Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b588c324-60de-4c7e-8552-f6746cbcb02a.roa
File: b588c324-60de-4c7e-8552-f6746cbcb02a.roa (raw, json)
Hash identifier: uS/f6tjecF51vZZ7pDX6fGbKszwqSCv5C8yafYC1u8U=
Subject key identifier: 21:86:60:C3:2F:EE:03:8E:74:67:B0:10:C7:E6:93:89:86:C2:C8:A5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5A8AA8191A6086EFBCAED2FB92135E2DC467920B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b588c324-60de-4c7e-8552-f6746cbcb02a.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:e000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:8a:a8:19:1a:60:86:ef:bc:ae:d2:fb:92:13:5e:2d:c4:67:92:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: serialNumber=fad136577a680c8e8e738b22f7b107be1aa838b26aae7a02d71cad0ee88a1596, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:40:3e:48:64:22:9f:bc:a8:85:bd:33:54:46:
52:cb:57:7a:9e:9b:1b:2f:b0:a4:4f:3c:65:81:6e:
84:b5:eb:73:f2:de:fd:c5:a1:da:58:b2:71:e6:b8:
5a:1d:44:a2:d9:81:16:41:1b:65:66:4f:b4:3f:2d:
ca:4b:ea:e7:33:ca:14:f4:c5:47:fa:8f:64:fc:6b:
99:4f:9f:b1:eb:25:7c:4f:f5:5a:2b:e9:c9:e0:61:
05:8f:50:b8:96:5c:9c:17:cb:5b:7e:ac:a5:f9:ae:
43:82:bd:d1:18:2a:d5:33:51:71:52:b1:4b:24:1f:
4c:a1:7b:d7:7a:f7:53:21:58:8e:37:64:90:6d:92:
0f:7d:b1:4e:ed:60:65:3e:4a:17:f0:af:14:60:c9:
bd:bc:22:6e:01:b5:b8:f0:2e:c5:3b:45:8f:bd:45:
f8:67:a2:9e:4c:6b:73:59:c3:9a:ce:84:bc:e7:e2:
f5:04:54:cc:8c:71:01:c4:33:b5:bf:b4:94:78:19:
2e:f9:42:5c:c2:1a:a1:72:49:a8:52:69:21:58:1a:
e1:b5:3a:ad:a0:1a:5b:43:53:95:f0:2f:df:2f:37:
44:92:71:a0:a2:bf:7a:fb:59:39:64:df:32:ab:6f:
94:ed:04:d6:6a:83:fb:15:84:4d:b3:f7:e5:31:30:
2f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:86:60:C3:2F:EE:03:8E:74:67:B0:10:C7:E6:93:89:86:C2:C8:A5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b588c324-60de-4c7e-8552-f6746cbcb02a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:e000::/40
Signature Algorithm: sha256WithRSAEncryption
b5:58:3f:ed:70:e0:7c:7b:f7:bc:f4:c1:fd:ed:77:3b:ae:98:
1e:ae:7a:40:92:a6:19:fb:e9:1e:4c:cb:73:0d:60:ec:2a:06:
ba:56:a8:01:7e:bc:70:08:bc:31:22:24:dd:5b:4a:8d:f3:52:
aa:8f:7a:21:c2:1f:14:40:b3:fc:80:c1:04:1a:c5:ec:56:48:
7d:7f:31:7e:25:00:a2:e8:2f:d2:c5:5a:e6:ab:91:c2:ce:8a:
4c:cf:a4:80:b2:12:3a:a3:25:9e:85:5b:9a:cf:6e:91:f1:ff:
93:71:b8:6e:f0:f9:83:76:68:cc:7c:91:ab:f3:62:57:5e:22:
b6:74:79:79:17:42:33:9e:85:d8:81:74:fe:27:6d:f3:4f:f0:
61:d1:f9:39:f0:1d:8c:10:f9:b8:71:1c:86:d8:19:58:61:ff:
f4:d5:7d:05:5c:83:25:9a:bd:2e:73:01:e1:86:f7:5f:65:61:
76:81:75:59:29:bd:ed:16:14:b6:91:ea:81:b2:03:96:69:96:
38:fc:2b:a9:71:33:d7:86:eb:22:27:bd:b6:5e:c5:36:16:b0:
87:b8:b1:93:d0:b2:ad:6b:e3:82:f5:ab:87:79:e3:91:59:5e:
c2:3e:56:b1:c5:7f:09:2d:bc:f4:13:37:0b:00:a9:de:49:f3:
21:05:ef:d1
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUWoqoGRpghu+8rtL7khNeLcRnkgswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDEyMTYwMDAwMDBaFw0yNTAxMjAyMzU5NTlaMHoxSTBHBgNV
BAUTQGZhZDEzNjU3N2E2ODBjOGU4ZTczOGIyMmY3YjEwN2JlMWFhODM4YjI2YWFl
N2EwMmQ3MWNhZDBlZTg4YTE1OTYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKxAPkhkIp+8qIW9M1RGUstXep6bGy+wpE88ZYFuhLXrc/Le/cWh2liycea4
Wh1EotmBFkEbZWZPtD8tykvq5zPKFPTFR/qPZPxrmU+fseslfE/1WivpyeBhBY9Q
uJZcnBfLW36spfmuQ4K90Rgq1TNRcVKxSyQfTKF713r3UyFYjjdkkG2SD32xTu1g
ZT5KF/CvFGDJvbwibgG1uPAuxTtFj71F+Geinkxrc1nDms6EvOfi9QRUzIxxAcQz
tb+0lHgZLvlCXMIaoXJJqFJpIVga4bU6raAaW0NTlfAv3y83RJJxoKK/evtZOWTf
MqtvlO0E1mqD+xWETbP35TEwL3sCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQhhmDD
L+4DjnRnsBDH5pOJhsLIpTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjU4OGMzMjQtNjBkZS00YzdlLTg1NTItZjY3NDZjYmNiMDJhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DDg
MA0GCSqGSIb3DQEBCwUAA4IBAQC1WD/tcOB8e/e89MH97Xc7rpgernpAkqYZ++ke
TMtzDWDsKga6VqgBfrxwCLwxIiTdW0qN81Kqj3ohwh8UQLP8gMEEGsXsVkh9fzF+
JQCi6C/SxVrmq5HCzopMz6SAshI6oyWehVuaz26R8f+Tcbhu8PmDdmjMfJGr82JX
XiK2dHl5F0IznoXYgXT+J23zT/Bh0fk58B2MEPm4cRyG2BlYYf/01X0FXIMlmr0u
cwHhhvdfZWF2gXVZKb3tFhS2keqBsgOWaZY4/CupcTPXhusiJ722XsU2FrCHuLGT
0LKta+OC9auHeeORWV7CPlaxxX8JLbz0EzcLAKneSfMhBe/R
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:44:17 2025 by rpki-client