Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e9a80014-1059-43a6-8d7d-1ed06f9d7a3e.roa
File: e9a80014-1059-43a6-8d7d-1ed06f9d7a3e.roa (raw, json)
Hash identifier: TRQwfi22VKEoAx3T3fw/1kqbxdcAIc+3K63K31ehG3w=
Subject key identifier: BA:1A:37:A1:FD:F8:2D:50:DF:B6:C5:A4:5B:01:79:DF:FA:C0:9D:05
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3F87493120EF44D7DDEC1EADF45CB4B59C5B7F48
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e9a80014-1059-43a6-8d7d-1ed06f9d7a3e.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.214.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:87:49:31:20:ef:44:d7:dd:ec:1e:ad:f4:5c:b4:b5:9c:5b:7f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:98:7c:7c:f7:3c:9f:ea:bb:6d:9d:2d:bb:
a9:a0:fb:59:45:40:e2:97:56:77:36:ab:ae:db:2e:
88:1c:c3:c8:d7:f5:62:15:4d:9d:4e:44:2c:00:2e:
9b:ca:3f:07:88:24:ea:0c:4d:8b:20:ca:84:54:79:
ec:62:19:b0:41:7a:11:fc:be:77:17:96:1a:68:c1:
8c:f7:f0:03:0d:6a:e0:02:6e:e4:ba:5f:0f:72:e8:
1c:f7:78:fd:83:3b:8b:2c:7c:0e:ec:86:ce:16:02:
20:75:92:94:23:34:aa:3c:0b:8c:f1:47:54:aa:0a:
90:4b:d6:df:6d:dc:a3:6e:95:30:ae:3e:e2:a0:c5:
4f:a8:9d:76:09:5e:5e:60:95:5f:4b:39:00:16:77:
dc:b9:cf:e2:10:f1:e9:15:bd:26:4f:cd:a7:02:03:
c8:aa:10:cc:fe:06:ac:b8:c0:7b:9f:79:35:11:6c:
90:1c:c1:6c:85:80:70:6b:ac:52:af:13:5f:5a:1d:
b8:a0:a0:04:41:7d:ec:6d:59:c4:9d:3f:7a:a1:a9:
00:0b:f7:de:2e:aa:16:32:e9:63:f5:37:15:8b:10:
47:5c:98:ef:a9:5a:1e:9d:3e:83:57:ea:ea:56:fe:
fc:0d:58:b9:12:8b:27:2c:0d:78:ec:06:65:39:45:
13:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1A:37:A1:FD:F8:2D:50:DF:B6:C5:A4:5B:01:79:DF:FA:C0:9D:05
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e9a80014-1059-43a6-8d7d-1ed06f9d7a3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.214.0.0/15
Signature Algorithm: sha256WithRSAEncryption
47:d5:bc:6c:b9:c1:4b:d5:17:ba:eb:73:dd:1a:87:af:be:b1:
b5:08:5e:1d:ef:fc:f2:06:ae:19:60:1f:cd:9f:94:98:4c:d8:
3c:02:98:32:d4:a1:ea:94:c6:21:39:ec:12:2e:8f:45:0b:19:
ac:52:c5:42:93:69:43:0b:63:b2:ab:91:45:b2:08:6f:38:b1:
a3:01:15:ee:d1:e2:85:96:55:8d:85:09:19:c1:1c:fe:2d:59:
17:bb:68:ef:19:c8:5c:2d:4c:66:69:e3:7d:b6:94:9c:ad:12:
27:1e:ff:a7:a2:5e:db:19:32:bf:cf:81:dc:99:85:00:9e:71:
fa:67:ab:94:b7:21:f0:4e:91:55:0b:8d:ab:a2:c2:31:38:07:
25:17:b0:10:bf:88:b7:85:bb:33:c0:62:6b:e9:03:8b:3b:54:
c2:84:84:b1:d9:e8:1d:a8:6b:51:b8:d0:b2:95:8b:d6:fd:d0:
fe:f8:3c:8b:f5:f3:9e:c0:a1:d8:76:0d:0a:9a:2a:8a:a5:47:
ae:67:25:a7:04:c3:ed:70:4c:cf:19:97:ae:86:1f:02:b0:b3:
66:46:cb:4f:6a:07:70:f5:ef:46:f6:b9:ef:4b:70:1f:8c:9d:
67:f9:bc:e6:de:82:ce:75:8f:32:c6:4d:3e:c8:52:84:fe:38:
99:be:8b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:45 2025 by rpki-client