Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0ad4a04d-fea6-4341-bc93-2743f2493a1e.roa
File: 0ad4a04d-fea6-4341-bc93-2743f2493a1e.roa (raw, json)
Hash identifier: HShho1vAN34AFMotXtMVo5DQ8oTj5DwPyPEjtzgTd8c=
Subject key identifier: 87:18:28:12:18:C7:43:A3:FD:A8:D4:CA:35:72:3B:5C:7C:B8:49:B5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1243387A6EC217409B33ECE2AB6F1D4BC3102750
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0ad4a04d-fea6-4341-bc93-2743f2493a1e.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.92.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:43:38:7a:6e:c2:17:40:9b:33:ec:e2:ab:6f:1d:4b:c3:10:27:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:42:95:e6:d7:f8:c0:3b:a4:e4:a2:c5:e8:e3:
9b:87:cb:82:90:b2:89:13:2a:10:36:f1:3c:7c:89:
e8:a4:35:cc:cd:a9:0f:2d:76:b5:62:5a:58:c5:02:
fa:4a:a0:03:a7:8c:bb:8d:a4:95:e8:23:50:dd:b8:
ed:6e:1d:92:09:d5:ed:df:f7:17:f7:ad:93:58:d1:
05:7f:ed:5f:8e:1c:1c:60:e5:ea:c2:ca:cf:2b:dd:
61:3e:02:4c:09:eb:d5:c8:12:1c:2d:38:76:37:81:
4f:35:ff:de:4e:f7:c1:1b:e6:1d:c8:e9:7b:dd:08:
b9:59:b5:61:5c:12:5f:48:64:8a:fb:f9:4c:78:3d:
37:4e:49:52:af:ad:b6:7a:49:d2:43:a3:13:1f:a6:
f2:6a:2c:c3:7c:b8:0b:29:1a:96:1d:82:59:39:57:
ab:01:28:53:fa:cb:12:a5:07:4d:54:7d:41:f6:c2:
ce:6a:6f:d3:06:05:a3:b1:28:fd:1c:6d:0c:f9:64:
c5:eb:80:9b:8c:e8:40:a5:7b:db:01:69:1b:99:2b:
8a:d2:5f:48:0b:10:5e:7e:b3:f1:89:57:ed:66:e0:
f8:d6:19:a8:b0:fb:61:50:6c:41:30:98:2e:c0:68:
1c:33:1f:0b:fb:ca:43:aa:80:9c:41:b9:7d:fc:1d:
42:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:18:28:12:18:C7:43:A3:FD:A8:D4:CA:35:72:3B:5C:7C:B8:49:B5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0ad4a04d-fea6-4341-bc93-2743f2493a1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.92.0.0/14
Signature Algorithm: sha256WithRSAEncryption
66:80:cd:f1:e0:01:79:30:62:fc:37:ce:f4:b6:fe:3a:06:e8:
b2:d0:71:37:55:fc:00:3c:30:61:a2:ab:94:7f:c8:59:ca:66:
8f:5b:ba:f8:00:4f:88:5c:70:99:c8:21:83:5e:f8:0b:ee:f5:
ad:67:6c:07:d0:03:b7:4f:90:b8:b5:66:c9:4e:95:07:e6:9c:
9d:e6:ef:10:bb:5b:2c:05:70:32:e0:a0:7e:76:97:cf:50:c8:
54:18:e1:af:e9:ad:96:1e:7d:52:0e:69:f6:d1:ec:59:b0:c7:
d0:88:c2:5b:be:99:7f:d0:df:14:8b:f2:25:2d:93:f3:97:dc:
53:b4:5b:84:e1:76:b1:fa:83:bc:83:ba:50:34:5d:bd:5f:e7:
c0:92:cc:bd:e1:b5:79:ea:27:a7:10:81:b5:02:08:4d:2d:42:
15:56:51:c6:b7:29:63:11:40:63:53:ab:6f:2f:29:25:bf:34:
f1:64:3d:cb:33:93:6c:71:2f:0e:e9:f4:8d:d6:c8:64:b4:b1:
59:0c:41:86:95:4b:c1:d1:59:70:06:0e:08:7c:39:a7:49:9e:
65:2d:06:bf:ed:e2:f4:f4:fb:99:49:f3:68:2f:3d:92:95:a8:
c1:05:f3:9a:af:7c:42:ec:40:97:e7:6d:c8:1b:48:2e:64:1d:
ca:99:d2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:26 2025 by rpki-client