Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a2b57228-1239-489b-a0ad-c926f19f72f0.roa
File: a2b57228-1239-489b-a0ad-c926f19f72f0.roa (raw, json)
Hash identifier: DRpU70xZ/kdxTQLDpJwb9kihKq0oJsKwoRNM/p5nAog=
Subject key identifier: 59:44:6C:91:5D:95:CD:D1:64:0B:1D:BF:01:20:2D:D0:50:06:A3:04
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4B08303338C3F7E5F597006E0C6D9743CEECF49B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a2b57228-1239-489b-a0ad-c926f19f72f0.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 194.52.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:08:30:33:38:c3:f7:e5:f5:97:00:6e:0c:6d:97:43:ce:ec:f4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a7:18:3b:e2:81:a9:b5:49:f2:b0:d7:20:dd:
88:76:a6:da:c8:b0:19:c2:78:55:7f:3b:b1:c3:77:
de:5c:90:c9:a8:6b:2d:ab:35:98:d4:ca:56:7c:dd:
8a:3d:99:4e:48:9d:72:f6:31:06:89:fb:a5:03:88:
7e:80:ca:04:b6:5e:3d:b3:d6:c1:57:28:9f:a6:88:
ec:fe:9a:cc:af:b9:fa:0a:1a:91:71:55:66:d9:0b:
69:52:31:ac:60:66:23:eb:df:07:15:fe:e0:2c:37:
49:55:36:2a:6a:a5:d1:a1:b1:88:2f:15:7d:7b:a5:
e9:17:1b:13:d0:b9:d9:29:08:7e:b9:6a:af:fd:f0:
26:d8:b8:c7:01:61:25:c5:ce:db:75:18:59:0a:09:
b2:0b:9c:a7:bc:a6:24:a5:af:b8:31:06:39:9d:03:
e4:f8:57:26:c9:59:e7:44:b8:a8:a4:49:1f:81:07:
d4:5f:b7:74:62:fc:be:75:de:46:c8:32:68:f6:c0:
b1:99:2d:83:5b:a3:70:a9:f1:a1:80:02:27:29:68:
ae:d6:80:be:28:c6:87:bc:73:5e:f9:34:ec:0f:4b:
16:57:30:f0:63:74:6b:a4:42:b0:9b:6b:32:14:32:
2b:28:a8:79:e4:e2:ff:f4:09:b5:c9:72:e8:33:10:
93:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:44:6C:91:5D:95:CD:D1:64:0B:1D:BF:01:20:2D:D0:50:06:A3:04
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a2b57228-1239-489b-a0ad-c926f19f72f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.52.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b3:c9:35:2d:f0:4e:8b:b5:b6:3d:fd:19:77:4f:d2:f2:8d:9a:
95:b0:50:47:e6:7c:04:cb:04:41:10:b3:28:3b:2d:85:bc:cc:
75:cb:4c:b9:b3:09:c9:72:c9:7c:a6:1b:20:ed:60:24:20:91:
80:b6:3b:64:a7:e1:e0:df:93:45:0c:0b:27:96:bc:1d:ad:93:
78:05:fa:dd:34:d0:a3:df:08:8e:c2:6f:57:ea:0e:35:f3:04:
8d:f3:32:c6:b8:8f:03:e9:a8:eb:cd:8a:03:f1:5a:0b:22:cd:
9d:b5:d7:08:ee:12:73:54:9d:1a:2f:2d:9f:4b:41:4e:33:93:
1d:a2:88:5d:64:9d:bb:47:a5:c6:d7:cd:fa:21:4c:5a:28:c8:
b8:59:5d:22:33:57:bd:a5:2d:49:e3:ca:99:fb:d2:75:66:70:
5f:61:8e:70:cb:a1:74:34:61:0a:c1:30:c8:be:2b:ca:f1:8e:
42:b1:b1:bd:5b:78:0e:1d:69:fe:b1:d8:15:8b:3d:97:29:92:
69:3e:59:c7:6e:f8:c5:46:ff:9e:7e:40:af:23:a4:ad:62:eb:
81:a6:6f:8b:73:fa:78:65:5a:ca:76:66:9c:28:9f:94:68:e5:
44:be:86:ab:19:06:87:35:c8:13:b5:df:2a:67:22:83:96:35:
b1:52:77:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:47:08 2025 by rpki-client