Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad4fc667-5e8e-4f39-9814-5ea23369e78b.roa
File: ad4fc667-5e8e-4f39-9814-5ea23369e78b.roa (raw, json)
Hash identifier: DVQDKc8DYowIXehQkGjZC90GS41icg5cpUa15Q5OM08=
Subject key identifier: D4:C8:4A:03:B4:3D:67:C9:D3:86:86:0C:F8:82:D0:69:3E:09:E1:CB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 040CC2A6694B13F7C66ADB775FF608BC46F960F5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad4fc667-5e8e-4f39-9814-5ea23369e78b.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 87.238.80.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:0c:c2:a6:69:4b:13:f7:c6:6a:db:77:5f:f6:08:bc:46:f9:60:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: serialNumber=792e61cc9e885700b615408bb8d2d13df3d885352155b029745df57c78ce8e86, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f4:48:72:a0:e3:c0:d7:f7:ad:29:56:c7:b9:
72:d8:55:0c:77:fd:31:9b:93:51:a6:e4:90:ce:8b:
06:6d:7d:65:58:97:59:cf:5d:2b:ea:8a:98:71:2b:
65:9d:08:84:87:57:92:1a:bb:a7:18:55:e3:13:b2:
9c:0b:bd:f9:4f:74:a4:7e:a6:cd:5a:31:41:4d:87:
ee:66:b9:44:29:7b:90:65:c9:2e:b2:6d:ed:dc:95:
3f:82:e3:2f:6d:9c:f8:77:9a:f0:b3:b2:da:b9:ba:
16:38:e4:a5:3d:64:49:df:7a:41:04:78:57:ce:1b:
30:11:5c:77:df:19:8b:fd:dd:c7:06:af:57:a2:52:
1d:e5:f0:8d:89:31:d7:b7:80:7e:93:dc:6d:b2:05:
d9:cb:ad:e0:e8:ca:e6:f6:18:76:99:2c:33:8c:d1:
a7:f0:8b:7b:ab:5d:ff:b6:46:92:f6:ef:c2:67:03:
c4:7c:8e:72:12:bb:b7:89:a1:87:3b:5a:6f:87:42:
6e:03:9d:86:55:eb:46:b1:a1:4d:3a:df:e9:94:06:
2f:dc:c3:13:ea:f3:6a:72:0e:13:0e:6b:d7:1c:c2:
ff:56:cd:ee:33:74:73:40:ef:bf:78:72:e1:ff:d4:
75:75:47:c6:e2:9d:02:7b:89:cf:3b:02:a2:9f:6f:
35:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C8:4A:03:B4:3D:67:C9:D3:86:86:0C:F8:82:D0:69:3E:09:E1:CB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad4fc667-5e8e-4f39-9814-5ea23369e78b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.80.0/21
Signature Algorithm: sha256WithRSAEncryption
06:05:7b:1a:a2:92:97:c0:c9:71:65:67:37:a4:4f:2d:2d:bc:
3e:94:fb:a2:a9:81:3c:86:62:41:88:41:3c:3c:3a:7c:a6:40:
9f:43:e7:d4:7b:73:5c:5d:5d:4a:7e:ce:65:af:63:79:6f:6a:
7d:7c:e5:3a:0f:4d:d1:85:79:99:a7:4d:b2:ae:b1:6d:88:57:
f9:84:59:24:d9:55:d6:ec:33:a6:33:d7:fd:fd:a8:64:86:4c:
ea:7a:01:12:7d:a5:b0:8c:0e:14:44:ad:05:ef:d3:e6:85:0f:
8d:45:da:ee:5b:a2:51:6c:1b:9c:e7:15:3f:a1:a9:c8:98:1c:
ed:6c:a2:8f:b5:20:a0:d4:fd:f0:ab:df:44:35:74:e5:07:32:
da:bd:b8:34:00:b8:61:b7:66:e4:63:e6:0f:96:2f:2d:21:1d:
73:35:40:b9:df:ac:60:07:a4:5a:46:fe:3a:8d:2f:1d:38:5d:
45:51:7d:85:15:b2:28:76:3b:4e:f2:36:42:e0:d5:4c:33:b4:
ef:df:91:85:0f:e9:e1:90:f8:8d:99:3f:3c:12:94:03:6f:5e:
07:95:32:d4:c3:f4:ab:18:49:98:1c:86:fd:24:ca:ee:0b:51:
20:e4:58:16:c4:d6:d2:2a:df:d1:e0:46:ff:da:a7:f1:42:c7:
84:70:c8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:18 2025 by rpki-client