Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e937d1d6-ce02-43b8-8306-022b3b0fff00.roa
File: e937d1d6-ce02-43b8-8306-022b3b0fff00.roa (raw, json)
Hash identifier: rYhOjVCkbKqe+qF8T3f4QELorOtt9SL3Z3srrFxk8AU=
Subject key identifier: 8C:94:7D:12:EF:AC:DD:F0:02:5A:44:6D:55:C9:90:65:16:FC:BF:47
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6DE9B5ACDBB12F2016B769AFD2FEDB29F5DF751D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e937d1d6-ce02-43b8-8306-022b3b0fff00.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:c000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:e9:b5:ac:db:b1:2f:20:16:b7:69:af:d2:fe:db:29:f5:df:75:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=f9f07c1a21535a329bb5920b83289750842d7ee911f51416584aacf6e19c945b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f5:1b:13:22:a6:1d:b7:87:53:81:c8:18:1b:
b7:15:cf:d8:00:fb:8d:d3:28:df:c9:5c:0e:95:49:
ab:36:63:96:60:09:0c:63:be:c2:52:37:11:3a:7f:
35:66:76:76:b2:a9:e0:59:86:3b:d6:b6:bc:4c:b0:
13:24:61:29:5e:34:e1:51:02:80:e1:ef:f4:48:01:
5b:f4:30:17:64:7f:2b:82:35:b3:46:f4:e6:40:ce:
cb:de:f8:3a:7c:0d:39:f9:a7:ec:4e:3c:79:07:7c:
b5:14:66:53:31:4d:4f:92:df:16:72:f1:fd:91:09:
71:30:a6:a9:d6:03:37:0c:df:4c:69:70:14:d6:ca:
e9:50:fd:ca:16:b6:cc:06:6b:ee:7f:fd:1a:c7:55:
25:98:e9:7c:26:a6:0b:42:74:52:cf:e4:22:26:6f:
0b:36:7b:00:f8:8f:d5:2c:8a:20:2a:29:0a:48:70:
c7:e9:48:9e:59:31:52:88:b7:98:b2:6a:b0:d5:11:
8c:54:b9:e1:98:90:b9:3f:ae:a5:af:f8:df:65:90:
4c:04:9e:1b:21:fe:e0:a3:cb:8b:38:11:c4:02:fd:
04:36:21:75:9a:06:55:9a:ee:fb:eb:2c:34:ca:33:
00:33:0c:18:4d:1b:04:4d:58:7f:fc:dd:cd:a7:d5:
01:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:94:7D:12:EF:AC:DD:F0:02:5A:44:6D:55:C9:90:65:16:FC:BF:47
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e937d1d6-ce02-43b8-8306-022b3b0fff00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:c000::/40
Signature Algorithm: sha256WithRSAEncryption
15:f8:f7:c7:22:e2:9f:eb:f9:28:c9:4b:f3:f0:58:c0:b8:53:
b9:15:f0:16:03:65:ec:b4:c0:0b:94:67:c3:64:32:52:95:34:
ef:49:0c:cc:4e:7b:c0:8a:38:80:21:3c:47:c0:07:9a:a2:41:
88:9d:8b:e1:df:bc:a6:d9:90:f3:c9:2d:01:1c:20:ac:95:eb:
32:53:2d:2d:97:75:9a:09:73:04:5c:18:96:f4:2f:48:55:11:
8b:62:b7:8b:a9:51:d3:9d:fb:d0:c2:07:81:df:95:87:21:7f:
79:a9:24:49:b2:5e:b0:80:92:ec:be:93:dd:31:00:b6:af:35:
65:a7:d4:77:f6:58:7c:8b:e3:30:f2:3c:67:75:43:56:0d:20:
12:89:c3:f4:9c:9e:77:91:e3:94:63:40:06:df:29:13:8b:92:
7f:7f:2b:74:3d:b9:4a:51:49:83:42:26:8b:07:41:33:74:19:
cb:a7:c6:84:f1:70:43:ae:61:19:03:71:f0:cd:9b:bf:a6:86:
5f:bc:b4:b0:19:9f:39:6f:69:a1:6d:e6:cc:a3:97:84:b7:03:
17:53:6e:7e:c9:ca:51:3f:d2:d2:4c:3e:e2:c1:75:42:bd:fb:
37:1f:5a:f1:e2:6f:22:53:40:42:b5:25:87:53:c2:53:f2:49:
3b:31:8f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:26:19 2025 by rpki-client