Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f8674188-9c19-45d7-9426-d8b2517cf0d4.roa
File: f8674188-9c19-45d7-9426-d8b2517cf0d4.roa (raw, json)
Hash identifier: +4LuPAM1ZQ0gMHYCh0ql3bM5N3A676yOv3S0FH7BoRE=
Subject key identifier: C5:B1:9E:4E:2D:83:A2:B0:A1:33:CA:AF:6A:26:C9:71:75:77:E7:33
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 02E015A71B00313016070D3E88C14F947F174250
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f8674188-9c19-45d7-9426-d8b2517cf0d4.roa
Signing time: Fri 29 Nov 2024 00:00:00 +0000
ROA not before: Fri 29 Nov 2024 00:00:00 +0000
ROA not after: Fri 03 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 83.118.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:e0:15:a7:1b:00:31:30:16:07:0d:3e:88:c1:4f:94:7f:17:42:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 29 00:00:00 2024 GMT
Not After : Jan 3 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:49:28:bc:19:46:da:0d:7f:55:04:2e:87:f7:
e7:97:ef:10:bc:fb:a6:35:d3:5a:bf:9c:0d:e5:63:
f2:35:d5:b2:8b:5a:6a:85:8a:65:96:14:08:12:bd:
09:f2:97:60:cd:ff:64:09:a8:e5:04:8a:4c:c3:05:
bc:ce:7a:02:82:18:f2:ec:1d:05:e6:bb:a4:52:5c:
05:e9:b7:79:05:59:d5:3c:c3:ad:46:63:56:85:24:
54:9b:15:7f:c4:37:ab:6f:cd:59:96:1f:79:3b:1f:
4c:4a:df:af:89:8e:78:47:e1:7f:0c:26:7b:9d:87:
4e:2c:eb:3e:a2:64:d1:a7:40:cf:49:0a:41:4c:8d:
2f:80:a7:df:4f:66:02:88:f6:d2:36:f5:90:9a:ea:
8b:ea:91:ff:3d:8c:2a:8f:26:9e:c4:09:2e:56:a6:
38:1d:be:2c:6e:c6:55:0b:37:c6:b5:48:55:aa:07:
6a:9c:be:9c:e7:68:ab:5f:36:60:45:bc:3a:4f:40:
db:12:b8:ff:26:e7:73:07:c4:96:71:7e:68:9a:14:
48:d4:33:75:b4:12:7e:a9:50:6a:b2:09:36:39:27:
b4:8c:1b:05:19:f8:62:a2:5f:f0:a0:c4:d1:bf:b0:
5e:d0:0a:1e:a0:57:46:38:35:ce:12:c7:b6:90:26:
16:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B1:9E:4E:2D:83:A2:B0:A1:33:CA:AF:6A:26:C9:71:75:77:E7:33
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f8674188-9c19-45d7-9426-d8b2517cf0d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.240.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:e2:94:61:b2:93:23:72:a7:fb:e3:40:b8:11:b8:ad:0e:ee:
d5:48:0b:0c:3e:39:89:a8:a7:eb:1c:34:e0:81:c1:f9:ac:a2:
b2:86:42:95:6c:69:96:b8:11:59:d5:16:cf:9e:a9:06:e4:5c:
98:70:fa:db:bc:a6:14:df:17:02:1e:e4:db:5c:f7:48:31:f3:
0a:ad:77:1e:a2:49:14:93:c6:cf:37:e2:5e:e9:bd:04:fc:d7:
32:57:fc:56:87:9a:2a:c5:6c:3d:75:c2:21:96:ef:e4:34:10:
03:5b:6f:fe:17:c6:db:71:5f:41:00:6a:4f:c7:29:35:0e:61:
33:28:dd:e0:0f:fa:fb:3e:5f:0e:e0:51:0c:8c:b5:b8:cf:37:
6f:fd:a8:27:9a:6e:03:f5:e1:15:a5:bc:f4:db:ae:87:da:b1:
30:31:d1:5d:25:d7:34:d8:73:52:8c:05:76:f9:15:c7:1b:4d:
e0:bc:58:18:85:0d:7d:d8:fc:0d:e5:99:85:fd:9e:36:a5:66:
87:9f:0f:8f:21:32:e3:ce:1f:4f:a7:3b:fc:2d:c3:42:56:c4:
b6:1b:6a:b4:d9:c1:9a:01:db:ba:52:43:d0:35:02:75:29:85:
1f:bc:70:9f:40:97:62:32:d1:cd:92:f5:94:c8:b1:97:57:75:
e9:f3:a4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:38:25 2025 by rpki-client