Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f348777b-416b-4956-a955-39de7f330be9.roa
File: f348777b-416b-4956-a955-39de7f330be9.roa (raw, json)
Hash identifier: fyPxQTgf6GMeQW9DtU+sLPDpw0u2d/MVMwBCwX0HX20=
Subject key identifier: 44:E2:EE:F0:78:B2:46:3A:81:FA:16:9C:A0:01:62:C3:A8:46:0D:56
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3CD870227322DCF62E2D3F4156894672495FC830
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f348777b-416b-4956-a955-39de7f330be9.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d040:5000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:d8:70:22:73:22:dc:f6:2e:2d:3f:41:56:89:46:72:49:5f:c8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=23e5d4dc2a2085c18b2e79bd41001fca6ae6b53ff4d718c2e2612513ad7aaee8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:23:13:08:10:7d:13:86:d2:21:0d:2c:c8:10:
38:1c:5b:0a:a1:23:07:31:bd:c8:bb:f4:0c:5c:f5:
83:3d:97:44:94:31:85:61:9c:a8:8d:f3:e6:f2:13:
72:c7:42:e9:e8:7c:d2:f7:9f:99:25:98:78:39:a3:
de:ab:9e:bf:5c:be:e0:3f:26:23:50:d7:c0:e1:bd:
5c:18:7c:cc:41:8a:7a:73:13:04:b1:89:25:8e:59:
9f:6d:e4:54:a0:83:18:de:54:d9:cf:ba:90:8c:76:
ce:8e:13:4e:60:3d:01:a7:23:5e:5f:f8:c7:a8:19:
f1:08:fa:1e:57:ba:02:cd:05:47:bf:8f:d0:ef:56:
7b:2c:91:cc:b5:25:7c:fd:59:ca:7f:a1:1d:df:44:
a8:47:80:d5:33:38:d2:36:ef:ab:9b:c9:03:3c:4f:
14:17:aa:09:8f:11:d3:96:4b:61:87:79:71:2f:c5:
18:23:c4:62:75:39:99:36:30:83:41:9f:9e:26:23:
55:ba:eb:f5:c7:ea:7b:9e:3b:f8:9f:e1:9d:80:60:
c9:e3:e0:0c:a9:32:a7:0c:da:45:46:bf:40:10:0d:
d6:98:7c:11:0a:3a:a2:7c:b8:fa:d7:b0:77:6d:7c:
bc:79:b1:c0:a0:e7:31:b7:c8:fa:c6:7e:96:61:4f:
81:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E2:EE:F0:78:B2:46:3A:81:FA:16:9C:A0:01:62:C3:A8:46:0D:56
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f348777b-416b-4956-a955-39de7f330be9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d040:5000::/40
Signature Algorithm: sha256WithRSAEncryption
c6:22:2e:0a:f5:a4:2e:96:44:8c:0f:3a:d9:db:89:11:cc:b3:
72:e5:eb:9e:57:31:0c:24:a8:fa:f3:9d:bb:dd:70:06:70:b3:
b4:22:a4:8d:26:03:c8:45:12:65:03:66:5e:5d:ac:42:9d:af:
7d:12:c3:e1:ac:62:c1:db:dd:a2:f8:a9:ec:05:25:36:f0:81:
36:1b:74:77:07:e9:aa:77:12:39:ed:f2:97:90:04:37:3c:b6:
da:46:3d:3d:fd:fc:e1:62:0b:0b:23:d5:e7:b5:15:96:4b:2e:
86:ae:25:73:00:84:3c:07:d3:e8:f6:f1:85:b6:9f:9a:4e:85:
75:80:f7:71:2b:38:5c:02:bf:38:f0:bb:18:b8:70:cf:c1:7a:
b0:1e:b6:e1:a3:8a:e7:01:ac:b2:f3:9a:ba:04:50:51:7e:e9:
f7:ff:ad:d3:3b:6c:87:8c:33:83:a4:4c:ed:83:4a:a3:88:f2:
c5:a1:8e:7c:13:9a:fe:0e:ed:50:8f:2a:fb:3f:e5:fe:65:2e:
f4:73:d2:81:0b:86:98:80:f8:9b:ab:e1:bc:2d:06:dd:3c:b2:
6d:b5:90:a8:c4:3f:50:45:21:1e:c7:aa:76:85:5d:f6:3e:7b:
8b:a3:7f:23:8b:56:33:03:15:fd:b3:05:15:5c:dd:ad:47:b3:
3d:0b:27:d4
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUPNhwInMi3PYuLT9BVolGcklfyDAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMTQwMDAwMDBaFw0yNTAyMTgyMzU5NTlaMHoxSTBHBgNV
BAUTQDIzZTVkNGRjMmEyMDg1YzE4YjJlNzliZDQxMDAxZmNhNmFlNmI1M2ZmNGQ3
MThjMmUyNjEyNTEzYWQ3YWFlZTgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM4jEwgQfROG0iENLMgQOBxbCqEjBzG9yLv0DFz1gz2XRJQxhWGcqI3z5vIT
csdC6eh80vefmSWYeDmj3quev1y+4D8mI1DXwOG9XBh8zEGKenMTBLGJJY5Zn23k
VKCDGN5U2c+6kIx2zo4TTmA9AacjXl/4x6gZ8Qj6Hle6As0FR7+P0O9WeyyRzLUl
fP1Zyn+hHd9EqEeA1TM40jbvq5vJAzxPFBeqCY8R05ZLYYd5cS/FGCPEYnU5mTYw
g0GfniYjVbrr9cfqe547+J/hnYBgyePgDKkypwzaRUa/QBAN1ph8EQo6ony4+tew
d218vHmxwKDnMbfI+sZ+lmFPgTcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRE4u7w
eLJGOoH6FpygAWLDqEYNVjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZjM0ODc3N2ItNDE2Yi00OTU2LWE5NTUtMzlkZTdmMzMwYmU5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0EBQ
MA0GCSqGSIb3DQEBCwUAA4IBAQDGIi4K9aQulkSMDzrZ24kRzLNy5eueVzEMJKj6
85273XAGcLO0IqSNJgPIRRJlA2ZeXaxCna99EsPhrGLB292i+KnsBSU28IE2G3R3
B+mqdxI57fKXkAQ3PLbaRj09/fzhYgsLI9XntRWWSy6GriVzAIQ8B9Po9vGFtp+a
ToV1gPdxKzhcAr848LsYuHDPwXqwHrbho4rnAayy85q6BFBRfun3/63TO2yHjDOD
pEztg0qjiPLFoY58E5r+Du1Qjyr7P+X+ZS70c9KBC4aYgPibq+G8LQbdPLJttZCo
xD9QRSEex6p2hV32PnuLo38ji1YzAxX9swUVXN2tR7M9CyfU
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:47:15 2025 by rpki-client