Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a42a2ce0-b40d-465c-9ccb-43cad0772f6d.roa
File: a42a2ce0-b40d-465c-9ccb-43cad0772f6d.roa (raw, json)
Hash identifier: i9CnQOEzhBiYKAgOxhpCoJESiqASLADUqSRv5aJKfaE=
Subject key identifier: 19:B5:38:29:C4:65:49:64:6D:3D:64:37:8E:E1:FD:50:9F:34:FB:77
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 48041E1F8790827FE40FACDD6EEA030D86D2BEC1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a42a2ce0-b40d-465c-9ccb-43cad0772f6d.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 195.247.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:04:1e:1f:87:90:82:7f:e4:0f:ac:dd:6e:ea:03:0d:86:d2:be:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1c:9c:cd:9a:77:ab:ed:ec:a6:c9:ac:65:92:
c1:5a:01:53:6e:e4:11:3a:65:a3:73:38:27:f4:2e:
77:99:10:7c:a4:46:3f:bc:e4:79:2e:89:2a:ca:5d:
e7:fd:1c:58:44:fd:ba:d9:6c:73:c8:b9:43:d2:e3:
65:19:2a:33:13:85:3a:bd:06:36:60:31:b2:d1:49:
d2:82:9f:e2:fb:68:b4:bf:e3:9a:d2:91:da:95:f5:
14:fa:ea:4c:9d:3d:ae:17:a3:d4:31:18:0f:9e:51:
e2:05:ed:7b:68:d7:c9:16:87:fe:40:92:86:aa:c6:
1a:94:07:1c:20:0a:f2:9d:2b:8e:6a:d3:4a:54:c8:
7e:b7:e1:30:ae:97:8f:be:30:4b:a6:60:82:2f:16:
35:d0:e7:e1:69:92:e2:37:49:de:e5:24:19:21:d3:
95:06:cd:4c:32:72:24:2f:6e:df:da:68:b8:cc:80:
8c:b1:ec:90:4f:e3:32:67:83:23:0f:3a:92:52:b8:
d4:f2:65:48:9a:ef:23:02:04:fb:c2:9e:18:b5:92:
02:6b:f4:a0:e9:03:cb:b8:5a:62:5b:db:aa:eb:2e:
f7:b2:09:94:72:b4:c5:b0:8a:df:40:b8:bd:5c:a1:
87:87:76:c6:f2:de:05:07:e3:ec:00:e6:72:07:15:
27:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B5:38:29:C4:65:49:64:6D:3D:64:37:8E:E1:FD:50:9F:34:FB:77
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a42a2ce0-b40d-465c-9ccb-43cad0772f6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.247.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3c:e2:76:a9:ab:a6:83:5d:19:ee:be:5c:50:24:83:4d:26:fb:
6d:f1:18:55:fd:a2:d2:f7:a9:2d:68:59:ae:4c:f9:75:4b:ae:
00:33:51:5d:fc:70:9d:ed:c5:cb:d5:11:d1:68:8a:a6:1f:19:
fc:87:d1:9a:f3:6f:01:5b:32:dc:b9:a3:a2:83:fe:55:cf:d9:
28:9a:e3:a9:12:93:dc:2f:00:69:94:63:2f:25:9c:51:af:26:
ed:e4:20:ce:67:af:a1:47:ba:de:7c:ae:d0:97:24:c4:1c:e0:
e0:16:66:19:91:3c:c7:ef:c8:ed:b5:04:37:37:32:08:90:1d:
72:97:bb:70:46:fd:f1:b4:a8:d0:b2:43:cd:0e:fa:ee:05:16:
60:aa:ea:0f:82:82:49:fa:2a:ab:02:d5:c1:05:d8:3b:37:ef:
aa:df:b0:38:07:26:d4:c0:1b:13:67:d1:9d:9c:85:68:f8:76:
49:dc:2d:e7:9f:92:85:a6:f9:bd:9b:40:1d:23:01:68:14:bd:
1e:0a:65:5e:68:c2:ae:ae:a7:fc:6e:9c:96:ae:1e:18:97:c8:
31:0f:8d:e7:ee:a4:72:77:f5:35:cc:0a:e4:9b:76:ea:97:d6:
d7:6e:06:8c:f9:be:76:b7:4c:ee:7e:fc:19:02:4f:49:5d:d1:
64:94:4f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:15 2025 by rpki-client