Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3071c2a4-bba6-4def-894d-a0bf6a718d91.roa
File: 3071c2a4-bba6-4def-894d-a0bf6a718d91.roa (raw, json)
Hash identifier: fxeeM3obRU337U4NbvTfA41KW+lstnx2L4aszMhkuIs=
Subject key identifier: 82:92:72:37:47:2E:6B:A7:2D:69:5E:80:8A:EC:1D:06:65:29:77:09
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 09F5FBAF983CBEA50D4F0FAC95D5462C870FD3AB
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3071c2a4-bba6-4def-894d-a0bf6a718d91.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.108.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:f5:fb:af:98:3c:be:a5:0d:4f:0f:ac:95:d5:46:2c:87:0f:d3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6b:a9:77:71:06:28:92:43:a7:0f:93:d8:09:
7e:f9:ae:f4:db:9e:33:ce:e6:74:97:77:a0:37:9d:
5b:f7:b5:00:67:0d:e7:74:fc:0d:48:60:14:d9:13:
bc:5b:c2:77:aa:86:de:47:c0:13:87:17:6e:1e:46:
89:03:78:47:05:3c:46:b8:dd:b4:02:50:75:db:0b:
46:ea:1b:0b:98:73:13:d6:10:bb:62:66:a8:e7:a2:
4f:69:b4:24:0f:2d:e2:42:66:1e:a6:ef:14:6d:dd:
e4:89:8c:43:12:68:87:d8:d2:8e:76:be:40:64:80:
0a:64:dd:dd:ca:50:ad:75:e3:26:bb:a9:ad:ae:b2:
c3:5d:31:b2:6c:7f:d1:12:85:48:b4:5d:07:09:a5:
ff:16:45:5a:a4:02:f4:3d:56:f1:46:d1:f1:53:2a:
f2:f3:50:0e:95:68:f1:d6:2e:3c:e2:0e:1e:3f:d1:
ce:1a:9b:12:72:53:9f:a2:49:f0:56:93:ac:42:86:
c8:c5:00:a2:57:cb:67:f3:ee:df:48:e6:c0:54:4a:
73:95:85:1b:99:b0:77:c7:28:df:10:71:27:bf:b4:
e7:35:94:4c:33:1f:81:3d:e4:d2:e7:25:81:2a:71:
0c:fe:a8:7e:b9:fc:27:4a:ad:4c:1f:f0:e5:b6:9a:
9e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:92:72:37:47:2E:6B:A7:2D:69:5E:80:8A:EC:1D:06:65:29:77:09
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3071c2a4-bba6-4def-894d-a0bf6a718d91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.108.0.0/16
Signature Algorithm: sha256WithRSAEncryption
64:10:50:b0:95:76:c5:7c:3a:22:0f:c0:1d:56:8c:08:26:83:
d6:23:a6:ba:47:eb:e1:4a:db:a2:f4:79:7d:47:7c:06:80:dd:
0f:89:79:69:34:d0:0c:70:6c:aa:b7:3d:52:2b:a4:59:3a:6c:
c9:a2:91:77:15:b0:97:a5:9c:b0:df:32:e1:df:5c:92:1b:99:
65:24:a1:17:28:63:c2:40:b7:9c:ae:2e:8d:ec:bc:47:d0:a2:
8b:3f:4e:af:4c:81:30:4b:32:4d:4b:20:14:bb:d7:38:78:c4:
90:7c:c4:3e:09:a6:6b:ab:a6:73:18:c8:a1:6f:79:d0:6b:57:
e0:07:ec:e2:07:55:9a:17:7a:15:92:80:ed:e4:1a:2e:6c:61:
79:ac:78:e8:6d:e5:c7:ab:c4:9e:ca:94:69:ab:a2:9e:86:12:
02:4c:e9:d6:7c:4c:7e:16:a9:c4:e4:c0:12:ba:db:f2:e2:1e:
1c:6f:51:8f:ba:2e:a2:5a:db:eb:90:94:fd:35:be:d7:a7:ac:
e3:0d:73:6d:8d:3e:59:09:72:b3:09:c6:f6:7b:15:cb:e8:bd:
bf:40:77:54:b7:39:52:13:96:df:e9:e1:0f:88:9d:0e:ca:c3:
d7:3b:e7:59:48:ae:68:87:06:1f:43:95:0b:fe:a1:f2:e3:f4:
3f:ab:cd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:03:04 2025 by rpki-client