Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a9218a5d-baaa-4846-8ae2-c5145614b368.roa
File: a9218a5d-baaa-4846-8ae2-c5145614b368.roa (raw, json)
Hash identifier: yiTpyf02/rKHTYOTpnOFHTayzxU8YaGqsCIef5Yh/vE=
Subject key identifier: A7:C3:85:B4:FA:43:30:7E:36:EA:33:85:89:65:40:9F:D2:24:FC:5E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2A1373B33C54EB06074D82D5A77CDC2E4C3DBB5A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a9218a5d-baaa-4846-8ae2-c5145614b368.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.188.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:13:73:b3:3c:54:eb:06:07:4d:82:d5:a7:7c:dc:2e:4c:3d:bb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:86:ce:63:a0:7c:b1:7d:ab:cc:69:2b:c6:fb:
de:e7:4c:83:ef:57:f1:a6:64:02:31:14:f7:cb:20:
57:76:2b:b0:08:a4:01:28:b8:52:79:ce:65:fe:36:
c2:c1:de:52:25:57:27:de:55:72:5c:6d:f4:85:7a:
7c:66:41:cd:93:e0:3d:c7:c0:37:57:00:4e:e1:fb:
66:59:9a:71:01:1d:9e:a1:04:ff:81:d6:47:23:a0:
7d:5c:29:f9:b0:cf:9f:a8:39:3a:ad:a5:6b:92:b0:
30:ce:eb:b2:03:ad:43:94:da:6b:0f:26:78:6a:c9:
ae:c8:4b:a5:cf:bf:16:fe:74:1b:f5:21:70:72:9d:
1d:4a:4b:2b:8b:60:25:36:83:9b:e7:cd:ed:9b:40:
cf:31:af:63:a8:7f:ca:d8:fd:87:41:8e:26:6d:1b:
83:59:45:a1:33:dc:da:f3:70:f9:ae:c2:5c:c3:13:
e8:78:7b:98:31:5b:71:d6:37:a3:22:9f:e3:c5:b9:
ee:f0:0b:42:0d:7f:a6:b9:97:e0:4b:b3:3c:bf:27:
fc:38:b5:d8:e9:4a:40:69:c3:a4:a4:f4:a9:b2:15:
ba:c2:06:09:42:5f:fa:78:74:1f:ff:56:38:28:a0:
6a:49:d0:0b:66:fa:db:77:73:58:0a:6a:96:8c:6d:
1c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C3:85:B4:FA:43:30:7E:36:EA:33:85:89:65:40:9F:D2:24:FC:5E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a9218a5d-baaa-4846-8ae2-c5145614b368.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.188.0.0/15
Signature Algorithm: sha256WithRSAEncryption
66:4e:85:15:51:df:36:c2:fb:41:ad:ee:c3:39:bd:e5:f6:42:
26:92:74:b9:8c:76:93:78:ce:d7:a2:39:10:41:60:59:74:eb:
15:f8:47:f3:d7:6f:f8:be:1c:32:3c:0e:60:33:9d:79:e2:3d:
01:47:c8:f2:f7:63:92:ae:60:1f:a2:ec:3b:46:b0:cc:01:14:
63:29:12:94:18:ab:c5:06:a4:d8:f4:18:e8:c5:0a:dc:a8:3a:
a8:d7:e6:79:eb:b3:6f:98:74:bf:cf:8f:20:a5:17:53:a5:d6:
79:21:f8:cc:49:c6:f9:1f:cc:eb:15:d9:0a:ef:47:67:e1:2f:
6d:e9:a2:cb:27:31:ed:03:50:db:05:17:00:ac:fd:83:0f:cd:
4c:20:9c:ee:a8:8e:b0:31:0b:49:cb:18:f7:ff:ff:46:2d:aa:
77:69:8c:d9:e1:2a:45:d7:36:be:fe:20:b2:20:43:48:92:9f:
e5:da:75:70:bd:51:62:97:d4:de:7d:9c:e9:6a:a8:bb:ef:99:
32:c1:a4:a6:55:a3:88:6f:5a:a3:38:92:33:53:f4:df:87:ec:
9c:c9:44:83:14:30:f8:db:c4:42:f2:03:3c:de:ad:f2:cc:af:
19:05:85:3a:c8:6b:2e:5b:08:3b:60:a2:09:2f:8e:5b:74:aa:
db:b0:ce:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:19 2025 by rpki-client