Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dbf8995d-72bc-4ff4-9613-29616c6d58dc.roa
File: dbf8995d-72bc-4ff4-9613-29616c6d58dc.roa (raw, json)
Hash identifier: ARazy/nRdMrOGWVpBc8fv4mX3T0Q4sTqeBS23hTet2I=
Subject key identifier: 26:F9:2A:B4:16:FD:58:2A:0B:50:16:BA:44:C2:4A:83:E7:14:F9:05
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 65E807248776A1384AFBA1660570115B946A5D90
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dbf8995d-72bc-4ff4-9613-29616c6d58dc.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07c:a000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:e8:07:24:87:76:a1:38:4a:fb:a1:66:05:70:11:5b:94:6a:5d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: serialNumber=181f9d51f8b8474461b301ac7141cee200e2be157efc79c81fa1c145acb676ae, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:a8:4a:99:17:23:7d:e8:13:09:f6:24:f8:
32:09:bf:5e:e2:c8:fc:e9:29:8e:77:11:26:35:2f:
b3:d4:9b:68:2b:b8:5e:31:18:42:dc:55:81:fa:57:
e7:d3:e8:fe:4a:2c:32:6a:dd:b8:20:c1:1c:66:40:
f1:7c:13:80:1a:9a:95:02:54:29:c5:2b:39:a2:12:
20:e3:c2:b8:27:1d:7b:7c:9c:a7:a0:b5:0f:8a:dc:
f7:fc:0c:50:87:ad:97:0a:26:54:f2:71:bb:02:be:
28:d6:d3:ba:64:48:48:16:f2:6c:bf:fd:d9:bd:6d:
f5:4e:1d:f8:f6:6a:a7:e3:a7:11:7e:35:79:a0:ad:
40:81:7a:73:af:33:29:75:24:4a:3b:9f:15:67:59:
60:8a:de:b6:98:ea:3e:a1:7a:d8:27:27:86:27:88:
a8:5f:0b:cc:d0:cc:ca:66:4a:29:e9:df:f2:eb:1b:
59:6a:90:06:25:f6:10:f6:41:eb:10:15:f7:55:62:
15:43:21:36:78:fb:bc:45:90:1c:b9:43:69:56:85:
f9:a4:56:49:f1:5d:96:25:80:50:c8:34:f3:31:35:
1f:af:12:29:01:84:e3:80:f1:8a:78:8c:18:3d:ec:
94:0d:78:2f:2e:bb:d3:c4:8e:16:a9:df:f4:64:fa:
e1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F9:2A:B4:16:FD:58:2A:0B:50:16:BA:44:C2:4A:83:E7:14:F9:05
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dbf8995d-72bc-4ff4-9613-29616c6d58dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07c:a000::/40
Signature Algorithm: sha256WithRSAEncryption
22:82:0c:3a:56:6a:6b:9c:ec:fe:45:ae:71:55:38:e1:fc:58:
39:1c:3a:38:21:f5:3b:1e:f0:bc:e6:13:36:ad:de:79:8e:c4:
3a:50:f2:d5:7e:b4:83:9a:48:62:67:92:f7:d5:b0:30:ac:2d:
4c:09:5a:da:22:73:40:5a:ee:be:f0:58:77:34:16:56:bd:2f:
15:cc:c5:38:73:1b:81:82:56:74:27:88:96:8c:95:83:d3:f1:
54:9f:c8:c7:ed:6c:44:c5:b6:9d:94:da:d1:04:16:13:9d:84:
cd:61:7b:16:94:f8:9f:8b:a2:d4:64:7e:a8:f3:d1:65:01:73:
1a:5e:37:f6:86:e5:d4:21:07:f6:fe:14:96:45:1d:cc:ca:62:
96:c8:36:c8:2b:89:62:51:97:c5:08:54:98:a0:9d:d7:b0:27:
45:45:3d:fc:f9:d8:26:8c:9c:8e:23:b1:39:d6:c9:09:dc:fd:
43:8b:91:72:58:1b:95:e6:b0:87:06:d0:c1:37:4a:de:2f:e3:
63:eb:7c:4e:b0:9b:f8:6f:4f:a0:bf:72:9c:4c:12:07:a2:52:
e3:cf:3a:9a:8e:8e:f2:23:9f:90:b4:c7:5b:8e:37:25:1f:3d:
06:c0:05:f6:bf:fb:6d:97:29:b5:b9:b3:eb:9d:05:8c:ed:e7:
34:db:c9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:48:11 2025 by rpki-client