Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8afa1c3e-762a-4db1-b600-92897f76c67e.roa
File: 8afa1c3e-762a-4db1-b600-92897f76c67e.roa (raw, json)
Hash identifier: 33iZk/jWLOQTgAD3rptUvBsjkwKjiuDuC3aicxQWEOU=
Subject key identifier: 3A:FA:9F:9F:1D:62:54:F8:26:7F:E2:60:DB:36:76:9B:5A:36:42:EC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 35643EBB4B4804F30F49F701CAF13A7C82E7550A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8afa1c3e-762a-4db1-b600-92897f76c67e.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07c:9000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:64:3e:bb:4b:48:04:f3:0f:49:f7:01:ca:f1:3a:7c:82:e7:55:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: serialNumber=44ec306bf389c95dea58c007e52e5c0277c620d6ac0b030f46d65a12d371e319, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d6:f5:90:46:a9:cd:63:03:56:d5:ca:55:a4:
c0:0f:95:c9:8b:b7:0d:30:b1:10:1f:f8:04:f7:42:
72:bd:e3:ac:10:33:6e:0a:e6:4d:88:82:10:3e:ef:
7b:4f:84:3c:e3:8a:66:04:d5:81:2c:ce:fb:40:5b:
1a:ef:9d:c7:11:df:94:a1:a3:78:9b:8e:eb:59:aa:
cb:aa:75:cc:08:48:eb:f8:2f:4e:0c:bf:08:db:ab:
24:cd:66:37:a4:27:c6:49:26:10:bd:50:c6:83:bb:
ca:e6:d9:b8:b1:c7:c9:52:fc:32:0d:e8:d0:c4:17:
d5:ac:93:43:e4:03:22:e3:c2:8b:3a:08:6e:b9:52:
4b:93:6e:6d:1f:9d:58:06:d3:8f:ed:3a:d4:bc:3c:
31:28:ab:a6:e9:31:94:0c:5c:d5:69:fd:6f:b7:72:
79:98:bf:b4:06:9f:4b:11:19:fa:e5:e8:9e:f6:e6:
8f:64:c1:b3:2f:f9:62:92:22:3d:62:ac:77:bb:dd:
8c:8c:32:c3:4f:c1:e2:0d:a1:9d:f1:e5:25:c4:ec:
94:67:63:80:a6:fb:5b:98:e4:84:9d:3f:c6:51:cf:
4a:6e:0e:0b:f3:5c:e3:a7:37:f6:78:9b:af:c4:bb:
ab:fb:e9:84:fb:e6:1b:85:75:ad:3e:24:2e:65:b8:
b4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FA:9F:9F:1D:62:54:F8:26:7F:E2:60:DB:36:76:9B:5A:36:42:EC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8afa1c3e-762a-4db1-b600-92897f76c67e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07c:9000::/40
Signature Algorithm: sha256WithRSAEncryption
4d:60:1b:f6:5f:96:3b:5e:8a:25:8a:bb:04:7d:bc:ad:79:82:
ec:12:98:4b:ad:35:c7:97:fd:15:0d:eb:34:1e:9f:a2:91:04:
ea:7a:03:03:91:6a:86:be:9d:71:88:c6:28:83:92:5e:19:b5:
04:51:33:7c:a2:70:3e:93:4d:d8:15:32:8f:b9:18:9f:c0:4f:
64:72:17:24:8f:c4:72:91:ce:9b:3f:6a:04:9e:6d:66:04:e5:
fa:b1:4f:76:f2:43:ef:a5:e2:ec:de:f0:36:54:05:1e:db:74:
01:ca:83:c2:e9:b6:f7:cb:97:12:09:65:20:76:fe:9d:9b:08:
58:19:00:c7:19:11:11:87:fd:c9:7e:16:66:ea:60:b0:00:4b:
d4:d4:96:00:ae:b1:29:9b:72:a9:45:8a:43:5e:3f:f5:9d:5a:
e4:c9:7e:32:b0:e2:35:ad:e1:e9:92:39:da:e6:92:8c:91:f3:
7c:49:c1:67:f6:e4:3f:c7:a2:cc:b6:6b:0d:0b:50:9d:8b:68:
52:7e:f5:7c:b7:1b:7d:27:7a:50:f7:8f:0e:3b:52:6c:1b:7a:
74:93:a8:a6:a5:de:14:2e:4a:b5:33:16:f4:5a:2d:9a:09:61:
d4:57:52:4e:3f:fb:c3:c7:7e:08:bf:87:67:0e:7b:c6:0a:2e:
46:f5:63:4c
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUNWQ+u0tIBPMPSfcByvE6fILnVQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDEyMTYwMDAwMDBaFw0yNTAxMjAyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ0ZWMzMDZiZjM4OWM5NWRlYTU4YzAwN2U1MmU1YzAyNzdjNjIwZDZhYzBi
MDMwZjQ2ZDY1YTEyZDM3MWUzMTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMvW9ZBGqc1jA1bVylWkwA+VyYu3DTCxEB/4BPdCcr3jrBAzbgrmTYiCED7v
e0+EPOOKZgTVgSzO+0BbGu+dxxHflKGjeJuO61mqy6p1zAhI6/gvTgy/CNurJM1m
N6QnxkkmEL1QxoO7yubZuLHHyVL8Mg3o0MQX1ayTQ+QDIuPCizoIbrlSS5NubR+d
WAbTj+061Lw8MSirpukxlAxc1Wn9b7dyeZi/tAafSxEZ+uXonvbmj2TBsy/5YpIi
PWKsd7vdjIwyw0/B4g2hnfHlJcTslGdjgKb7W5jkhJ0/xlHPSm4OC/Nc46c39nib
r8S7q/vphPvmG4V1rT4kLmW4tOsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ6+p+f
HWJU+CZ/4mDbNnabWjZC7DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OGFmYTFjM2UtNzYyYS00ZGIxLWI2MDAtOTI4OTdmNzZjNjdlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HyQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBNYBv2X5Y7XoolirsEfbyteYLsEphLrTXHl/0V
Des0Hp+ikQTqegMDkWqGvp1xiMYog5JeGbUEUTN8onA+k03YFTKPuRifwE9kchck
j8Rykc6bP2oEnm1mBOX6sU928kPvpeLs3vA2VAUe23QByoPC6bb3y5cSCWUgdv6d
mwhYGQDHGRERh/3JfhZm6mCwAEvU1JYArrEpm3KpRYpDXj/1nVrkyX4ysOI1reHp
kjna5pKMkfN8ScFn9uQ/x6LMtmsNC1Cdi2hSfvV8txt9J3pQ948OO1JsG3p0k6im
pd4ULkq1Mxb0Wi2aCWHUV1JOP/vDx34Iv4dnDnvGCi5G9WNM
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:35 2025 by rpki-client