Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f1811046-5771-480f-9f42-c00f33e984a8.roa
File: f1811046-5771-480f-9f42-c00f33e984a8.roa (raw, json)
Hash identifier: IjVx9i6B4zH7x+BTdoIRNrtvuM7xjRyNJJwAvfiPoQ4=
Subject key identifier: 7C:92:57:56:C0:0B:40:12:5D:97:E0:84:28:D3:F7:E2:28:C7:85:FF
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3C422EC552A6F422DFC464B7A3B5D52505094536
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f1811046-5771-480f-9f42-c00f33e984a8.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a01:578:1040::/42 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:42:2e:c5:52:a6:f4:22:df:c4:64:b7:a3:b5:d5:25:05:09:45:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:48:fd:1a:8a:9f:66:a7:a5:bb:fd:9c:5f:
27:8f:ed:f8:ac:db:a8:d9:fc:45:f8:ae:ff:91:6a:
52:7e:d3:a4:f2:de:5f:95:9a:98:82:78:9b:0e:b2:
02:e9:ee:05:01:77:1b:c9:62:23:9a:27:bf:c5:0b:
5c:d2:79:97:00:08:09:7b:a1:d4:09:58:6b:35:99:
0c:5c:fd:62:8a:c5:dd:2e:37:18:88:e8:30:fc:39:
29:57:25:ed:35:5d:2c:86:76:74:bc:ba:27:77:dc:
43:67:83:f9:17:0d:8b:42:5d:2d:03:46:bf:20:c1:
de:ca:8a:2d:38:e6:d1:e1:0d:92:a5:6b:b9:1f:d6:
7e:28:b3:75:3e:08:eb:6c:52:57:98:5a:f3:9b:d8:
91:4c:81:a9:c0:a7:40:7e:7d:0d:54:b6:96:8f:19:
92:bb:30:fc:e5:a7:28:52:81:a7:08:b7:13:76:97:
ba:ec:97:04:42:af:59:d6:b9:92:b9:26:9a:a3:f9:
e9:ca:7b:4c:a3:89:ab:a8:00:ae:e5:c7:54:47:06:
4f:e3:64:a2:da:c6:be:28:97:7f:ac:60:69:9d:cf:
78:45:4c:ef:de:3d:b2:30:30:0c:ab:a4:90:bd:94:
27:fe:a4:4e:4e:43:9b:b2:4c:d4:8f:9d:73:5c:b8:
93:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:92:57:56:C0:0B:40:12:5D:97:E0:84:28:D3:F7:E2:28:C7:85:FF
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f1811046-5771-480f-9f42-c00f33e984a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578:1040::/42
Signature Algorithm: sha256WithRSAEncryption
63:48:f3:4d:a1:5d:56:c9:eb:13:89:59:f8:53:3d:d7:9f:4e:
b4:25:15:ba:d6:03:1f:83:ba:6d:16:de:b0:88:70:8a:54:2a:
3c:7e:25:a1:5e:51:6c:eb:5c:69:a9:45:34:de:ed:ab:f6:5e:
ed:7f:e5:62:d8:67:ab:eb:9b:65:01:b0:b6:25:5a:c4:f0:66:
65:3e:67:2a:5a:e9:01:25:f3:f3:c3:de:a3:e7:a5:d9:70:bb:
27:bc:90:5d:86:9a:1f:d1:66:be:c8:a1:d0:0a:c2:db:d1:33:
a4:92:66:a3:4e:c1:72:80:bb:d3:13:02:ad:bc:46:9a:d9:8a:
bc:eb:7a:be:55:43:41:a8:6b:5e:c9:f8:38:a0:bd:15:a6:0f:
f3:ea:c1:3b:29:24:46:0b:16:23:a3:13:4a:0f:47:09:e6:9c:
8c:17:e9:73:46:9c:27:a5:be:46:81:b2:35:2a:02:90:a4:fa:
a0:2c:d7:e4:c1:83:d1:eb:d2:bf:ea:d0:13:a8:5a:99:d2:bf:
f3:ed:d6:47:05:8e:51:51:8a:0a:59:8e:d6:7d:33:6c:68:c3:
bc:63:1c:ee:c3:7b:ee:ae:5d:24:57:bd:a7:c9:33:fd:3e:a6:
a6:51:a0:1d:be:d3:df:1e:6b:51:32:ba:e4:b4:27:b1:ea:19:
ad:53:63:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:42:50 2025 by rpki-client