Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/73023bb1-a443-4047-a9f2-64a1905f67ac.roa
File: 73023bb1-a443-4047-a9f2-64a1905f67ac.roa (raw, json)
Hash identifier: jqBH/wSmS+1PZEF99figp8QjEjV0wkPLsuwHV9HMVas=
Subject key identifier: 50:B8:F9:B0:88:1C:17:0E:AA:9D:82:A5:FF:4A:F3:03:EF:78:03:C5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7BAF662135ACA98F1EBDE7FECD8E65F51BC3603E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/73023bb1-a443-4047-a9f2-64a1905f67ac.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 195.247.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:af:66:21:35:ac:a9:8f:1e:bd:e7:fe:cd:8e:65:f5:1b:c3:60:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5d:69:69:5e:88:95:05:47:55:db:26:2a:43:
9f:f1:ef:66:4e:82:c0:5e:04:c5:87:d1:32:79:8f:
5d:5c:6a:36:01:f1:a9:86:44:3d:ae:3e:d5:3d:95:
f4:1f:5e:34:29:bb:40:9f:3a:1a:69:2f:43:f1:c3:
59:76:14:e7:46:ed:25:df:5c:82:54:c7:59:dd:5c:
a4:de:ad:2b:3d:ec:ed:89:ed:84:cd:73:66:50:1f:
c3:b9:7e:cd:fe:b7:09:45:a5:29:bf:4c:6a:ae:20:
a8:11:2b:e8:ca:7c:0d:71:da:d4:62:96:38:80:07:
30:cd:a8:71:41:0f:49:33:88:12:44:2c:e2:9e:95:
2d:25:24:ac:7a:0b:70:dc:1b:37:d9:0b:0d:54:06:
c6:e5:6f:aa:bc:c5:f0:0d:f8:78:cb:2d:8d:f2:4c:
d4:25:4a:aa:4b:26:0c:d8:f0:a0:d3:5e:06:a1:06:
c6:38:ac:65:8d:f0:c6:b1:de:c2:cf:7f:3f:09:d1:
5c:ff:8a:69:6a:a2:4f:fa:3f:87:95:6c:27:91:7f:
51:2e:89:83:61:5f:9d:42:c3:eb:35:a6:08:e0:1d:
68:69:1e:89:d4:d1:44:30:42:8b:52:e3:19:ec:33:
91:e0:85:31:2e:22:c6:5a:9e:8d:d0:d8:7b:fa:38:
41:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B8:F9:B0:88:1C:17:0E:AA:9D:82:A5:FF:4A:F3:03:EF:78:03:C5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/73023bb1-a443-4047-a9f2-64a1905f67ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.247.0.0/16
Signature Algorithm: sha256WithRSAEncryption
33:0b:c3:09:f1:bc:ca:12:a6:7c:06:51:3e:ef:48:bf:25:e8:
02:5c:56:f8:00:ba:d3:50:6d:bd:c6:7a:d5:a9:39:93:98:55:
af:c3:9e:00:81:7c:18:b5:c2:f5:b1:0a:4d:92:a9:35:38:80:
eb:3a:17:83:17:42:2b:4e:66:72:ce:99:44:ec:1e:d7:12:53:
1e:df:bf:8d:90:8d:46:07:57:e1:bb:fa:ea:12:47:a0:fc:5c:
51:73:44:a2:22:30:7b:fa:ef:da:3a:51:c8:4e:5e:b6:1f:44:
8c:11:01:a0:6d:ca:07:74:e6:de:9e:8a:25:31:70:4b:11:e9:
12:b6:17:1a:02:99:75:a5:ac:9c:65:11:ec:d9:b0:aa:d6:5c:
37:bb:ab:bf:06:a7:e5:e2:d3:50:8a:55:e1:65:08:9a:e4:33:
47:4c:03:0d:27:74:93:62:33:13:d9:fc:a6:3a:11:6e:43:7b:
70:f1:f6:8d:4b:88:51:84:7e:9b:3d:7d:93:5f:75:4b:ad:15:
53:ee:8a:a8:e4:0b:13:59:fa:03:7e:7b:e0:05:a2:c9:7b:ab:
09:8f:03:55:25:81:be:77:12:c3:d5:de:f9:24:f8:c8:0f:43:
0f:2c:42:5c:d1:9b:c3:98:3d:90:32:e7:68:81:10:f0:c8:9c:
f3:64:f6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:36:12 2025 by rpki-client