Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf81fd85-a397-4047-ac09-984956dfaf1d.roa
File: bf81fd85-a397-4047-ac09-984956dfaf1d.roa (raw, json)
Hash identifier: cXiURp6Tm817Crs+jeo6cQn+8o9SrX/cwIuB57F0+RE=
Subject key identifier: 83:09:69:CA:4C:18:8C:61:AF:91:C9:4F:0D:CE:28:1C:99:28:1B:9F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 249B2D3381AD337952C46495610C1CC86697B352
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf81fd85-a397-4047-ac09-984956dfaf1d.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d000::/25 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:9b:2d:33:81:ad:33:79:52:c4:64:95:61:0c:1c:c8:66:97:b3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=68f8177c5e9539b84f035a04636ddb1fec658ca8b9d3737cc365e0d690ef2fd4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:50:0a:51:93:a5:5c:20:06:58:c3:c9:c5:
e2:eb:67:cd:ed:cb:d5:59:c6:45:20:67:44:f9:fd:
6a:f8:ab:a5:d6:6a:91:93:a1:2c:3c:db:8e:d1:fa:
11:dc:4f:e9:6c:e0:68:a8:1b:a8:3f:aa:57:f7:70:
8e:20:4e:21:13:a2:88:31:c8:c6:3d:b0:b7:43:98:
8d:5c:25:38:2c:55:91:9a:ff:bf:f0:33:97:92:4d:
5b:95:a0:f7:b1:1f:6b:cb:bf:fb:31:33:47:de:4a:
c7:5e:35:80:a2:e5:eb:48:36:51:82:99:9e:5f:86:
d8:cc:4e:23:1f:94:f2:4b:20:ca:df:81:f9:c5:e3:
d2:5f:35:43:4b:8f:a3:b2:c5:80:97:18:9c:62:0a:
34:b5:e7:6c:6b:06:dd:02:90:78:80:ef:1b:61:7f:
e8:0e:16:b7:a4:2b:a0:e6:f7:c3:88:f5:c0:1c:7c:
77:6f:3c:6a:49:ff:bf:99:f9:01:c3:9a:13:ef:8b:
fa:6d:5b:6c:a2:79:b7:c3:b1:c6:c3:35:4f:3a:29:
26:5b:6b:61:c5:e6:b5:32:be:07:ff:0e:22:86:cd:
ed:ec:11:ec:79:bb:71:35:05:2d:15:1c:48:2e:c6:
3f:30:fc:8a:30:6b:72:21:86:07:83:20:3c:02:f0:
98:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:09:69:CA:4C:18:8C:61:AF:91:C9:4F:0D:CE:28:1C:99:28:1B:9F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf81fd85-a397-4047-ac09-984956dfaf1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000::/25
Signature Algorithm: sha256WithRSAEncryption
b0:38:88:36:5f:5b:c3:9d:11:0a:69:03:53:76:f4:ce:5d:1b:
5e:fe:7a:67:22:09:5d:1d:03:08:c8:01:90:58:9d:a0:92:ea:
75:95:38:f6:6f:30:07:25:5e:9f:f9:99:db:fc:6c:b9:3a:2a:
0a:f5:2b:60:f8:2a:55:d8:98:ef:d8:21:9b:13:6a:0e:56:f7:
09:fe:3e:a7:cd:2e:12:e7:0a:89:47:8c:21:42:90:e6:2a:be:
79:26:74:60:ee:49:89:3b:28:fe:23:8a:fa:a5:f7:47:1a:60:
e3:92:58:c2:64:03:7c:5a:3a:e1:e6:6b:bf:24:81:7f:9c:21:
e8:68:89:ce:49:02:40:3c:bb:26:1b:9b:06:58:b0:db:73:3e:
d6:66:1c:40:3b:86:94:58:79:78:0d:a6:44:5f:26:15:02:ea:
cd:0e:2f:63:2f:2d:3e:b2:0d:c9:1f:40:91:4c:1d:83:c9:40:
c2:b6:36:64:72:52:b9:dc:b1:43:59:d1:fe:5b:72:09:69:b4:
b3:9b:b4:71:06:02:80:42:82:39:dd:37:85:63:82:b0:1d:db:
a8:37:20:91:e6:e6:88:c6:26:a2:fc:41:14:d1:b7:3f:1d:27:
30:39:f6:19:82:27:8f:10:f7:e5:2b:d1:6d:03:d8:0b:41:d9:
1e:c6:21:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:26:22 2025 by rpki-client