Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dbd10abb-63fa-4e02-bbda-3369cb1b837f.roa
File: dbd10abb-63fa-4e02-bbda-3369cb1b837f.roa (raw, json)
Hash identifier: 7xe6QK6d0SWwbEUmlJeNlj5zzxz1vGUbhKJsryg7wec=
Subject key identifier: 19:0B:A1:9D:50:3E:2A:FD:2E:8E:18:02:86:6C:FC:E1:48:CA:02:E5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4372F9D5032D34FE7C92CB31D4DCA52D76948D9B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dbd10abb-63fa-4e02-bbda-3369cb1b837f.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 143.65.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:72:f9:d5:03:2d:34:fe:7c:92:cb:31:d4:dc:a5:2d:76:94:8d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:86:61:2f:29:d4:e7:9c:0f:fa:9d:3d:0a:
ac:9e:97:b7:8c:5e:b3:48:5b:08:be:97:48:25:49:
a4:9b:0b:c1:8a:19:a5:c2:d6:0e:d4:f5:bf:0f:16:
2c:70:fc:94:ff:f3:f9:08:52:d2:d9:bf:87:85:09:
48:80:c5:ab:4b:fd:48:ab:ed:fa:8e:3f:ff:02:3e:
5e:66:5a:e7:40:81:ec:be:b0:a3:b2:bc:4c:c7:ef:
57:ad:56:97:81:05:61:c5:84:6b:ee:75:2d:59:08:
67:49:d6:21:24:1f:8b:57:3e:aa:e6:69:14:75:2d:
b3:86:ac:6e:52:ef:84:22:e4:ce:c0:ac:9d:ee:72:
4c:ed:b4:05:0a:72:95:e2:f4:41:f1:e4:8c:ba:0a:
50:56:c1:65:9c:4a:1c:99:c4:7b:c3:1a:14:61:4a:
a0:8e:d5:42:4f:12:4e:20:b4:89:23:66:b1:74:8f:
68:b8:4b:84:1d:e2:99:db:09:d1:dd:16:73:fe:f9:
91:76:3c:5e:e4:a3:bc:e3:d4:1a:40:2a:36:53:d2:
d9:09:aa:e0:97:16:08:f9:6d:0b:92:6f:47:a6:f7:
5a:cb:af:20:03:59:b7:08:05:a0:4a:67:b9:04:70:
18:cf:2c:24:8e:9d:29:86:1b:94:1e:90:78:37:70:
a9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0B:A1:9D:50:3E:2A:FD:2E:8E:18:02:86:6C:FC:E1:48:CA:02:E5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dbd10abb-63fa-4e02-bbda-3369cb1b837f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.65.0.0/17
Signature Algorithm: sha256WithRSAEncryption
26:01:d7:15:7b:07:c6:0b:b8:f8:8c:22:2d:41:e6:8b:07:e5:
30:3f:b5:f6:ca:08:60:31:ee:59:fc:93:5c:c7:65:30:5b:14:
68:4e:9a:22:35:e6:25:07:19:b7:1b:bd:eb:0b:79:ed:c6:99:
76:d9:1b:8c:fe:5a:74:2c:1b:df:5f:a9:31:18:e2:11:60:72:
1f:e4:21:63:d9:c9:e2:a6:5a:7d:16:45:81:3a:43:f4:89:6f:
e3:cd:1d:60:3b:12:0a:a8:f4:54:26:94:de:93:84:3c:c5:85:
96:3b:41:fb:bf:ce:39:9a:c1:00:30:7b:99:42:da:16:57:47:
74:eb:c0:d7:47:87:fe:3e:da:2f:aa:51:c0:af:7e:d3:48:07:
cd:59:4c:78:e4:43:49:b3:c4:44:83:2b:90:cd:d1:20:4d:9b:
34:bf:39:e5:01:b3:c2:bd:3c:d4:88:1c:27:b2:94:cb:9e:06:
77:ce:44:80:2e:24:3c:23:56:1e:bf:b9:48:05:13:0b:87:b7:
fe:14:70:3c:94:8a:47:94:d3:e2:f7:cc:28:29:e2:75:e0:aa:
f2:b9:14:b9:06:a2:d1:67:98:4a:af:8a:5a:7f:22:e2:fa:3f:
b0:ec:a6:e5:58:ec:9b:11:86:41:fc:e3:e9:08:5a:f2:c8:af:
4c:7a:8b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:34 2025 by rpki-client