Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/988eabea-f594-4f5c-8be7-14382de8c36c.roa
File: 988eabea-f594-4f5c-8be7-14382de8c36c.roa (raw, json)
Hash identifier: aRirN/gCEkLIoBptBaCtcklKcldJ1MGtN8QOrodW9G4=
Subject key identifier: D1:3C:15:0A:8C:1B:A5:3F:5F:4F:DC:3E:23:75:9D:E7:54:C7:FC:C4
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7603F24F2196A0DBD690421ABA7DEC1715FF1790
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/988eabea-f594-4f5c-8be7-14382de8c36c.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 185.72.192.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:03:f2:4f:21:96:a0:db:d6:90:42:1a:ba:7d:ec:17:15:ff:17:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:03:2e:8b:bf:c6:86:bc:78:40:d4:98:0d:
02:6a:7a:56:b5:cc:52:01:de:88:22:84:4b:ed:57:
9a:64:b9:23:51:96:f8:00:b2:ba:9c:1e:44:60:bf:
23:2b:d6:59:db:19:71:d4:34:9d:3a:71:8d:d3:7b:
46:d7:87:fa:4c:19:d7:0c:10:c5:85:9e:44:cb:e3:
a6:34:f5:9e:90:fb:08:9f:62:27:a7:a8:b5:39:9f:
a1:a8:8f:c8:da:bc:1a:de:b2:80:b0:8c:01:b0:e7:
9f:eb:6e:ee:2a:9e:97:64:84:f0:d3:3e:cd:16:56:
50:1f:13:0c:45:b4:12:5f:e2:a7:c2:25:d2:4f:a6:
2f:fd:bb:2b:72:7e:a3:88:09:75:2b:74:5b:11:60:
39:5c:ea:e9:68:db:57:af:04:66:02:3f:6d:50:c5:
60:2b:cd:60:c0:53:0e:23:d0:0b:6e:9b:90:d4:ef:
7b:fc:d4:b2:65:eb:0e:5d:86:9c:ef:5e:19:ac:0c:
67:f0:ce:fb:fb:30:82:81:e4:5f:d1:b4:b2:30:2d:
f4:29:44:a8:dc:65:db:b7:35:b0:5a:b7:b6:55:5c:
65:77:9e:5c:b2:e4:c2:4d:66:c4:22:96:9f:bb:02:
ec:6d:f9:5e:71:6e:c9:2c:83:77:57:82:83:14:cf:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3C:15:0A:8C:1B:A5:3F:5F:4F:DC:3E:23:75:9D:E7:54:C7:FC:C4
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/988eabea-f594-4f5c-8be7-14382de8c36c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.192.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:7a:3f:f8:67:31:7c:a3:46:b2:51:7e:83:2a:7b:4d:23:8f:
06:a6:7e:bf:bc:e9:7d:5c:7d:ff:9f:70:c1:8c:82:06:bd:15:
06:61:f9:6e:82:f1:d4:f3:2a:5a:c5:e2:36:6d:a6:12:c6:de:
0d:d5:6d:73:21:9e:b0:c9:b2:8f:34:29:25:10:9d:88:df:48:
5d:f2:fc:3a:d9:37:bf:32:49:ab:d4:9b:a1:98:51:71:b3:61:
1e:1d:e5:5f:cd:23:13:47:9d:91:b1:11:03:90:d4:0b:43:6c:
4e:4d:d2:00:8f:9b:24:24:7c:56:29:b9:7e:ef:4b:98:d5:97:
de:d9:cb:2a:f7:c6:2c:0f:db:be:0a:e1:48:b9:de:35:bb:47:
ca:ee:e3:cc:f7:cf:a1:e1:27:eb:04:38:8b:87:dd:54:b9:a6:
b9:83:82:d1:a3:4c:a4:33:16:c2:d5:2d:d2:df:67:df:59:20:
65:51:cb:68:7d:e9:2c:18:8f:96:bc:80:82:89:5e:45:fd:e0:
07:91:56:02:19:89:25:36:5c:46:39:f1:60:97:7f:aa:1b:95:
73:93:90:60:3a:82:a2:3a:e6:cd:a4:34:6c:59:5c:10:62:76:
59:9d:c1:1b:89:4c:66:d3:9a:8d:6c:09:ff:82:11:b6:f9:ca:
e1:10:bf:ad
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUdgPyTyGWoNvWkEIaun3sFxX/F5AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMzAwMDAwMDBaFw0yNTAyMDMyMzU5NTlaMHoxSTBHBgNV
BAUTQDJlY2IyODcxZGM3OGY3OTE4ZTg4Mjc5OTgwZGU0OWZkOWJlMGQ5ZTU2NDgw
NDgwMDJmZjg0NjQ1MGI5MzFjZmYxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK4WAy6Lv8aGvHhA1JgNAmp6VrXMUgHeiCKES+1XmmS5I1GW+ACyupweRGC/
IyvWWdsZcdQ0nTpxjdN7RteH+kwZ1wwQxYWeRMvjpjT1npD7CJ9iJ6eotTmfoaiP
yNq8Gt6ygLCMAbDnn+tu7iqel2SE8NM+zRZWUB8TDEW0El/ip8Il0k+mL/27K3J+
o4gJdSt0WxFgOVzq6WjbV68EZgI/bVDFYCvNYMBTDiPQC26bkNTve/zUsmXrDl2G
nO9eGawMZ/DO+/swgoHkX9G0sjAt9ClEqNxl27c1sFq3tlVcZXeeXLLkwk1mxCKW
n7sC7G35XnFuySyDd1eCgxTPn3sCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTRPBUK
jBulP19P3D4jdZ3nVMf8xDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
OTg4ZWFiZWEtZjU5NC00ZjVjLThiZTctMTQzODJkZThjMzZjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArlIwDAN
BgkqhkiG9w0BAQsFAAOCAQEAyno/+GcxfKNGslF+gyp7TSOPBqZ+v7zpfVx9/59w
wYyCBr0VBmH5boLx1PMqWsXiNm2mEsbeDdVtcyGesMmyjzQpJRCdiN9IXfL8Otk3
vzJJq9SboZhRcbNhHh3lX80jE0edkbERA5DUC0NsTk3SAI+bJCR8Vim5fu9LmNWX
3tnLKvfGLA/bvgrhSLneNbtHyu7jzPfPoeEn6wQ4i4fdVLmmuYOC0aNMpDMWwtUt
0t9n31kgZVHLaH3pLBiPlryAgoleRf3gB5FWAhmJJTZcRjnxYJd/qhuVc5OQYDqC
ojrmzaQ0bFlcEGJ2WZ3BG4lMZtOajWwJ/4IRtvnK4RC/rQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 23:53:11 2025 by rpki-client