Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6c85eff7-1d56-4889-aa3f-1d035cd8e517.roa
File: 6c85eff7-1d56-4889-aa3f-1d035cd8e517.roa (raw, json)
Hash identifier: uWp7WbrQ4Wj6u4tI8d7XhS+jep1x/2VGrCLwiPFJjHw=
Subject key identifier: 8B:41:4C:0F:2C:5A:D7:AE:55:9F:5F:2D:99:C6:EF:3D:F3:7F:10:9B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 036C519BE882E01B43D83DEF71B43702B948458B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6c85eff7-1d56-4889-aa3f-1d035cd8e517.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 185.143.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:6c:51:9b:e8:82:e0:1b:43:d8:3d:ef:71:b4:37:02:b9:48:45:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0c:b0:38:f2:57:fe:80:5e:89:c9:7d:08:20:
c7:d1:61:a7:96:4a:3a:54:a9:77:6f:a9:31:fb:17:
a1:f1:35:61:0a:a3:64:3a:6a:b0:eb:cb:c6:57:24:
f9:c4:48:22:df:33:d0:93:2b:f8:8d:30:96:c1:db:
7d:68:8e:65:fd:a6:37:c6:f4:3c:e1:0d:15:dd:a4:
a6:ba:1c:35:d3:c4:32:41:ea:23:bb:70:46:4b:a0:
08:b7:bd:9b:3b:35:a2:34:86:f8:7f:8d:08:8f:e5:
81:56:9e:72:07:7c:fd:c7:a9:c8:04:61:1b:f1:45:
be:64:a1:1f:55:79:a2:79:2a:6d:91:0d:bf:52:87:
a0:67:5a:1e:48:9e:22:f7:0c:95:74:2c:fe:8f:9f:
ba:94:66:7e:b1:46:ab:6a:8c:6b:b0:ef:95:eb:e4:
64:0f:86:2f:19:d2:bd:f2:cd:b4:9e:32:96:ed:6b:
65:b5:cf:62:4b:16:d4:24:0b:e2:43:aa:00:43:40:
df:98:c4:70:7c:54:46:92:dc:cb:e2:e3:02:33:88:
41:2b:9d:9b:76:37:b3:ee:cb:00:af:b0:24:97:f0:
33:dc:91:fa:66:9d:ff:2a:24:75:c5:00:6f:56:7e:
20:1a:ee:08:c6:88:69:ac:ff:97:79:e2:2a:7b:94:
dc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:41:4C:0F:2C:5A:D7:AE:55:9F:5F:2D:99:C6:EF:3D:F3:7F:10:9B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6c85eff7-1d56-4889-aa3f-1d035cd8e517.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.16.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:e5:88:ec:8d:c2:17:04:a3:8b:b8:7b:ee:30:3f:57:cb:51:
e6:cf:c3:74:0f:d5:5b:05:56:fa:d1:2a:c0:23:df:9c:ec:a2:
2a:e9:95:0a:2a:15:2d:6e:7e:38:b2:43:23:df:14:69:03:dc:
de:65:b5:82:bc:8d:2a:ce:24:7c:f7:47:01:fc:5e:2f:1c:50:
49:e8:b4:fc:d5:94:39:d6:a2:61:c4:96:e5:65:99:a1:b0:a7:
3a:ac:03:4c:38:e8:19:3d:a9:95:79:b4:69:c6:98:f0:67:d4:
a8:68:c3:b8:81:fa:8e:91:53:03:8e:d1:59:73:80:a1:1e:1f:
43:36:16:99:3e:89:c1:86:70:fe:ef:ee:e9:05:cb:e9:19:96:
ce:62:0e:6f:8e:3d:1a:37:b5:56:8c:0d:d1:ea:0a:ba:d1:a5:
c2:b7:90:10:e8:4e:06:b9:27:17:fe:8d:a9:4e:0d:2c:57:82:
06:8d:2b:60:4a:b2:4a:62:87:5b:f4:1d:81:6d:fe:8e:92:92:
c0:e8:8f:0d:89:36:3c:0d:33:e3:36:41:33:57:27:65:d9:b4:
f9:c9:9f:17:2e:e0:f1:28:db:62:c0:c8:35:71:6e:ac:89:20:
fd:6c:95:8f:a1:56:ce:98:4a:44:29:55:f6:77:00:ec:b6:ee:
b3:ab:1b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:31 2025 by rpki-client