Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c1f61529-4ff8-4380-a3cb-87884046881d.roa
File: c1f61529-4ff8-4380-a3cb-87884046881d.roa (raw, json)
Hash identifier: r5lnHJD+WB73CvI28xAglLxjxKwgmryM3+ESzE78AzE=
Subject key identifier: A0:F7:C6:95:A9:EF:16:11:70:8A:67:15:DE:20:31:C8:83:98:1D:A7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 09931BA470B26613CCC730741F02B7E7A0CFF39A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c1f61529-4ff8-4380-a3cb-87884046881d.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:8000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:93:1b:a4:70:b2:66:13:cc:c7:30:74:1f:02:b7:e7:a0:cf:f3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=6a967fee4e6bbfa0ae852b2fd5274e5bae72a2d94faa21638c670684c2626d6e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:d9:5b:6a:e8:11:9e:fd:85:7c:2b:47:69:
54:81:12:c6:d3:96:4d:c5:40:2c:d6:c1:66:59:44:
92:1f:3f:9b:08:82:9a:9b:8b:d3:84:4b:00:b6:6a:
4a:6f:99:f0:eb:ca:14:c7:08:0e:21:b4:12:b8:32:
18:d9:63:bd:85:90:17:5c:5c:bf:44:b4:23:7d:a7:
61:4a:b5:72:4f:2f:14:5a:9b:11:53:23:47:19:8d:
2d:34:98:a0:fa:bc:30:f5:ce:4a:4c:f3:8a:9f:71:
62:55:d3:db:61:50:7d:16:f9:24:5e:e6:47:db:40:
9b:6f:4f:48:b2:21:9c:d2:27:70:a5:1c:e5:56:37:
46:f5:cf:96:34:35:9b:80:05:71:80:46:35:cc:30:
d2:5a:43:ce:c1:42:43:bb:e4:88:e7:fe:09:c9:f3:
b5:9e:78:8e:a8:59:46:99:32:1a:25:bc:a7:50:d1:
cc:03:0b:e4:2b:4c:05:87:65:85:5d:6a:af:05:e4:
2c:42:80:9a:07:ed:78:02:1b:94:3c:a3:30:30:de:
dc:61:82:62:4f:68:c2:15:37:04:4f:bd:74:c8:ac:
70:56:fa:95:df:8b:f9:0c:35:81:c2:ef:b5:d8:ac:
b1:d6:53:6d:ff:91:fc:be:c1:84:15:cc:c3:af:cb:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F7:C6:95:A9:EF:16:11:70:8A:67:15:DE:20:31:C8:83:98:1D:A7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c1f61529-4ff8-4380-a3cb-87884046881d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:8000::/40
Signature Algorithm: sha256WithRSAEncryption
5a:bd:78:06:61:ea:91:22:03:c1:15:f3:18:0a:ac:87:a6:81:
da:9b:f7:02:3e:d4:8d:71:04:6b:9f:ea:d9:56:a2:23:53:c5:
80:e4:c6:87:2e:bf:2f:ed:80:3a:da:c1:26:06:a9:59:13:6a:
2b:d5:d2:65:72:fa:c2:de:5d:48:d0:67:ce:14:b0:1f:49:cb:
82:6c:49:21:05:b8:40:80:1f:af:61:d8:eb:3f:13:f0:b7:75:
e8:6b:84:18:d1:2c:02:f2:cf:72:b5:83:e7:22:f0:e7:cd:47:
fa:fc:74:49:e6:78:04:57:a8:cf:56:97:ac:de:e7:bb:bd:fb:
b2:a9:bf:cf:4a:1b:f7:37:e6:cc:30:1f:eb:b4:8e:00:b5:8c:
ac:87:02:02:da:be:57:ff:b5:14:44:22:20:e6:46:b8:52:80:
12:2d:d7:bc:b4:34:82:18:d4:80:32:4a:db:eb:fe:be:21:08:
9e:ac:33:ee:cd:cf:ea:84:f5:f1:28:15:31:dc:a6:0a:f0:a8:
3b:22:98:cf:bd:78:35:06:cb:2b:3c:76:fe:74:4f:d8:f4:29:
e3:6c:65:ea:0e:27:c0:2e:60:80:5b:e9:96:25:a3:c4:a1:85:
dd:35:f8:5a:4c:1e:7c:b1:40:b0:7a:d8:09:f0:31:97:31:60:
ad:ac:5e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:44:14 2025 by rpki-client