Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8d270a9e-8a3a-42e6-8e3d-9ed7438a02a0.roa
File: 8d270a9e-8a3a-42e6-8e3d-9ed7438a02a0.roa (raw, json)
Hash identifier: rcJrmeX7imzvdXdEFsVpTyLDKkZJMnSWWTTSSTeLk8A=
Subject key identifier: 02:5D:C9:03:F8:51:27:E5:5C:52:15:29:49:A9:1E:BB:0A:06:86:7C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 71D496364E8BC9FA6B6383558E73C19C9C9470AF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8d270a9e-8a3a-42e6-8e3d-9ed7438a02a0.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:4040::/46 maxlen: 46
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:d4:96:36:4e:8b:c9:fa:6b:63:83:55:8e:73:c1:9c:9c:94:70:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=388ab564c6484ed2efb4876d9640e83780f5c6afb0b15ef22874b989df42f92e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e7:0b:6a:34:0e:db:a4:b8:c8:49:0b:ea:2a:
a2:e2:5f:bb:3f:44:b9:93:8d:84:4b:e5:86:5e:e3:
cd:90:33:3d:40:c5:3b:47:00:7a:9e:ad:5f:46:6b:
ef:83:95:7c:1c:75:e8:29:31:df:91:31:be:2f:8b:
09:05:a2:c1:4d:d9:83:de:52:23:c3:67:49:fc:00:
60:e0:12:ca:dd:a1:38:6c:ec:73:0b:9d:ea:bd:a2:
40:2e:42:25:2e:c5:88:ce:3d:fe:47:72:ad:49:8d:
76:a4:70:b6:68:ef:fa:50:41:a9:7a:aa:84:91:68:
26:18:e8:8a:df:d7:84:33:be:a1:44:d1:f1:77:be:
83:31:fd:cf:3a:e2:ae:63:13:48:ee:4e:38:ae:6f:
16:48:f2:f5:d8:75:9c:af:05:f0:0c:31:24:76:cb:
b0:ec:9c:98:c7:3a:31:a1:51:0c:dd:d1:d8:df:f9:
a9:b3:4e:b1:83:9c:d5:23:2f:06:db:0e:d3:48:8b:
ba:bf:2a:72:72:2f:eb:3c:85:7a:26:d6:82:a9:f3:
72:e9:a2:a7:c8:ab:05:b7:49:53:eb:40:fe:41:99:
ac:48:a4:c2:c1:4c:fb:68:ce:26:fa:22:74:b6:4b:
a7:44:12:f2:58:17:23:de:e4:ec:78:d6:65:86:f5:
84:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5D:C9:03:F8:51:27:E5:5C:52:15:29:49:A9:1E:BB:0A:06:86:7C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8d270a9e-8a3a-42e6-8e3d-9ed7438a02a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:4040::/46
Signature Algorithm: sha256WithRSAEncryption
a9:4e:40:50:63:33:53:43:0b:c2:d2:54:fe:6f:27:25:53:c3:
8f:e9:46:67:7f:3b:74:38:83:8a:ac:51:7e:f0:f4:16:19:d5:
e7:ea:b0:c4:39:cd:65:be:0b:6c:8a:06:82:56:df:b5:6b:9e:
09:01:c4:81:b1:cb:40:0e:d1:ca:82:61:c9:86:11:13:5e:d9:
33:41:57:f0:cf:6d:3f:a3:fe:b8:19:65:95:77:45:00:76:97:
1c:6b:ba:0a:0f:9a:fb:72:3c:dd:c5:2f:c0:af:ac:5c:a7:38:
7a:08:a5:bb:71:d0:e3:03:77:2e:f2:4d:bc:f3:78:b2:9a:76:
67:07:e3:d7:d6:5b:44:78:b9:25:ae:da:06:fa:52:56:59:ab:
3b:70:6a:68:37:72:af:a1:82:ed:ea:e5:2d:83:56:dc:fd:4f:
61:82:87:e3:6d:3d:13:38:fa:37:4a:1d:c9:96:ce:5c:9a:db:
7c:d4:c8:f8:e6:4e:a2:33:04:ef:33:dc:0b:0e:a1:0c:9d:21:
cd:42:40:6a:05:ed:4a:5f:10:ee:f0:22:e0:1d:9a:b3:78:31:
ad:8d:7c:7d:17:73:2e:bd:4a:cf:be:a8:34:b7:48:c3:5e:32:
c5:6f:74:2a:59:b5:de:b7:de:c3:96:b6:70:66:1f:5d:95:47:
1b:57:e4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:47 2025 by rpki-client