Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc21f5a9-b6e5-453c-a66b-c9eee5d06588.roa
File: fc21f5a9-b6e5-453c-a66b-c9eee5d06588.roa (raw, json)
Hash identifier: vWW8vKLMSkUAB55YGAh8Vi/c4IbHBmuoDpBltUyZ1AE=
Subject key identifier: DA:4F:37:06:54:B5:F4:19:DD:EB:81:63:88:CF:94:83:96:49:CC:37
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 652483E41EC63AD9337BFACBE10C6810D3A8C1BF
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc21f5a9-b6e5-453c-a66b-c9eee5d06588.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.131.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:24:83:e4:1e:c6:3a:d9:33:7b:fa:cb:e1:0c:68:10:d3:a8:c1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:51:33:ba:d2:11:52:72:e2:83:99:de:24:b3:
95:91:b9:0e:9d:37:c4:c8:56:c6:f3:14:29:a3:ec:
ce:8a:50:82:5e:84:68:7b:46:f8:a2:73:90:44:66:
98:84:b1:3e:fa:61:1f:0d:ee:f1:24:7e:c2:eb:c1:
04:fb:17:58:8c:89:b5:40:1a:e1:b2:8a:9d:ea:fb:
a0:c8:d0:9b:8a:84:01:3c:02:6e:09:3a:4f:a3:64:
2c:75:6b:6d:cf:fb:2b:4b:b5:ec:ad:0f:85:b7:b1:
4c:ca:74:9a:85:07:a7:d9:82:26:dc:3c:cd:32:d9:
66:26:2b:bd:1f:d2:ab:d1:7c:10:79:a1:33:49:da:
89:91:17:95:fd:92:82:ff:2f:3c:4b:7f:0b:f0:13:
66:12:0f:06:8d:23:ff:1c:03:43:4a:c9:3f:b0:bb:
f0:11:e4:e9:54:d9:6d:b0:96:d0:b7:f1:b6:78:7a:
f2:80:3d:4d:a0:52:47:e7:dd:37:7b:da:6d:b1:a6:
c4:7a:95:68:6a:0d:5b:88:5b:e1:ef:50:bb:34:1e:
20:cc:42:87:b6:d3:2c:0d:1d:e9:70:a7:c0:f4:c0:
e2:bc:18:a4:45:06:a7:60:01:13:e1:36:e1:4e:24:
af:00:fc:08:86:54:c3:d8:dd:f1:d4:0d:4c:e5:98:
f2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4F:37:06:54:B5:F4:19:DD:EB:81:63:88:CF:94:83:96:49:CC:37
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc21f5a9-b6e5-453c-a66b-c9eee5d06588.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.131.0.0/16
Signature Algorithm: sha256WithRSAEncryption
39:9b:0d:2f:9c:3e:32:ae:6b:85:16:6a:18:df:2f:ef:af:ee:
74:1e:d9:8d:90:da:eb:ab:75:09:3d:3f:6f:ba:80:1e:96:93:
2a:af:c2:a9:ea:90:70:c1:82:2b:08:51:9a:65:b4:86:d9:6c:
80:14:64:8c:9b:3c:ae:c8:be:90:ef:36:dc:09:7c:71:6b:b8:
9d:5d:06:17:c8:bf:a2:db:f1:64:4e:85:cf:3e:fe:94:ce:17:
06:07:0b:c2:b3:d2:a0:10:d6:5b:9d:28:87:e5:8f:41:79:5a:
d0:3b:f2:ee:7c:e4:ab:53:1e:85:7b:14:28:1a:21:97:4e:a1:
ae:08:40:a4:a4:df:db:2a:fc:b3:c4:19:9a:5a:a4:60:7b:7b:
7f:28:fc:d6:3e:bd:ed:8e:6b:a8:0b:0f:c4:70:47:da:53:32:
0c:b5:07:46:53:65:7e:cd:f7:b4:72:1d:08:9f:79:de:f7:a2:
9e:c3:ad:59:43:16:2e:a2:1b:d8:d6:aa:74:02:73:32:87:99:
37:96:d5:50:32:c8:68:d2:95:6a:73:6c:93:d8:7a:95:0d:7d:
69:2c:7b:13:7d:29:2a:ad:6e:61:f7:f2:1a:f6:e6:6b:b6:cb:
c7:4d:f8:a6:29:b4:4a:bf:0e:dd:7c:fb:d6:e9:3a:29:29:a5:
c4:ad:4e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:43 2025 by rpki-client