Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/197a8641-5e8c-47f5-b202-941d73190653.roa
File: 197a8641-5e8c-47f5-b202-941d73190653.roa (raw, json)
Hash identifier: 1EQB7dOj7XZNa/ReFpwSiWcETQiXWdzaxorYVvnNjs8=
Subject key identifier: 48:7C:3F:9D:F1:B2:23:00:35:64:20:92:13:88:56:CF:4E:5E:89:4C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 51B2482CFAE2D1D93FAE56B73CDFB05AE05136BA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/197a8641-5e8c-47f5-b202-941d73190653.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 85.151.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:b2:48:2c:fa:e2:d1:d9:3f:ae:56:b7:3c:df:b0:5a:e0:51:36:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:22:9e:81:1d:4f:c2:29:a9:09:55:d3:68:9a:
d1:7c:08:04:ec:55:2e:0c:27:5f:64:fa:a3:a0:68:
0e:8e:0a:4b:39:19:7b:a6:a6:47:63:58:9d:ea:bb:
ee:ff:74:f5:c9:51:b7:66:9d:c3:1d:79:27:3d:17:
ea:04:fa:2d:90:8c:00:01:58:54:27:a9:ff:62:90:
03:70:ca:f8:ab:5b:4e:7f:8a:a6:66:f0:b7:c1:90:
d8:f9:d1:1d:59:5e:ae:2d:bb:a7:e9:f0:19:3f:c2:
b9:ee:6e:0b:4b:c9:23:96:92:ec:44:1c:cb:c6:e1:
22:50:bf:d9:8e:3b:da:bb:66:59:50:bb:2c:85:ea:
89:36:44:67:21:92:ec:be:08:8c:a7:2b:ce:ff:86:
b5:3d:22:11:ab:b6:b6:ff:42:e1:4b:47:f2:c1:db:
e8:95:f0:b8:0c:88:63:8a:a9:5a:1e:2e:5f:36:c5:
70:73:86:35:d1:7e:42:34:fc:14:1a:d4:46:2c:0a:
4d:58:8c:3d:ea:71:09:d7:df:57:25:0a:69:ab:ee:
26:6f:e1:37:a6:10:65:e0:5e:55:49:15:fa:40:4b:
8a:4d:b4:25:8a:7c:91:8b:d9:d3:23:34:e1:1c:1c:
88:b3:cd:5a:09:ca:8f:95:b8:50:1b:0d:4d:aa:8b:
6a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7C:3F:9D:F1:B2:23:00:35:64:20:92:13:88:56:CF:4E:5E:89:4C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/197a8641-5e8c-47f5-b202-941d73190653.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.151.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:a5:ce:c9:1d:8b:7a:ad:53:4e:a2:d7:fa:07:c6:cf:1a:cb:
3b:d3:8b:d2:cb:d8:f6:8b:a2:93:c9:c2:1b:37:79:5c:9f:4d:
1f:4e:d8:ca:6a:71:d3:d2:69:20:7c:dd:47:c0:e4:c5:8b:c2:
c6:44:ef:43:b2:1e:11:4f:e5:c2:a6:8b:72:68:dc:29:36:2c:
82:ae:03:60:97:21:99:09:bb:3f:01:44:8f:d7:e4:7d:68:e3:
76:e0:17:b9:8e:78:f7:c3:cc:90:c4:ae:72:f2:ea:db:09:c7:
b5:0f:71:9d:e9:dd:42:c3:b8:80:d7:c7:25:c5:59:c7:a8:79:
08:90:ca:3d:08:32:49:bc:fb:b9:df:98:6e:fc:24:14:d4:66:
86:17:28:a4:41:b1:50:20:44:33:a7:e3:ec:f6:2d:df:37:c5:
71:82:a7:d8:f8:c6:f6:82:c7:25:e8:2c:15:21:8d:85:a9:55:
ac:da:f3:8a:9e:18:73:ae:24:8e:06:9b:6f:75:57:58:f9:3c:
ea:5f:04:16:64:f5:84:f3:74:03:88:70:32:ac:9e:e0:54:f5:
48:1f:54:e9:55:d4:37:40:4d:2e:7b:d3:0e:01:75:22:54:a6:
b3:4c:2f:f2:19:34:bb:48:52:62:d7:c6:8b:ef:a1:8d:2d:a1:
6d:dd:51:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:45:08 2025 by rpki-client