Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e0cc362c-4a3a-4eec-9b91-4d4a8c1380dd.roa
File: e0cc362c-4a3a-4eec-9b91-4d4a8c1380dd.roa (raw, json)
Hash identifier: W9FvHAB3akGYeaSDn28hQ+B3Aev8fRT9sacxGkwmR6U=
Subject key identifier: 5E:B9:19:9D:5A:37:39:4F:0D:72:03:5B:52:01:3B:8C:F4:3A:73:0A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5ECE9F69B14EDF923A4DB7D9A0949AE7054320CE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e0cc362c-4a3a-4eec-9b91-4d4a8c1380dd.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:1000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:ce:9f:69:b1:4e:df:92:3a:4d:b7:d9:a0:94:9a:e7:05:43:20:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=3342240f60f952f87fd30d5551026f6ead2117f0a06082e894b1c701290e92f0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:ff:37:d6:94:53:95:c5:25:f8:b6:9f:40:
ca:f6:fd:c0:ca:de:80:2d:5b:43:72:71:08:48:8c:
2f:90:76:a2:21:8e:dc:9c:98:ca:43:52:6a:87:39:
ca:4a:61:52:5c:8c:9a:66:05:58:51:c5:06:50:15:
22:55:86:5f:80:0c:82:f1:82:1b:c6:f1:3f:4f:2c:
22:50:3d:0f:f7:e0:83:be:79:42:0f:ec:0e:3e:93:
bf:b5:42:cc:7d:a7:92:ad:17:e3:9a:0a:18:f4:b1:
9b:15:99:1d:08:8b:f1:17:bf:85:78:2e:08:b7:bb:
8f:8a:e8:0a:be:42:36:a6:00:af:79:e3:1d:aa:c4:
91:6d:86:3c:e3:b6:44:e1:1b:55:60:75:74:d7:d7:
af:50:09:e8:b8:fc:1f:5a:d8:df:f7:f7:42:77:2b:
4c:9d:75:8d:b6:6c:7f:52:2d:a1:f2:4a:6a:b5:c1:
84:10:3b:bc:a8:e3:85:95:e0:5c:8f:04:9f:8f:19:
69:3e:17:6c:92:52:f0:9c:28:76:61:7f:80:fe:65:
17:fa:c0:31:19:3d:47:5f:95:cc:cb:30:4e:19:85:
1b:c6:de:36:ca:8b:9a:27:4c:ec:88:02:03:d5:5f:
8f:9f:29:b6:e2:92:82:a5:cc:08:18:cc:c6:3a:f8:
b4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B9:19:9D:5A:37:39:4F:0D:72:03:5B:52:01:3B:8C:F4:3A:73:0A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e0cc362c-4a3a-4eec-9b91-4d4a8c1380dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:1000::/40
Signature Algorithm: sha256WithRSAEncryption
1f:81:73:c4:57:ca:d3:d4:9d:5c:81:cf:73:68:1d:c8:a3:e3:
ff:99:7e:54:02:e0:f9:ec:14:9e:9b:20:6d:9e:a4:d3:6a:9d:
a1:80:ca:6d:2e:4e:f2:9b:26:cd:60:09:ae:cf:75:03:da:f2:
9a:01:12:bc:32:0f:a8:cd:1c:31:2b:e4:7b:ca:c1:d6:26:4d:
b5:2d:ba:d1:1e:3e:3f:09:cd:2d:f3:11:1a:c1:12:2f:fe:14:
ef:25:70:44:a2:85:90:95:e9:98:bb:e8:9e:b7:2f:19:0b:8a:
ab:ac:ae:ec:4e:01:b2:b2:3c:8d:6d:1f:b9:44:7f:9b:49:1d:
bf:70:01:1f:2f:60:be:3c:b9:64:36:2c:be:45:cb:fb:43:bb:
74:dc:a0:15:d1:0b:46:40:b2:fa:b4:d1:a2:52:70:45:8d:4f:
c9:1a:b6:cb:19:1d:7e:1e:cc:22:fc:14:5f:84:1e:78:59:76:
f6:0e:ad:af:6e:36:f1:3e:00:21:fd:22:0e:29:54:bf:74:61:
6b:d7:32:f4:96:a0:25:52:57:2b:56:b1:6b:89:a4:70:07:a8:
66:ee:25:39:b6:70:15:3d:be:7d:9e:9d:71:9b:ef:87:32:77:
9b:64:1e:3b:5f:a9:44:b8:06:c6:39:e2:4b:49:72:81:84:c7:
df:75:6f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:49:15 2025 by rpki-client