Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a76c4bf7-5d73-44e2-9678-e0f57175e417.roa
File: a76c4bf7-5d73-44e2-9678-e0f57175e417.roa (raw, json)
Hash identifier: ufHD39poSqZDXa3ZjkGqohDd9okTd3afGPSdRs5BoqQ=
Subject key identifier: DA:2E:C1:D4:50:12:62:5B:50:3D:49:29:75:6A:FD:27:CD:C5:2F:06
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 52C35086108B5A30498200189095410BA83870A6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a76c4bf7-5d73-44e2-9678-e0f57175e417.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014::/35 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c3:50:86:10:8b:5a:30:49:82:00:18:90:95:41:0b:a8:38:70:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=dd3a02ee7aca1035d42a91b8d57da475d5c995249f966f4014642763d8ff22ed, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f6:da:7c:9e:60:62:b0:86:67:79:79:97:cb:
27:e3:78:5a:d1:a5:8e:7d:b0:ce:f0:70:a4:fa:6e:
7b:87:ac:50:4f:7c:eb:09:61:34:9a:71:6b:91:6f:
24:6f:7d:84:a7:dd:2c:92:14:ba:08:58:2c:2a:8a:
fd:af:40:9d:0f:75:59:77:eb:c8:80:44:3c:4e:bd:
98:08:98:0f:c9:4b:42:d7:41:14:91:23:29:d1:04:
dd:9c:22:7c:ca:cf:bd:0a:90:27:70:c5:0a:6d:57:
5d:ab:bc:2f:52:91:c2:ca:c5:ba:21:e2:f7:19:20:
e0:c4:a4:f6:a9:46:0d:e9:24:70:36:88:c7:f9:e0:
f7:9e:3c:67:a3:2e:0d:ef:6b:e7:10:09:30:9a:3a:
fb:6a:44:66:8c:60:1d:6e:64:6f:75:2a:1f:a4:ea:
0f:76:cb:10:19:38:8d:5f:44:6a:5b:9b:41:88:68:
6e:34:79:41:8b:bb:23:28:d8:c4:97:0f:da:40:d6:
91:3d:35:ea:5a:e8:e1:ee:0c:c0:e0:25:10:7b:9b:
b2:e6:f7:00:a5:22:56:ee:07:91:ab:af:52:9c:80:
41:12:69:b9:ee:28:69:a2:f9:a4:7c:a7:66:6f:83:
65:62:e7:eb:68:a9:86:a1:87:6a:db:6f:9f:9b:e0:
25:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2E:C1:D4:50:12:62:5B:50:3D:49:29:75:6A:FD:27:CD:C5:2F:06
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a76c4bf7-5d73-44e2-9678-e0f57175e417.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014::/35
Signature Algorithm: sha256WithRSAEncryption
30:bf:a6:66:a1:11:00:d7:e9:25:37:c6:86:be:51:1c:05:f6:
1f:b1:25:7a:da:30:2b:c3:2f:bf:c1:94:9b:ae:eb:1c:f5:16:
11:ef:49:57:45:e7:09:2e:52:0d:94:4f:77:30:74:6e:88:6a:
c6:d0:02:6d:7c:8c:f5:e7:fc:fa:1a:54:69:5d:f4:6c:e2:da:
67:84:e5:03:dc:c6:b3:61:79:55:88:42:b3:91:81:d2:8c:9f:
25:3f:6f:ba:d2:ff:ac:60:1f:88:ca:bf:47:ef:38:10:69:3d:
6d:a3:de:01:6d:eb:a3:78:42:35:fc:39:99:7a:d1:87:0e:4f:
ae:75:c6:b7:71:af:0b:cf:4e:5f:29:d4:bc:1d:42:d0:08:ee:
41:2f:2a:25:10:88:2c:27:c4:41:61:3c:4f:d2:ec:1a:2b:c9:
55:77:b3:c4:4d:99:bf:27:bf:9f:6a:d9:db:f0:ea:21:62:fe:
b2:cb:5e:c0:61:84:07:1c:91:f3:a1:6c:5e:da:c8:35:cb:a6:
39:c1:6d:e7:e6:61:1c:fd:71:59:79:fb:c8:76:4c:7d:77:02:
7a:8d:89:34:80:b9:08:61:34:cc:4a:c0:af:51:4b:b1:cf:e6:
cf:f7:2c:b9:46:e1:29:a7:92:ce:69:46:28:a0:f3:b9:36:5c:
08:7f:4b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:44:14 2025 by rpki-client