Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/07e20ea8-04d8-4c12-aaeb-4221b7c30928.roa
File: 07e20ea8-04d8-4c12-aaeb-4221b7c30928.roa (raw, json)
Hash identifier: /dyxEvz2BrVDUX2b3KeLLiFPKXJoQ0KNCpj9uMMerLU=
Subject key identifier: 49:20:E0:D8:B7:A0:D8:F5:6F:58:8F:88:D4:22:9E:2C:ED:B1:60:05
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 57A3C3E856B555559FB9D34F60CBB09D4D9C2627
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/07e20ea8-04d8-4c12-aaeb-4221b7c30928.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 83.119.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:a3:c3:e8:56:b5:55:55:9f:b9:d3:4f:60:cb:b0:9d:4d:9c:26:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:a9:a0:a7:f7:42:23:2c:4e:9c:66:9b:ab:
53:da:96:59:ba:91:00:35:2f:61:75:aa:b7:87:81:
20:e0:a0:9c:8d:ba:a9:fb:d5:a0:bc:ab:d6:c9:04:
15:09:cb:c7:31:97:8d:3a:50:2e:52:23:63:80:c3:
0d:ca:99:31:78:d7:53:4c:6c:a8:7c:23:77:41:1c:
7d:42:e3:c8:73:80:99:6d:ea:7a:a7:2c:96:74:66:
0f:62:fa:e9:63:74:cb:01:3a:1b:f3:91:ee:85:83:
f6:eb:4b:2a:3e:61:9d:87:db:94:e8:e2:36:4d:39:
08:a5:7f:2c:02:73:ef:01:04:27:20:0d:e4:29:1d:
77:5c:2d:19:eb:d8:6b:80:2c:b8:0a:46:d2:b3:c4:
d8:c6:d9:f8:d4:33:b0:34:f3:35:1e:fd:f3:7e:63:
73:95:bb:fa:b0:11:8a:99:23:1b:c3:4d:a6:00:94:
86:8d:a1:d2:4d:b2:fe:d2:99:57:b9:47:da:60:44:
ba:8d:31:1f:c6:da:06:ac:43:5c:59:9a:89:b1:8b:
40:8d:40:0f:86:21:34:45:0f:ec:17:a1:7a:93:9f:
3a:38:fe:ae:38:86:bf:0c:3b:e7:c3:bf:b3:dc:91:
e0:44:92:ab:5e:9b:bd:ca:e9:68:b5:01:2e:96:cf:
fb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:20:E0:D8:B7:A0:D8:F5:6F:58:8F:88:D4:22:9E:2C:ED:B1:60:05
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/07e20ea8-04d8-4c12-aaeb-4221b7c30928.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.64.0/18
Signature Algorithm: sha256WithRSAEncryption
62:bb:6a:14:e3:7d:35:9a:55:d2:fb:1b:b6:ec:6b:b9:42:8d:
fc:e9:de:e6:74:4a:dd:00:31:5d:11:68:72:68:9b:d3:f0:a4:
4d:51:c4:ea:ad:6b:f4:d0:11:cd:1a:8d:98:75:e1:a7:a2:73:
4c:37:f1:3d:71:c3:ff:cf:22:4d:45:4f:e8:0b:da:0b:ca:87:
b8:78:b0:e4:90:3d:b0:b3:93:43:47:f6:2e:fc:dc:10:e5:80:
b6:04:d5:cf:38:c9:7d:b2:f7:a7:8e:6e:45:80:40:04:88:9d:
f7:16:bb:59:f3:c6:a9:e3:22:37:25:df:b3:b2:61:f5:a1:d3:
db:b3:80:68:12:c5:cf:58:d7:4b:d7:ad:bb:3b:c7:be:48:80:
59:60:48:3b:1b:ea:c2:c8:fd:4d:63:80:27:22:0b:01:4a:09:
43:f7:e9:f7:91:2a:d0:23:d5:1c:9e:d4:02:9d:81:a7:04:a0:
c3:6e:26:f1:03:6a:92:3b:73:6a:6a:ef:cf:f9:a5:4e:09:27:
fa:fb:a4:ed:09:be:34:a7:a8:f2:2e:0e:03:a7:23:58:a3:d6:
19:da:c9:33:3c:f7:e6:17:9d:b5:fa:50:9a:4e:d5:f0:cb:99:
e5:21:3d:36:45:03:82:08:57:00:80:30:e0:49:0c:52:0f:6b:
9a:f1:ab:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:39:27 2025 by rpki-client