Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/97a73558-57cd-4780-b7fc-54a0ca98e167.roa
File: 97a73558-57cd-4780-b7fc-54a0ca98e167.roa (raw, json)
Hash identifier: dcrDI3v7ugx1OxrywQxMaE0VZvA/8BeoHQHAyZ7pe94=
Subject key identifier: E7:D6:2C:66:F6:80:8F:6B:C2:62:2E:9B:F8:E0:EE:06:E2:70:E8:0B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0770D9781865A021B3D10166D5BF9E64FA6A5D08
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/97a73558-57cd-4780-b7fc-54a0ca98e167.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:6080::/46 maxlen: 46
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:70:d9:78:18:65:a0:21:b3:d1:01:66:d5:bf:9e:64:fa:6a:5d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=36d2c934c8c25280d0cbc39e2a4dc9e34cabeeb32d0d8e62f229100eb9cebb4a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:03:d2:d0:ca:1a:c6:f1:94:e8:59:c2:7b:
36:a8:84:64:bd:d9:38:48:5e:fc:28:ba:aa:f2:62:
44:26:cd:99:51:13:c0:d8:9a:f3:d0:41:33:ee:3c:
67:44:8c:60:00:a5:71:38:05:5d:88:7b:fa:c0:38:
1a:ae:5a:3c:f7:e9:86:49:6c:0f:1f:d9:22:e7:9e:
6e:29:55:5b:1a:57:48:52:fc:32:fa:95:8e:40:58:
92:3d:ed:9c:7b:07:4d:da:e9:f7:1a:47:c0:b6:36:
af:ce:9d:99:c0:7e:54:4f:20:43:1c:b0:41:11:1c:
97:9f:43:fe:cb:1e:50:10:65:96:d7:00:d4:d3:16:
d1:08:6e:56:17:43:fb:cf:39:cc:f0:5b:84:e2:fd:
af:f6:39:b8:7c:9d:33:2f:34:8a:91:1b:02:72:ac:
eb:3a:b5:b1:22:a4:9c:64:d3:c0:21:8d:9f:98:cc:
7a:26:88:cb:55:f6:f1:e2:5b:7a:a8:35:0a:bf:3b:
91:61:3a:66:11:b8:4c:2d:a8:13:34:0c:e3:52:ad:
62:1b:b0:41:59:cb:4d:58:de:be:7e:6c:45:a3:52:
80:8d:c9:2c:68:a4:10:42:93:df:99:11:10:b9:52:
4b:09:19:35:30:88:e4:13:0e:42:db:da:4d:e9:9e:
f4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D6:2C:66:F6:80:8F:6B:C2:62:2E:9B:F8:E0:EE:06:E2:70:E8:0B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/97a73558-57cd-4780-b7fc-54a0ca98e167.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:6080::/46
Signature Algorithm: sha256WithRSAEncryption
22:4c:52:78:bf:a7:e5:68:2f:c4:32:d1:f7:45:a0:36:f8:04:
37:df:fb:97:03:36:02:58:7f:72:5d:bb:60:18:29:eb:4f:4f:
66:50:f4:9b:f3:a9:d3:36:2b:81:5c:dc:34:11:fc:e9:ed:cc:
0a:49:a0:69:20:7e:3d:80:88:9f:db:9d:68:28:99:45:bc:24:
59:96:e0:9c:ac:29:c0:b0:15:76:f1:8d:9e:f4:63:bc:65:f3:
e4:59:a7:b2:3f:e7:ba:32:4e:82:8c:11:81:cb:a2:63:a0:99:
8d:c5:59:2e:11:ff:5a:99:76:01:13:bd:1a:c8:1f:18:97:90:
79:42:91:9f:2e:a4:f7:a2:68:96:78:fd:f1:89:35:b6:98:f5:
3a:c3:fa:4e:92:f6:a2:c4:00:39:36:e7:82:c8:d7:f3:db:f0:
4a:a2:c6:1d:5e:58:57:e4:26:f4:a7:03:33:b8:1f:88:c8:f7:
26:92:93:ff:60:2b:e0:69:2f:57:3b:f9:5d:bb:07:f0:b8:59:
e0:8a:da:35:b0:3e:d8:a1:4a:e0:fb:d4:58:f5:e6:1e:3c:1a:
70:32:8d:0e:ec:b6:dc:bb:4d:bd:f2:bc:b4:3b:c2:37:c9:84:
20:ae:cd:1d:98:7f:e9:86:00:68:51:ec:16:82:d7:8a:fc:93:
20:49:2c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:46:17 2025 by rpki-client