Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ea779843-e76c-4279-b4b3-012bda8763a2.roa
File: ea779843-e76c-4279-b4b3-012bda8763a2.roa (raw, json)
Hash identifier: U5SMHjXIrA6rDu/W8sE2C1RV8S2SAWvBa1doVktBMkA=
Subject key identifier: 44:43:5B:A4:14:84:6F:93:36:34:C3:66:68:FB:A9:FE:15:5E:DA:00
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 41965EA84FACD2A39E33DC62B342735DEEF67F33
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ea779843-e76c-4279-b4b3-012bda8763a2.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2a01:578:1040::/42 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:96:5e:a8:4f:ac:d2:a3:9e:33:dc:62:b3:42:73:5d:ee:f6:7f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:60:b7:59:b5:ce:bb:8f:0a:4d:f0:19:b5:be:
2d:76:7e:20:e3:d8:55:ec:61:13:e8:ef:41:e7:5f:
91:7a:dc:af:80:93:15:92:b4:c9:dd:ab:d8:fc:ee:
d0:5e:7e:1b:f8:22:ad:47:da:d2:b8:b5:7e:79:2c:
40:ce:23:d7:fe:70:16:7b:c4:bc:07:be:1f:f3:7d:
bd:16:35:57:f9:f5:6d:2d:64:21:bb:5a:5f:27:52:
59:33:81:0c:61:22:16:e7:94:dc:a3:2b:4b:3d:23:
7c:03:59:e8:32:10:6b:cf:89:ed:02:72:6a:9e:99:
1a:91:78:b9:cf:84:ee:8a:20:64:6b:c0:cb:65:14:
f5:9e:cb:7f:b9:a7:3b:7c:07:6d:01:b0:7e:84:cb:
0e:d8:37:fa:e2:64:c2:74:d5:9e:a1:f8:1c:98:4a:
ba:61:53:da:52:e4:2d:19:6a:ac:54:20:18:78:6a:
f5:3e:61:b7:80:60:d8:ab:35:6e:7e:52:b3:e0:92:
50:b8:66:32:f9:e9:a9:d4:ae:85:e9:12:fe:10:10:
ae:6a:b2:dd:2e:83:7a:8f:ab:0d:7c:04:f3:b2:09:
e0:f5:c9:1f:3a:22:e5:38:6b:a6:88:18:fd:33:db:
7f:ce:ae:56:9e:73:71:54:79:ca:42:0c:df:e9:49:
60:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:43:5B:A4:14:84:6F:93:36:34:C3:66:68:FB:A9:FE:15:5E:DA:00
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ea779843-e76c-4279-b4b3-012bda8763a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578:1040::/42
Signature Algorithm: sha256WithRSAEncryption
51:34:31:f0:9f:88:3c:06:e2:88:29:d0:91:f1:6f:98:ce:69:
ef:d5:26:0d:1c:b2:d1:3b:ed:9e:a4:89:76:28:c5:b6:a4:98:
4b:bd:94:d8:85:22:94:44:26:da:10:8c:12:86:35:9b:33:e4:
8e:40:95:c9:03:20:0d:87:0b:d7:ce:14:ce:ad:8b:8a:a4:89:
42:4e:46:fd:92:1c:be:0f:4e:68:dc:92:85:39:1d:21:b9:df:
fa:b3:36:64:02:ef:8a:ac:b4:54:6e:44:6c:f1:c7:96:61:0b:
47:0c:ec:c3:69:25:73:17:b9:33:56:23:8e:ef:2e:92:db:d0:
81:2f:5a:a9:5e:a3:ae:69:0b:d3:2c:c6:2c:a0:a1:57:cd:7f:
dc:d4:97:11:47:f4:8c:49:56:38:8b:69:34:cd:27:a6:ad:4b:
2d:ef:28:2e:49:e0:69:b9:bd:df:51:38:a6:67:39:8c:ef:6e:
e6:35:09:c8:fd:92:a1:1d:85:cc:0c:c2:cf:90:a9:29:14:e7:
c1:a1:76:f2:b9:17:fc:40:57:54:31:12:d5:c4:75:51:01:1e:
b3:ae:04:9c:15:e5:c8:2c:2d:e0:e8:fb:a6:d4:9a:d2:c1:c9:
6c:87:4d:b1:b6:3a:32:a1:93:46:83:33:7d:f6:76:b2:7d:37:
a2:94:d0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:17:49 2025 by rpki-client