Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ff7e3bea-9aea-447a-a901-bd6869a31a09.roa
File: ff7e3bea-9aea-447a-a901-bd6869a31a09.roa (raw, json)
Hash identifier: 6+1Hg5AlifbvcO+y7TxVvFVvuToo8kudytdCOSSpG+s=
Subject key identifier: 11:9D:6B:DE:DB:5D:10:E1:CE:73:1F:9B:FE:5E:FF:8E:92:27:AB:8C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 227E66FF5E5C2558A13A6F422EAA952B303A5603
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ff7e3bea-9aea-447a-a901-bd6869a31a09.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:b000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:7e:66:ff:5e:5c:25:58:a1:3a:6f:42:2e:aa:95:2b:30:3a:56:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=52e669f79fb64fee15114f14d487793e29beb94b8f38cbe9e14c236b5972c36b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b6:e8:19:32:1e:37:2c:a3:46:85:ad:e8:f3:
3f:c4:b7:0f:22:27:f5:53:34:ec:b3:93:93:ef:96:
45:8a:59:66:06:3f:7e:5b:ba:13:31:bb:ff:de:65:
9f:25:e9:c5:86:b2:72:50:ed:76:59:b6:25:8d:7a:
81:57:79:0b:36:6a:c5:8d:8b:bf:f0:05:04:1c:20:
00:b8:3b:c7:b8:c7:f2:c7:f3:5a:7a:63:20:e8:fa:
6b:55:6a:4a:ab:67:58:2c:71:44:ac:ea:f3:db:d5:
2e:08:c6:9a:7a:ac:c5:89:2e:1d:9c:09:00:84:87:
51:f6:1f:68:36:a2:40:a5:10:37:d8:45:4a:eb:49:
59:c8:f5:c0:4f:f9:26:16:b9:ef:9e:b0:91:25:86:
3b:48:d4:6b:1f:54:72:1e:0d:e0:39:4b:05:65:12:
ff:9d:b3:94:58:0f:15:f8:3d:9c:78:31:54:3e:e1:
8b:70:57:b1:ac:1b:06:b6:60:ca:82:6f:c9:de:19:
69:cb:b8:a4:77:55:ed:89:92:6f:bf:f6:11:f4:9f:
c9:2b:ef:5e:98:c8:a8:ff:8b:72:2d:29:1d:43:f2:
44:c7:2d:47:38:1f:5d:c0:97:4c:d8:df:e8:7e:0f:
09:e1:bb:64:6b:32:34:57:08:0e:dd:3d:06:72:e4:
90:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9D:6B:DE:DB:5D:10:E1:CE:73:1F:9B:FE:5E:FF:8E:92:27:AB:8C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ff7e3bea-9aea-447a-a901-bd6869a31a09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:b000::/40
Signature Algorithm: sha256WithRSAEncryption
b3:b1:b3:f0:52:4d:75:30:1d:8c:4b:eb:c5:08:3b:fb:6e:f5:
75:a0:d8:75:47:79:9e:1c:67:8b:ab:2e:c0:0d:b6:b1:fe:b0:
53:92:4d:d7:c5:a6:9c:f3:04:74:1b:fc:4f:ed:cc:67:92:96:
59:6b:80:39:d7:73:de:bf:76:84:b9:e2:70:b9:5b:fc:2b:d2:
0e:0a:70:32:3c:85:ed:0f:9e:93:ee:3e:59:47:78:c1:69:04:
18:35:ea:56:a1:00:e5:9d:7c:1c:c4:ef:e7:9d:23:44:5c:dc:
f9:7d:fd:d6:c4:76:02:48:0e:98:7a:44:56:bb:59:20:17:3a:
1f:f5:b4:fe:29:11:6a:42:8f:f5:81:4d:4d:f3:ae:f5:13:e5:
9d:42:0e:53:9f:3e:43:48:96:82:fb:46:17:b7:85:c5:20:61:
76:52:87:ec:fc:08:f7:33:98:ae:14:37:f7:c3:f5:65:e9:5c:
c5:66:0a:66:67:50:08:67:9d:ea:f1:37:4d:a4:b5:a7:18:94:
c2:36:71:1a:16:6f:7e:32:51:25:8b:e9:78:45:c3:f1:84:db:
60:fd:de:ee:33:95:88:eb:52:f7:fd:7d:4c:f3:38:02:24:5c:
cd:a3:a6:12:fb:9d:65:a2:e8:af:fe:95:06:84:a5:48:bc:f5:
07:a8:83:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:46:14 2025 by rpki-client