Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f8b035ba-37a6-4775-8f17-c23da022b897.roa
File: f8b035ba-37a6-4775-8f17-c23da022b897.roa (raw, json)
Hash identifier: zSuYuJcVPbrdEXAH5kfWelxDDpZNb8yHMASyslFiGnw=
Subject key identifier: F4:1B:9E:20:2E:4F:1F:73:81:AD:C2:DA:9D:28:39:F3:03:6A:69:86
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7044CC895DE7857C26222F4365C0931CCB60B630
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f8b035ba-37a6-4775-8f17-c23da022b897.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.248.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:44:cc:89:5d:e7:85:7c:26:22:2f:43:65:c0:93:1c:cb:60:b6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:29:b3:03:d8:6a:00:bb:65:ce:ed:db:cb:a3:
d0:21:13:a1:d7:78:b2:f1:cd:7d:92:91:57:24:7f:
ae:5f:5c:de:22:05:cb:b2:1b:0a:c4:7f:15:da:12:
f0:04:37:82:95:02:c2:f3:df:f0:cc:1c:ef:c6:c5:
7c:a6:22:8e:da:5d:7a:7c:4b:27:98:d2:c3:2b:f5:
83:b0:21:22:33:1e:b4:48:9e:55:13:92:3b:8f:3c:
97:01:6f:c3:75:32:93:d2:78:43:15:f8:cb:ba:ca:
77:96:7d:eb:8e:b7:f7:cf:fe:5b:63:d9:85:07:3a:
23:25:e4:da:2c:50:79:d7:78:5b:7d:ca:f5:8a:61:
3d:78:fb:69:0b:5c:37:8d:fe:57:36:58:27:2e:5c:
e9:f7:b0:b4:05:6c:19:19:e4:b5:1d:a1:6f:ab:6c:
f0:b6:44:c3:be:12:9e:0e:22:48:68:1a:39:d3:c5:
af:75:95:f9:31:ed:db:2f:7e:40:41:ba:01:18:52:
dc:46:f8:74:a7:1c:31:85:6a:d1:19:0c:c1:14:e1:
cb:e4:26:98:99:2b:ff:f6:ab:17:71:c0:1e:26:71:
06:c9:52:08:c7:3b:99:36:04:f8:53:67:ae:6b:62:
e0:48:e9:1e:fd:76:d4:d7:91:1a:ac:e6:60:39:79:
52:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1B:9E:20:2E:4F:1F:73:81:AD:C2:DA:9D:28:39:F3:03:6A:69:86
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f8b035ba-37a6-4775-8f17-c23da022b897.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.248.0.0/15
Signature Algorithm: sha256WithRSAEncryption
a6:1d:0e:44:62:2d:fd:fb:5c:6b:24:58:af:26:00:19:0b:c0:
b5:48:43:ef:f2:ef:19:95:0e:76:3f:99:50:4b:85:b5:09:8f:
cf:84:48:76:f2:3a:66:60:cc:5d:86:d0:61:f7:f8:27:93:22:
c0:98:87:e9:01:46:ef:77:2f:de:2e:d4:94:a4:7b:6e:75:08:
fb:36:dd:52:64:da:88:63:cb:60:ab:48:f0:e1:a4:98:df:01:
4e:5a:bb:2b:28:b1:b3:2b:a9:bc:d4:99:83:03:ba:4d:b5:96:
57:18:5d:a7:ac:0a:98:10:cd:11:ab:00:a4:1b:03:7f:7e:9e:
70:e2:9c:49:43:5a:6c:f4:4f:fc:ad:61:1b:51:fa:69:10:30:
d3:08:aa:79:d5:06:32:b2:d1:a2:d9:18:c0:3f:6c:9d:b0:d1:
cc:90:20:aa:3b:26:d3:bc:bd:ef:52:93:12:1b:b9:93:1b:3f:
99:ca:09:5d:6b:f9:3c:b2:69:5b:e8:13:e3:01:28:1d:69:43:
4c:72:f1:dd:ed:ae:8e:41:94:d3:b5:a5:ea:0a:55:49:ae:39:
a8:c1:35:ee:f8:6b:f5:a3:c9:c8:cd:27:93:45:6d:b1:9e:38:
06:30:0e:6c:32:e1:cd:0d:5e:4f:a4:71:9b:54:f9:ec:ae:95:
08:18:02:2c
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUcETMiV3nhXwmIi9DZcCTHMtgtjAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAxMDcwMDAwMDBaFw0yNTAyMTEyMzU5NTlaMHoxSTBHBgNV
BAUTQGU0YWQxNTEwOTdjM2FmYTI1YzUzMDk3MzljZGVkNzk2NjVlMmM2NGFlNjcw
YTNlYTllYTQ3MGM3MGIyYjhlNGMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIYpswPYagC7Zc7t28uj0CETodd4svHNfZKRVyR/rl9c3iIFy7IbCsR/FdoS
8AQ3gpUCwvPf8Mwc78bFfKYijtpdenxLJ5jSwyv1g7AhIjMetEieVROSO488lwFv
w3Uyk9J4QxX4y7rKd5Z9646398/+W2PZhQc6IyXk2ixQedd4W33K9YphPXj7aQtc
N43+VzZYJy5c6fewtAVsGRnktR2hb6ts8LZEw74Sng4iSGgaOdPFr3WV+THt2y9+
QEG6ARhS3Eb4dKccMYVq0RkMwRThy+QmmJkr//arF3HAHiZxBslSCMc7mTYE+FNn
rmti4EjpHv121NeRGqzmYDl5UikCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBT0G54g
Lk8fc4GtwtqdKDnzA2pphjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZjhiMDM1YmEtMzdhNi00Nzc1LThmMTctYzIzZGEwMjJiODk3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATP4MA0G
CSqGSIb3DQEBCwUAA4IBAQCmHQ5EYi39+1xrJFivJgAZC8C1SEPv8u8ZlQ52P5lQ
S4W1CY/PhEh28jpmYMxdhtBh9/gnkyLAmIfpAUbvdy/eLtSUpHtudQj7Nt1SZNqI
Y8tgq0jw4aSY3wFOWrsrKLGzK6m81JmDA7pNtZZXGF2nrAqYEM0RqwCkGwN/fp5w
4pxJQ1ps9E/8rWEbUfppEDDTCKp51QYystGi2RjAP2ydsNHMkCCqOybTvL3vUpMS
G7mTGz+Zyglda/k8smlb6BPjASgdaUNMcvHd7a6OQZTTtaXqClVJrjmowTXu+Gv1
o8nIzSeTRW2xnjgGMA5sMuHNDV5PpHGbVPnsrpUIGAIs
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:36 2025 by rpki-client