4E949C205036EBB34
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a0ec97a-c1aa-4ca3-890d-988a41544811.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:9000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:9a:3c:d7:af:89:2e:b0:ef:46:cc:c4:e9:49:c2:05:03:6e:bb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: serialNumber=96566dd235644c9adc99c796e9c12c8113cf9e0384e8a1e13abc0017699f91a9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c4:4a:c2:6d:49:35:b5:22:8b:ec:71:a1:89:
ca:f8:83:9e:44:97:c8:88:3a:87:5e:7f:a6:d9:ac:
a0:f5:55:ab:9c:21:71:af:1a:97:a7:5e:b4:a3:a2:
78:99:f0:4f:90:93:5b:34:2a:ae:58:7f:9c:5c:c3:
45:16:d1:82:59:b1:11:b5:4a:d5:05:b3:bb:7e:11:
55:5a:56:a7:b3:f7:29:b9:70:a0:b7:91:10:0a:e0:
3e:99:fd:21:4e:1d:5a:dc:93:5b:5a:a9:b4:3c:35:
88:68:4e:f1:7c:3d:3c:77:e3:4f:8b:33:42:04:16:
f7:66:f8:e0:99:15:0f:bc:a0:58:1a:75:94:b6:9c:
b1:11:c2:2a:08:d6:b0:95:d5:44:02:72:9c:c5:61:
15:b0:fe:08:98:21:c3:de:00:1a:b3:ca:e7:63:87:
8d:4e:b4:55:61:3f:e2:3e:01:db:a6:f7:0b:c6:29:
69:e7:ae:83:5d:bc:e0:28:9b:9f:f8:5b:c7:71:65:
75:fc:f6:1d:ce:0c:74:c8:2b:f1:ba:a8:1f:08:3b:
9a:7b:c1:81:41:b0:29:6a:03:87:4e:36:68:77:f5:
30:f5:55:c3:c6:1c:89:be:19:15:3a:5e:d8:29:0d:
99:e9:e2:9d:8a:8d:97:26:6f:d3:c5:39:6f:92:ba:
7e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C8:02:61:88:BF:A2:61:02:9B:6D:82:7D:65:B8:CE:59:53:4D:3C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a0ec97a-c1aa-4ca3-890d-988a41544811.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:9000::/40
Signature Algorithm: sha256WithRSAEncryption
68:f7:90:72:86:59:31:60:87:b6:72:99:97:1e:27:95:d3:32:
4d:37:39:92:3f:f4:63:ec:e5:4f:c9:dd:1a:29:b2:1d:17:77:
4d:7f:e5:7b:18:c6:5c:5f:bd:08:36:cf:21:1c:db:f9:b9:9f:
76:3f:8a:b9:25:9d:ed:86:d4:11:08:ed:50:4f:e5:18:c5:40:
75:fd:ca:8c:62:c2:38:39:e9:e0:6e:55:28:e6:fc:d7:45:f3:
ce:21:ca:94:7d:32:0a:6d:72:49:8f:60:a5:85:ff:1e:a1:54:
ee:c4:a6:4b:da:4e:9f:6d:32:47:35:55:73:99:3b:83:33:67:
81:7c:9c:3d:ec:c5:e2:bc:c7:72:ff:3c:8f:3a:77:9c:aa:1a:
29:b9:68:8d:2a:5e:cf:e1:27:31:80:72:90:35:17:f0:1a:74:
d4:8a:f1:24:7e:4e:40:f3:df:7d:60:87:3c:3d:5d:03:b6:97:
fa:de:4b:55:ec:a4:0a:0a:fa:26:78:1a:c1:5b:85:e3:4d:4b:
fd:1e:b9:2c:60:ed:17:c5:ac:54:f8:d1:99:ae:7f:7d:6f:bb:
81:21:62:b8:6f:19:74:91:74:9c:7b:33:ce:32:e6:bf:55:03:
86:99:b0:9e:f9:d7:f9:14:42:9a:4a:be:15:32:ca:61:dd:83:
50:fe:18:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:28 2025 by rpki-client