Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4357bcd8-5973-4f9d-968f-660b17590f0e.roa
File: 4357bcd8-5973-4f9d-968f-660b17590f0e.roa (raw, json)
Hash identifier: IsdpRoQLFCsSUkplo8PjVZ8/9161lckqAYToURzHoqM=
Subject key identifier: 67:06:7D:78:78:35:8B:49:9F:1E:E5:54:EC:BB:E7:17:7D:6E:9D:E3
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4042F8E554987D65528F38C762473DF4FAF8C41A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4357bcd8-5973-4f9d-968f-660b17590f0e.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 185.72.192.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:42:f8:e5:54:98:7d:65:52:8f:38:c7:62:47:3d:f4:fa:f8:c4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6e:7a:28:65:17:1b:4b:5b:a5:4e:f0:a8:78:
cd:c7:bb:93:0b:a9:1f:37:cc:c4:ff:71:67:17:9c:
e2:fe:d6:a2:c1:fc:2f:55:93:a3:62:6c:a1:f8:de:
d8:7c:fe:dc:02:a3:95:25:46:43:b7:67:04:ef:94:
b4:0a:2f:57:fb:84:d0:9c:ab:12:e2:c4:4a:2b:9d:
35:bd:5b:d9:05:b3:17:e0:9d:a1:68:b6:1b:30:0e:
b4:0a:e9:1d:a8:f0:73:f0:e3:83:06:cf:7c:0e:11:
c2:5e:b5:4a:41:f2:12:80:da:80:9c:69:41:1b:5d:
07:65:f2:ea:42:2a:c0:79:f1:34:b9:8d:5c:07:7a:
ab:be:2c:e5:36:df:c8:30:f5:c7:3b:58:dc:0d:54:
a9:26:d4:49:06:14:09:c0:fb:77:a4:5e:8d:24:b7:
23:02:75:a5:be:cc:6c:a7:10:52:f1:a1:ce:e0:f9:
ee:c3:58:ae:6c:e5:e3:3d:0c:da:a3:86:1b:d5:43:
23:df:4a:45:c0:dd:1c:e8:ed:82:4a:32:ff:4d:eb:
39:ca:0f:a6:c5:0a:d4:4f:61:af:4f:8b:c3:9b:aa:
bb:1e:bf:06:09:2d:ac:16:c4:17:53:8a:04:78:28:
19:a4:e7:0d:77:c8:48:99:c0:61:71:a5:c8:0b:0f:
e4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:06:7D:78:78:35:8B:49:9F:1E:E5:54:EC:BB:E7:17:7D:6E:9D:E3
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4357bcd8-5973-4f9d-968f-660b17590f0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.192.0/22
Signature Algorithm: sha256WithRSAEncryption
10:d9:dc:67:da:90:e2:c8:6e:83:92:00:d6:da:ae:9c:61:52:
ed:ba:78:e8:9a:02:c6:49:b5:74:94:c1:71:aa:90:cc:44:95:
41:42:a5:56:6e:a5:77:5e:90:e0:22:5c:32:72:04:02:f5:fe:
15:54:cb:97:1d:8a:bf:eb:7d:a5:70:bb:8e:1f:44:e3:3a:62:
6f:db:c0:0a:a0:b7:dd:07:b2:30:2e:4d:9a:ef:b4:62:58:8c:
b1:91:94:64:db:c6:fc:57:c9:cb:66:5e:77:10:9f:c7:a7:1d:
c9:0e:cd:7a:d0:ef:9d:88:73:41:e3:4b:cf:83:3f:78:5e:c9:
28:85:c2:7c:74:4a:2d:78:ba:03:6e:e6:4f:de:e4:e6:7d:22:
3f:28:3f:38:21:0f:2d:93:17:7a:1e:1d:61:74:e1:de:36:1e:
5e:ad:1c:de:32:48:00:e4:0f:e7:57:ab:b0:79:e7:08:e5:cc:
c7:92:83:8d:5d:ca:d8:57:3a:ee:d4:9d:ef:f4:dd:f0:f8:77:
b8:52:0b:b5:0f:5b:34:cb:13:5f:27:32:4d:81:50:21:fb:4d:
0f:2b:e5:08:b1:e2:cb:43:f1:8b:69:5b:12:65:81:44:1a:66:
7e:d2:7b:a8:06:41:49:07:94:ef:ad:2e:fa:21:7c:48:06:ea:
88:38:eb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:16:07 2025 by rpki-client