Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a62f4423-d8c8-4470-b8ba-d394307f27b1.roa
File: a62f4423-d8c8-4470-b8ba-d394307f27b1.roa (raw, json)
Hash identifier: 1Gr3+5YkJcJeEqWM//5gghKoKQ1zXv9H+IF/z4FzGow=
Subject key identifier: 60:C7:EC:09:CC:DD:64:09:EF:70:5F:7D:67:2E:EB:93:2B:CB:23:1B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7E8D928F6806EE97AA5B416186F9341C7E329A70
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a62f4423-d8c8-4470-b8ba-d394307f27b1.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:2000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:8d:92:8f:68:06:ee:97:aa:5b:41:61:86:f9:34:1c:7e:32:9a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=ea028bbd98e6bad70bd94b4bece2a5fab404e99e36e162bde9bafc7b3603c3a3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:34:2d:8f:a4:d0:03:76:f9:b6:38:52:28:96:
70:c0:f3:2d:ba:47:95:83:21:5b:d7:8a:14:89:97:
27:03:b1:1b:2f:9d:51:c5:01:e3:8e:c3:82:7e:6b:
f8:da:ba:db:60:28:da:5c:53:74:c5:90:df:18:ca:
11:5a:93:d8:74:5a:35:d2:a7:9a:1f:68:89:62:80:
d7:86:ad:68:cc:0d:7f:04:cb:03:7f:d9:ff:6b:62:
d4:a2:65:ba:0a:83:13:c9:f8:8c:96:45:a1:ab:60:
b8:c9:6b:f5:22:bf:fa:cc:89:47:c2:27:28:2b:69:
3b:e6:4e:b8:46:1d:d1:99:b6:c5:50:53:7b:8e:99:
af:f0:09:f8:b4:ce:9b:f6:bf:17:e9:21:04:75:3d:
61:07:d9:50:d2:d9:cf:c6:9a:f8:6a:45:26:ed:96:
b2:ff:30:92:57:22:45:3c:f0:50:98:6a:2d:0f:fa:
e0:a8:d9:6a:40:63:99:ee:65:f9:0f:0a:c4:c3:48:
d3:57:4d:80:76:95:b4:fe:eb:6c:46:96:3c:81:f3:
fc:fb:db:87:83:07:50:96:d4:df:0e:ca:31:68:ed:
63:fc:d8:18:79:32:3f:9a:8f:bc:bb:31:91:d1:bd:
ab:e4:03:e3:92:82:0c:45:fc:ce:3b:51:64:03:0f:
5b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C7:EC:09:CC:DD:64:09:EF:70:5F:7D:67:2E:EB:93:2B:CB:23:1B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a62f4423-d8c8-4470-b8ba-d394307f27b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:2000::/40
Signature Algorithm: sha256WithRSAEncryption
20:9a:bc:71:c0:f0:50:d0:4b:cc:5e:5e:8d:68:01:7b:42:d2:
99:ed:e6:40:73:98:f7:f6:65:cd:b9:aa:40:87:95:f6:d6:4b:
08:b3:f9:3d:aa:69:a4:2c:cc:69:ce:94:83:57:3d:d7:6a:c2:
ff:ba:e0:5e:3a:08:bf:68:5b:0d:fe:54:63:1e:68:66:a1:ce:
d1:fe:ec:76:82:8d:e4:f0:83:52:2a:09:c1:5d:21:49:61:45:
90:33:e0:44:2b:87:47:f5:24:64:5e:96:b1:3c:b6:77:b0:55:
7d:ef:df:42:59:29:42:09:9d:7e:05:d9:5b:1f:17:ab:e8:54:
93:d8:22:82:e6:4e:d9:1a:24:47:6e:77:b0:a9:ea:37:d7:c6:
f2:b6:0e:02:27:30:57:df:32:2e:d3:df:1a:bb:c1:c2:86:97:
26:b0:91:f6:44:4c:cd:00:ab:a9:71:54:f6:da:cb:66:f3:0f:
e6:29:1a:29:88:b2:89:1e:3d:27:06:87:22:e6:f7:9f:75:f2:
d7:ce:52:66:22:49:c1:26:ad:e9:19:b7:5c:3e:03:2c:34:90:
2f:39:72:79:61:c7:61:71:1f:dc:13:ed:0e:6b:89:3c:9d:7b:
fa:ae:f4:ca:8c:d2:67:1e:a0:39:1f:78:17:e2:69:f0:e0:91:
c6:7a:ca:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:26:25 2025 by rpki-client