Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/212c799b-5564-4771-8ae1-3ff3424a3cc0.roa
File: 212c799b-5564-4771-8ae1-3ff3424a3cc0.roa (raw, json)
Hash identifier: k7+VnB8ryvqGCcpz6rFJevpoXjB0WLicGxWSrkfv70g=
Subject key identifier: E0:84:64:52:1F:E0:E3:F7:7E:71:D6:2A:5C:7F:54:1D:F6:F1:2B:47
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 609B1ACDECC2700B3A5B135CD0AC399785EA6D0A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/212c799b-5564-4771-8ae1-3ff3424a3cc0.roa
Signing time: Tue 31 Dec 2024 00:00:00 +0000
ROA not before: Tue 31 Dec 2024 00:00:00 +0000
ROA not after: Tue 04 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 130.24.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:9b:1a:cd:ec:c2:70:0b:3a:5b:13:5c:d0:ac:39:97:85:ea:6d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 31 00:00:00 2024 GMT
Not After : Feb 4 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:42:c8:03:76:57:b9:d4:67:e1:59:0c:8d:51:
eb:53:0b:f2:39:87:6c:5a:a6:18:da:81:4e:c9:56:
f9:a2:f1:1f:a8:61:80:fd:da:ed:53:ab:8f:d7:3a:
ef:75:32:ec:c1:de:d0:c3:8e:22:0d:df:f6:b3:88:
cf:c7:7c:b9:b6:54:0d:08:ad:c3:cf:5d:10:c9:45:
a2:c1:e8:89:86:22:82:4e:5b:9c:6f:a7:26:03:65:
ee:ea:43:e7:12:4d:03:c9:10:3d:38:fb:0c:d2:f9:
e6:c1:f9:37:ac:83:75:fb:c6:36:a7:5c:b6:64:9c:
fc:0c:d2:bb:92:89:49:d2:78:c8:9a:4a:ec:9a:bd:
ae:e8:b0:08:a3:00:10:f0:19:12:bc:61:31:76:2e:
38:dd:ce:d4:f9:2c:ae:73:3a:a5:fa:dc:0d:0c:23:
b4:4e:ec:2e:5c:93:3d:27:59:8a:e4:86:76:16:fa:
29:a5:d3:6d:86:44:1e:9a:b8:7d:40:8e:e8:c4:ad:
22:1b:94:65:2e:56:d2:5e:2c:29:1d:f7:38:f9:9e:
d0:fe:28:08:7f:ad:2f:98:e1:09:c1:b0:b5:d5:ea:
f3:40:27:20:20:2f:33:45:d4:82:f6:07:27:20:89:
1a:e3:1b:56:7f:86:e9:60:f5:2d:4c:68:24:17:dd:
02:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:84:64:52:1F:E0:E3:F7:7E:71:D6:2A:5C:7F:54:1D:F6:F1:2B:47
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/212c799b-5564-4771-8ae1-3ff3424a3cc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.24.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bc:18:69:ce:57:05:12:53:b9:b1:2b:75:11:e3:8e:ce:ce:36:
85:dd:0d:52:f8:46:71:bc:bd:15:d7:f4:f3:13:3d:84:68:a2:
58:7b:52:24:1d:21:30:8b:8a:10:02:3e:bf:e0:4b:53:f1:2d:
8e:ed:ab:1b:fc:68:8d:86:be:b7:64:ba:ee:8e:d6:dc:52:67:
2a:9f:a4:5b:80:cf:29:24:22:a2:67:98:53:ae:05:91:f7:aa:
f7:da:37:10:1f:40:44:18:c2:47:ce:65:36:e8:91:52:13:3e:
05:69:5d:19:5b:35:d6:9b:bb:46:c4:7d:89:8d:b5:e6:c0:74:
06:bb:89:da:9d:ef:92:51:eb:8b:76:88:26:8f:d3:db:b1:11:
6f:5b:3b:e5:e2:a1:e1:03:4c:85:ed:13:d3:84:ab:95:c3:9e:
6d:f4:52:d7:ad:d6:9e:91:a4:f3:31:d3:2b:4e:a9:ae:a9:31:
c8:b1:7c:ab:55:71:3e:ae:13:6e:d3:aa:f8:ad:ee:b1:d0:13:
98:33:77:ee:b9:56:36:08:3e:66:9a:aa:1b:aa:7e:8b:0b:38:
56:38:dc:f8:fa:2a:e3:32:f4:64:0d:b9:e9:9d:61:53:9e:40:
a6:bf:5b:03:14:af:c8:0b:5a:fc:6f:69:2c:20:0a:de:1f:ad:
74:30:7f:e9
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUYJsazezCcAs6WxNc0Kw5l4XqbQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMzEwMDAwMDBaFw0yNTAyMDQyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ1NWQ1MzA1ZTRhNWQ5MDc0MWI4ODdmZDg5NGU0MDQ4MTlhMGViZjMxNDYx
NjlkMzg2OTk0YjcxNDQ5YzRhYjYxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL9CyAN2V7nUZ+FZDI1R61ML8jmHbFqmGNqBTslW+aLxH6hhgP3a7VOrj9c6
73Uy7MHe0MOOIg3f9rOIz8d8ubZUDQitw89dEMlFosHoiYYigk5bnG+nJgNl7upD
5xJNA8kQPTj7DNL55sH5N6yDdfvGNqdctmSc/AzSu5KJSdJ4yJpK7Jq9ruiwCKMA
EPAZErxhMXYuON3O1PksrnM6pfrcDQwjtE7sLlyTPSdZiuSGdhb6KaXTbYZEHpq4
fUCO6MStIhuUZS5W0l4sKR33OPme0P4oCH+tL5jhCcGwtdXq80AnICAvM0XUgvYH
JyCJGuMbVn+G6WD1LUxoJBfdAo0CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTghGRS
H+Dj935x1ipcf1Qd9vErRzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MjEyYzc5OWItNTU2NC00NzcxLThhZTEtM2ZmMzQyNGEzY2MwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAIIYMA0G
CSqGSIb3DQEBCwUAA4IBAQC8GGnOVwUSU7mxK3UR447OzjaF3Q1S+EZxvL0V1/Tz
Ez2EaKJYe1IkHSEwi4oQAj6/4EtT8S2O7asb/GiNhr63ZLrujtbcUmcqn6RbgM8p
JCKiZ5hTrgWR96r32jcQH0BEGMJHzmU26JFSEz4FaV0ZWzXWm7tGxH2JjbXmwHQG
u4nane+SUeuLdogmj9PbsRFvWzvl4qHhA0yF7RPThKuVw55t9FLXrdaekaTzMdMr
TqmuqTHIsXyrVXE+rhNu06r4re6x0BOYM3fuuVY2CD5mmqobqn6LCzhWONz4+irj
MvRkDbnpnWFTnkCmv1sDFK/IC1r8b2ksIAreH610MH/p
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:13 2025 by rpki-client