Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7460c452-c09b-4ef6-8122-f8bcc7d719ef.roa
File: 7460c452-c09b-4ef6-8122-f8bcc7d719ef.roa (raw, json)
Hash identifier: 2zmPX0YzOaTlmMaGiIweo42r5ozVw20gKZ69Ciou+Ik=
Subject key identifier: 37:7E:E8:74:6A:88:C3:A3:8D:3C:C5:9C:9C:C2:77:D2:75:0D:DD:BC
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 623B54141A62F0AB2F0C6499CA9F2F6C1F7C60E2
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7460c452-c09b-4ef6-8122-f8bcc7d719ef.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a01:578::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:3b:54:14:1a:62:f0:ab:2f:0c:64:99:ca:9f:2f:6c:1f:7c:60:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:86:48:f3:60:42:cd:b5:20:af:b8:51:a1:
88:93:df:b4:2d:94:78:5e:40:28:24:0f:c7:6c:ec:
0c:58:54:20:48:85:ed:f1:df:79:2a:d9:a3:a4:eb:
49:45:94:16:19:27:08:24:ff:d7:5a:e9:94:63:72:
9b:95:50:16:3f:d2:fe:aa:16:6f:ad:fe:8e:f3:5e:
9f:b1:9f:1f:6e:52:b1:77:f8:d4:ef:7d:0a:cd:03:
c5:ea:fc:54:4c:d7:15:1a:d0:2b:4e:fa:e0:4d:37:
b6:f8:8e:cc:1b:77:01:c4:c0:44:5e:8d:dc:21:c1:
23:67:7c:39:d7:2c:c7:22:fc:fd:ae:b0:19:f6:b4:
cd:7b:57:eb:88:f3:36:69:8f:12:e0:c5:aa:f4:ac:
49:fc:6e:e9:bc:02:78:f7:7a:40:33:54:8f:89:ed:
e3:8d:c3:63:fe:29:49:ac:1e:df:91:92:d3:30:bf:
a5:b6:4b:60:3b:d1:81:04:4f:37:3a:aa:2f:e4:3b:
55:06:b1:95:2c:65:46:df:d3:25:ce:2e:34:4a:bd:
51:c8:8b:1c:c8:79:f0:b6:60:5a:23:72:ce:b4:85:
ed:e4:68:47:bc:16:7a:39:96:3d:0b:f6:46:67:49:
ff:a8:a4:b4:05:94:74:f4:95:7a:4e:b4:0d:90:f8:
c7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7E:E8:74:6A:88:C3:A3:8D:3C:C5:9C:9C:C2:77:D2:75:0D:DD:BC
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7460c452-c09b-4ef6-8122-f8bcc7d719ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578::/36
Signature Algorithm: sha256WithRSAEncryption
8d:9d:64:c4:71:e4:a7:9c:e6:f3:5d:e5:af:9e:d8:6c:a0:9b:
71:12:4d:51:6a:1a:51:e1:d4:74:6b:29:03:cb:bd:7c:e9:ac:
0d:95:ad:b9:37:f1:b0:7b:aa:c9:8e:30:88:4a:32:ef:35:0c:
f2:2b:3a:ec:57:b4:43:46:8c:4e:64:10:67:2f:0c:b5:5d:b4:
64:3d:dd:b5:15:cc:43:ee:9b:87:6d:74:a2:bd:32:b2:02:8a:
65:f4:63:07:d0:70:25:4f:53:76:43:72:1e:36:20:d8:ec:15:
0f:91:f1:fa:f4:4e:8d:a9:cb:c8:98:d3:d2:02:e0:78:6b:1f:
4f:53:51:c0:cf:ad:ee:a9:99:68:c1:84:cf:75:f5:ed:d4:83:
cc:76:fe:cc:aa:34:64:9c:6f:da:30:d0:35:6a:de:c0:fb:25:
d2:30:fb:fe:04:1c:e4:4e:f4:7c:ab:86:fa:8b:d5:92:ec:36:
5a:48:f6:06:24:cb:68:de:ec:c5:b3:cf:0f:f6:12:62:f8:40:
d1:7e:73:f4:52:2f:19:39:2b:d2:ee:a7:45:60:fc:93:7a:a3:
c9:93:6c:8b:dd:77:55:0d:01:fb:da:33:13:61:21:c8:9d:29:
06:2a:85:ea:f1:28:5a:20:cd:bc:c3:6d:eb:99:bb:eb:5d:e1:
00:e1:1b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:41:50 2025 by rpki-client